StackRadar

GHSA-hrxh-6v49-42gf

High

Advisory

Published 21 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,040
of 17,787 indexed, latest versions
Container images
2,480
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Carried by container images the latest versions of 2,040 of 17,787 indexed charts deploy, on 2,480 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+112 more1.82.12,480
OSV records
GHSA-hrxh-6v49-42gfGO-2026-6061

Charts affected

2,040 by stars
ChartLatestAffected imagesRadar Score
ranchercarbide-charts2.15.12 of 2See more

rancher carbide-charts 2.15.1

2 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
google.golang.org/grpc@v1.79.3
1.82.1
rancher/shell:v0.8.1f293af9c635f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

1,456
casdoor-helm-chartscasdoor4.4.01 of 1See more

casdoor-helm-charts casdoor 4.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
casbin/casdoor:4.4.08511c0757ac3
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

1,103
castai-tetragoncastaiVerified publisher0.6.11 of 4See more

castai-tetragon castai 0.6.1

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
google.golang.org/grpc@v1.48.0
1.82.1

Open the chart page →

4,136
oci-csi-drivercastaiVerified publisher1.13.86 of 7See more

oci-csi-driver castai 1.13.8

6 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
google.golang.org/grpc@v1.79.3
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

1,698
temporalcastaiVerified publisher0.54.25 of 14See more

temporal castai 0.54.2

5 of the 14 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
google.golang.org/grpc@v1.62.1
1.82.1
temporalio/admin-tools:1.26.237e2e33dbd7b
google.golang.org/grpc@v1.67.1
1.82.1
temporalio/server:1.26.21e2626efcbc1
google.golang.org/grpc@v1.56.3
1.82.1
temporalio/ui:2.33.05c586a3c8ec5
google.golang.org/grpc@v1.66.0
1.82.1
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
google.golang.org/grpc@v1.64.0
1.82.1

Open the chart page →

16,197
catalyst-agentscatalyst-agents0.1.3010 of 18See more

catalyst-agents catalyst-agents 0.1.30

10 of the 18 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
google.golang.org/grpc@v1.70.0
1.82.1
grafana/grafana:13.1.3ab5cb380e3ff
google.golang.org/grpc@v1.79.3
1.82.1
grafana/loki:3.0.0757b5fadf816
google.golang.org/grpc@v1.62.1
1.82.1
grafana/loki-canary:3.0.028d7c00588aa
google.golang.org/grpc@v1.62.1
1.82.1
grafana/tempo:2.5.0f0200a9bff6d
google.golang.org/grpc@v1.63.2
1.82.1
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
google.golang.org/grpc@v1.82.0
1.82.1
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
google.golang.org/grpc@v1.29.1
1.82.1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
google.golang.org/grpc@v1.79.3
1.82.1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.3bdb31f3121a2
google.golang.org/grpc@v1.79.3
1.82.1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

14,865
kube-ceemsceemsOfficialVerified publisher1.40.01 of 5See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/grafana:13.2.1-distroless3600073f45a9
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

640
cert-manager-csi-driver-spiffecert-managerOfficialVerified publisher0.15.02 of 4See more

cert-manager-csi-driver-spiffe cert-manager 0.15.0

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

567
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
google.golang.org/grpc@v1.75.1
1.82.1

Open the chart page →

1,321
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

1,263
cert-manager-webhook-abioncert-manager-webhook-abion1.3.21 of 1See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
google.golang.org/grpc@v1.69.2
1.82.1

Open the chart page →

1,087
cert-manager-webhook-bunnycert-manager-webhook-bunnyVerified publisher1.0.21 of 1See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
google.golang.org/grpc@v1.69.4
1.82.1

Open the chart page →

832
cert-manager-webhook-civocert-manager-webhook-civoVerified publisher0.0.0-05b683cb6efdc99135f68af18007954e74f184041 of 1See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
okteto/civo-webhook:0.5.357cd51176538
google.golang.org/grpc@v1.57.0
1.82.1

