StackRadar

GHSA-m425-mq94-257g

High

Advisory

Published 25 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
781
of 17,790 indexed, latest versions
Container images
953
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go HTTP/2 Rapid Reset vulnerability

Carried by container images the latest versions of 781 of 17,790 indexed charts deploy, on 953 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+64 more1.56.3, 1.57.1, 1.58.3953
OSV records
GHSA-m425-mq94-257gGO-2023-2153

Charts affected

781 by stars
ChartLatestAffected imagesRadar Score
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
google.golang.org/grpc@v1.49.0
1.56.3

Open the chart page →

17,085
cluster-gateway-addon-managerocm-helm-chartsVerified publisher1.4.01 of 1See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
oamdev/cluster-gateway-addon-manager:v1.4.01bcae00bd7b0
google.golang.org/grpc@v1.42.0
1.56.3

Open the chart page →

1,600
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
google.golang.org/grpc@v1.44.0
1.56.3

Open the chart page →

2,124
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
google.golang.org/grpc@v1.22.0
1.56.3

Open the chart page →

8,539
one-green-coreone-green-coreVerified publisher0.0.73 of 8See more

one-green-core one-green-core 0.0.7

3 of the 8 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/grafana:8.5.3ecc1b80b8ca2
google.golang.org/grpc@v1.42.0
1.56.3
library/influxdb:2.0.8ba10ac9ba17a
google.golang.org/grpc@v1.27.1
1.56.3
library/telegraf:1.20.428e98eece020
google.golang.org/grpc@v1.41.0
1.56.3

Open the chart page →

9,558
opa-nginxopa-nginx0.0.31 of 2See more

opa-nginx opa-nginx 0.0.3

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
openpolicyagent/opa:0.53.16a58dea59933
google.golang.org/grpc@v1.55.0
1.56.3

Open the chart page →

2,167
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
google.golang.org/grpc@v1.29.1
1.56.3

Open the chart page →

18,023
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
google.golang.org/grpc@v1.22.1
1.56.3

Open the chart page →

4,612
volthaopencord2.14.02 of 2See more

voltha opencord 2.14.0

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
google.golang.org/grpc@v1.25.1
1.56.3
voltha/voltha-rw-core:3.4.87a325316fe59
google.golang.org/grpc@v1.25.1
1.56.3

Open the chart page →

3,811
voltha-adapter-openoltopencord2.14.01 of 1See more

voltha-adapter-openolt opencord 2.14.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
google.golang.org/grpc@v1.25.1
1.56.3

Open the chart page →

891
voltha-adapter-openonuopencord2.14.01 of 1See more

voltha-adapter-openonu opencord 2.14.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
voltha/voltha-openonu-adapter-go:2.12.25d8f2eb5f2a7e
google.golang.org/grpc@v1.25.1
1.56.3

Open the chart page →

837
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
google.golang.org/grpc@v1.27.1
1.56.3

Open the chart page →

41,088
voltha-stackopencord2.14.04 of 4See more

voltha-stack opencord 2.14.0

4 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
google.golang.org/grpc@v1.25.1
1.56.3
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
google.golang.org/grpc@v1.25.1
1.56.3
voltha/voltha-openonu-adapter-go:2.12.25d8f2eb5f2a7e
google.golang.org/grpc@v1.25.1
1.56.3
voltha/voltha-rw-core:3.4.87a325316fe59
google.golang.org/grpc@v1.25.1
1.56.3

Open the chart page →

5,539
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
google.golang.org/grpc@v1.44.0
1.56.3

Open the chart page →

4,752
minioopenobserve5.0.72 of 2See more

minio openobserve 5.0.7

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
google.golang.org/grpc@v1.50.1
1.56.3
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
google.golang.org/grpc@v1.52.3
1.56.3

Open the chart page →

7,457
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
google.golang.org/grpc@v1.38.0
1.56.3

Open the chart page →

16,554
opscruiseopenshift0.35.1003 of 11See more

opscruise openshift 0.35.100

3 of the 11 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/loki:2.0.077e138f81a8e
google.golang.org/grpc@v1.29.1
1.56.3
grafana/promtail:2.0.05fd12edcc694
google.golang.org/grpc@v1.29.1
1.56.3
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
google.golang.org/grpc@v1.46.2
1.56.3

Open the chart page →

8,201
osm-edgeopenshift1.2.1-ubi83 of 7See more

osm-edge openshift 1.2.1-ubi8

3 of the 7 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
google.golang.org/grpc@v1.49.0
1.56.3
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
google.golang.org/grpc@v1.49.0
1.56.3
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
google.golang.org/grpc@v1.49.0
1.56.3

Open the chart page →

19,449
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
google.golang.org/grpc@v1.46.0
1.56.3

Open the chart page →

8,634
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
google.golang.org/grpc@v1.50.1
1.56.3

Open the chart page →

4,284
gitlab-proxyopslevelVerified publisher0.0.81 of 1See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
library/caddy:2.660fb54d36b4b
google.golang.org/grpc@v1.52.3
1.56.3

Open the chart page →

1,872
opslevelopslevelVerified publisher2025.1.221 of 10See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2023-02-28T00-12-59Zc631532a394e
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

5,609
orderregistratiecomponentorderregistratiecomponent1.0.01 of 3See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

7,492
prometheusosc0.26.21 of 12See more

prometheus osc 0.26.2

1 of the 12 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.24.03af31f8bd1ad
google.golang.org/grpc@v1.55.0
1.56.3

Open the chart page →

3,374
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
registry.k8s.io/e2e-test-images/agnhost:2.40af7e3857d877
google.golang.org/grpc@v1.47.0
1.56.3

Open the chart page →

72,154
osm-edgeosm-edgeVerified publisher1.3.93 of 7See more

osm-edge osm-edge 1.3.9

3 of the 7 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
flomesh/osm-edge-bootstrap:1.3.9b188e128cbfe
google.golang.org/grpc@v1.51.0
1.56.3
flomesh/osm-edge-controller:1.3.9add7a4da4622
google.golang.org/grpc@v1.51.0
1.56.3
flomesh/osm-edge-injector:1.3.947287e3ad324
google.golang.org/grpc@v1.51.0
1.56.3

Open the chart page →

5,589
parcaparca4.19.01 of 2See more

parca parca 4.19.0

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
google.golang.org/grpc@v1.55.0
1.56.3

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
google.golang.org/grpc@v1.55.0
1.56.3

Open the chart page →

1,978
scaleway-webhookparticuleio0.0.11 of 1See more

scaleway-webhook particuleio 0.0.