Open the chart page →

1,271
cert-manager-webhook-hcloud-zonescert-manager-webhook-hcloud-zones0.1.51 of 1See more

cert-manager-webhook-hcloud-zones cert-manager-webhook-hcloud-zones 0.1.5

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones:0.1.5a7a846bba3e8
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

408
cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapiVerified publisher1.5.21 of 1See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi:1.5ded797477896
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

2,345
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
google.golang.org/grpc@v1.54.0
1.82.1

Open the chart page →

1,752
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
google.golang.org/grpc@v1.75.1
1.82.1

Open the chart page →

1,073
cert-manager-webhook-regerycert-manager-webhook-regery1.0.01 of 1See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

882
cert-manager-webhook-solidservercert-manager-webhook-solidserverVerified publisher1.0.21 of 1See more

cert-manager-webhook-solidserver cert-manager-webhook-solidserver 1.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

520
cert-utils-operatorcert-utils-operator1.3.121 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

7,776
clechaosnative0.2.72 of 6See more

cle chaosnative 0.2.7

2 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
chaosnative/cle-auth-server:2.7.072ee352bc333
google.golang.org/grpc@v1.32.0
1.82.1
chaosnative/cle-server:2.7.0e7bcff4a20c0
google.golang.org/grpc@v1.42.0
1.82.1

Open the chart page →

16,395
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

4,409
dv-podcharonOfficialVerified publisher0.19.12 of 5See more

dv-pod charon 0.19.1

2 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
google.golang.org/grpc@v1.80.0
1.82.1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
google.golang.org/grpc@v1.75.0
1.82.1

Open the chart page →

7,457
memoscharts-derwitt-devVerified publisher1.4.01 of 1See more

memos charts-derwitt-dev 1.4.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
neosmemo/memos:0.30.071a5b4738d1b
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

555
checker-edgechecker-edge1.1.111 of 1See more

checker-edge checker-edge 1.1.11

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/imcitius/checker-edge:1.1.1174426c1fe00f
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

660
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
google.golang.org/grpc@v1.27.0
1.82.1

Open the chart page →

8,408
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
google.golang.org/grpc@v1.74.2
1.82.1

Open the chart page →

961
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
google.golang.org/grpc@v1.26.0
1.82.1

Open the chart page →

2,869
promtailchoerodon0.23.01 of 1See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
google.golang.org/grpc@v1.26.0
1.82.1

Open the chart page →

2,821
kubevirt-cloud-controller-managerchristianhuthVerified publisher0.0.21 of 1See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

656
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
google.golang.org/grpc@v1.78.0
1.82.1

Open the chart page →

1,986
netbird-reverse-proxychristianhuthVerified publisher0.1.01 of 1See more

netbird-reverse-proxy christianhuth 0.1.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
netbirdio/reverse-proxy:0.72.43104d5ca3a76
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

917
promlenschristianhuthVerified publisher1.6.01 of 1See more

promlens christianhuth 1.6.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
prom/promlens:v0.4.04a377d1a0eaa
google.golang.org/grpc@v1.82.0
1.82.1

Open the chart page →

128
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
google.golang.org/grpc@v1.64.1
1.82.1

Open the chart page →

7,006
mantlechronicleVerified publisher0.1.31 of 1See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
mantlenetworkio/l2geth:v0.4.36bf383d14291
google.golang.org/grpc@v1.55.0
1.82.1

Open the chart page →

1,934
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
google.golang.org/grpc@v1.22.1
1.82.1

Open the chart page →

3,595
vulnerability-operatorckotzbauerVerified publisher0.31.151 of 1See more

vulnerability-operator ckotzbauer 0.31.15

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/vulnerability-operator:0.28.167008df32715c
google.golang.org/grpc@v1.80.0
1.82.1

Open the chart page →

187
clairclair-helmVerified publisher0.12.01 of 3See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.9.023329c3368e4
google.golang.org/grpc@v1.77.0
1.82.1

Open the chart page →

1,618
calico-cniclastixVerified publisher3.28.13 of 3See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
calico/cni:v3.28.1e486870cfde8
google.golang.org/grpc@v1.61.1
1.82.1
calico/kube-controllers:v3.28.1eadb3a25109a
google.golang.org/grpc@v1.61.1
1.82.1
calico/node:v3.28.1d8c644a8a3ee
google.golang.org/grpc@v1.61.1
1.82.1

Open the chart page →

3,050
capi-kamaji-vsphere-fullclastixVerified publisher1.0.19 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
google.golang.org/grpc@v1.68.1
1.82.1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
google.golang.org/grpc@v1.65.0
1.82.1
registry.k8s.io/csi-vsphere/driver:v3.4.0f5349a8ae3f3
google.golang.org/grpc@v1.67.1
1.82.1
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
google.golang.org/grpc@v1.67.1
1.82.1
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
google.golang.org/grpc@v1.69.4
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
google.golang.org/grpc@v1.60.0
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
google.golang.org/grpc@v1.69.2
1.82.1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
google.golang.org/grpc@v1.69.0
1.82.1
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
google.golang.org/grpc@v1.69.0
1.82.1

Open the chart page →

5,933
capsule-rancher-addonclastixVerified publisher0.1.13 of 5See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
google.golang.org/grpc@v1.49.0
1.82.1
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
google.golang.org/grpc@v1.49.0
1.82.1

Open the chart page →

7,104
kamajiclastixVerified publisher0.0.0+latest3 of 4See more

kamaji clastix 0.0.0+latest

3 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
clastix/kamaji:latesta7c5d108810b
google.golang.org/grpc@v1.79.3
1.82.1
quay.io/coreos/etcd:v3.5.628cb0630cb85
google.golang.org/grpc@v1.41.0
1.82.1
quay.io/coreos/etcd:v3.6.12702d7b4881c6
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

4,630
kamaji-etcdclastixVerified publisher0.17.02 of 4See more

kamaji-etcd clastix 0.17.0

2 of the 4 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
google.golang.org/grpc@v1.41.0
1.82.1
quay.io/coreos/etcd:v3.6.12702d7b4881c6
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

12,021
vcloud-csiclastixVerified publisher1.6.04 of 5See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/grpc@v1.36.0
1.82.1
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/grpc@v1.36.0
1.82.1
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/grpc@v1.36.0
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
google.golang.org/grpc@v1.40.0
1.82.1

Open the chart page →

7,386
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
google.golang.org/grpc@v1.72.2
1.82.1

Open the chart page →

1,750
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
google.golang.org/grpc@v1.29.1
1.82.1

Open the chart page →

20,936
cloudfront-tenant-operatorcloudfront-tenant-operatorVerified publisher0.3.01 of 1See more

cloudfront-tenant-operator cloudfront-tenant-operator 0.3.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
ghcr.io/dsp0x4/cloudfront-tenant-operator:0.3.0eb40174cd20d
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

269
hcloud-ccm-mgmtcloudhippieVerified publisher1.11.01 of 1See more

hcloud-ccm-mgmt cloudhippie 1.11.0

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.37.0c139e7220dbc
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

247
hcloud-csi-mgmtcloudhippieVerified publisher2.10.02 of 5See more

hcloud-csi-mgmt cloudhippie 2.10.0

2 of the 5 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
google.golang.org/grpc@v1.81.1
1.82.1
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
google.golang.org/grpc@v1.79.3
1.82.1

Open the chart page →

583
mercurecloudnativeapp1.0.21 of 1See more

mercure cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry GHSA-hrxh-6v49-42gf.

Container imageDigestPackageFixed in
dunglas/mercure:v0916834e49961
google.golang.org/grpc@v1.81.1
1.82.1

Open the chart page →

1,098

Container images carrying it

2,480 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oryd/kratos:v1.0.0d06fc5845f63
google.golang.org/grpc@v1.54.0
google.golang.org/grpc@v1.54.0
1.82.1
1.82.1
2
oryd/kratos:v1.3.1fe2428f103a6
google.golang.org/grpc@v1.65.0
google.golang.org/grpc@v1.65.0
1.82.1
1.82.1
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
google.golang.org/grpc@v1.56.1
google.golang.org/grpc@v1.56.1
1.82.1
1.82.1
2
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
google.golang.org/grpc@v1.82.0
google.golang.org/grpc@v1.82.0
1.82.1
1.82.1
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
google.golang.org/grpc@v1.62.0
google.golang.org/grpc@v1.62.0
1.82.1
1.82.1
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
google.golang.org/grpc@v1.67.1
google.golang.org/grpc@v1.67.1
1.82.1
1.82.1
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
google.golang.org/grpc@v1.30.0
google.golang.org/grpc@v1.30.0
1.82.1
1.82.1
2
polyaxon/polyaxon-operator:2.16.42716f552b301
google.golang.org/grpc@v1.68.1
google.golang.org/grpc@v1.68.1
1.82.1
1.82.1
2
prom/prometheus:v2.17.242d2395cd719
google.golang.org/grpc@v1.27.1
google.golang.org/grpc@v1.27.1
1.82.1
1.82.1
2
prom/prometheus:v2.52.05c435642ca4d
google.golang.org/grpc@v1.63.2
google.golang.org/grpc@v1.63.2
1.82.1
1.82.1
2
prom/prometheus:v2.37.98176adea328e
google.golang.org/grpc@v1.47.0
google.golang.org/grpc@v1.47.0
1.82.1
1.82.1
2
prom/prometheus:v2.48.1a67e5e402ff5
google.golang.org/grpc@v1.58.3
google.golang.org/grpc@v1.58.3
1.82.1
1.82.1
2
prom/prometheus:v2.21.0d43417c260e5
google.golang.org/grpc@v1.29.1
google.golang.org/grpc@v1.29.1
1.82.1
1.82.1
2
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
google.golang.org/grpc@v1.27.1
google.golang.org/grpc@v1.27.1
1.82.1
1.82.1
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
google.golang.org/grpc@v1.50.1
google.golang.org/grpc@v1.50.1
1.82.1
1.82.1
2
rancher/kine:v0.11.412889bbcd1e8
google.golang.org/grpc@v1.56.3
google.golang.org/grpc@v1.56.3
1.82.1
1.82.1
2
rclone/rclone:1.6874c51b8817e5
google.golang.org/grpc@v1.64.1
google.golang.org/grpc@v1.64.1
1.82.1
1.82.1
2
rookout/controller:latest4451a6f6b8ec
google.golang.org/grpc@v1.57.0
google.golang.org/grpc@v1.57.0
1.82.1
1.82.1
2
rookout/data-on-prem:latest51c0fce64467
google.golang.org/grpc@v1.57.0
google.golang.org/grpc@v1.57.0
1.82.1
1.82.1
2
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
google.golang.org/grpc@v1.27.0
google.golang.org/grpc@v1.27.0
1.82.1
1.82.1
2
shlinkio/shlink:5.1.6:stable666cc24edf72
google.golang.org/grpc@v1.81.1
google.golang.org/grpc@v1.81.1
1.82.1
1.82.1
2
squareup/ghostunnel:v1.5.270f4cf270425
google.golang.org/grpc@v1.24.0
google.golang.org/grpc@v1.24.0
1.82.1
1.82.1
2
statping/statping:v0.90.74e874da513a5c
google.golang.org/grpc@v1.28.1
google.golang.org/grpc@v1.28.1
1.82.1
1.82.1
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
google.golang.org/grpc@v1.45.0
google.golang.org/grpc@v1.45.0
1.82.1
1.82.1
2
temporalio/server:1.22.4c0a44c26397b
google.golang.org/grpc@v1.59.0
google.golang.org/grpc@v1.59.0
1.82.1
1.82.1
2
temporalio/ui:2.16.2af9c9349708f
google.golang.org/grpc@v1.55.0
google.golang.org/grpc@v1.55.0
1.82.1
1.82.1
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
google.golang.org/grpc@v1.24.0
google.golang.org/grpc@v1.24.0
1.82.1
1.82.1
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
google.golang.org/grpc@v1.29.1
google.golang.org/grpc@v1.29.1
1.82.1
1.82.1
2
tykio/tyk-mdcb-docker:v2.12.0942a5b8bf847
google.golang.org/grpc@v1.80.0
google.golang.org/grpc@v1.80.0
1.82.1
1.82.1
2
uselagoon/docker-host:v3.6.12c89ed939b8b
google.golang.org/grpc@v1.69.4
google.golang.org/grpc@v1.69.4
1.82.1
1.82.1
2
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
google.golang.org/grpc@v1.25.1
google.golang.org/grpc@v1.25.1
1.82.1
1.82.1
2
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
google.golang.org/grpc@v1.25.1
google.golang.org/grpc@v1.25.1
1.82.1
1.82.1
2
voltha/voltha-openonu-adapter-go:2.12.25d8f2eb5f2a7e
google.golang.org/grpc@v1.25.1
google.golang.org/grpc@v1.25.1
1.82.1
1.82.1
2
voltha/voltha-rw-core:3.4.87a325316fe59
google.golang.org/grpc@v1.25.1
google.golang.org/grpc@v1.25.1
1.82.1
1.82.1
2
xelalex/dregsy:0.4.3574054e1c417
google.golang.org/grpc@v1.44.0
google.golang.org/grpc@v1.44.0
1.82.1
1.82.1
2
zhenghaoz/gorse-master:0.4.12033046b432ec
google.golang.org/grpc@v1.50.1
google.golang.org/grpc@v1.50.1
1.82.1
1.82.1
2
zhenghaoz/gorse-server:0.4.1239c565685b01
google.golang.org/grpc@v1.50.1
google.golang.org/grpc@v1.50.1
1.82.1
1.82.1
2
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
google.golang.org/grpc@v1.50.1
google.golang.org/grpc@v1.50.1
1.82.1
1.82.1
2
gcr.io/k8s-staging-sig-storage/csi-provisioner:v3.2.14ad5fcdbe7e9
google.golang.org/grpc@v1.45.0
google.golang.org/grpc@v1.45.0
1.82.1
1.82.1
2
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller0d5f740b4224
google.golang.org/grpc@v1.71.1
google.golang.org/grpc@v1.71.1
1.82.1
1.82.1
2
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook697668be7893
google.golang.org/grpc@v1.71.1
google.golang.org/grpc@v1.71.1
1.82.1
1.82.1
2
gcr.io/knative-releases/knative.dev/serving/cmd/activator031408ec516f
google.golang.org/grpc@v1.71.1
google.golang.org/grpc@v1.71.1
1.82.1
1.82.1
2
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler3502bb5aa60f
google.golang.org/grpc@v1.71.1
google.golang.org/grpc@v1.71.1
1.82.1
1.82.1
2
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa7405faeb7636
google.golang.org/grpc@v1.71.1
google.golang.org/grpc@v1.71.1
1.82.1
1.82.1
2
gcr.io/knative-releases/knative.dev/serving/cmd/controller5b93308a392c
google.golang.org/grpc@v1.71.1
google.golang.org/grpc@v1.71.1
1.82.1
1.82.1
2
gcr.io/knative-releases/knative.dev/serving/cmd/webhook50831d9aaa69
google.golang.org/grpc@v1.71.1
google.golang.org/grpc@v1.71.1
1.82.1
1.82.1
2
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
google.golang.org/grpc@v1.70.0
google.golang.org/grpc@v1.70.0
1.82.1
1.82.1
2
ghcr.io/appscode/fargocd:v0.0.31f5c791fc54d
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
2
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
google.golang.org/grpc@v1.79.3
google.golang.org/grpc@v1.79.3
1.82.1
1.82.1
2
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
google.golang.org/grpc@v1.27.0
google.golang.org/grpc@v1.27.0
1.82.1
1.82.1
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.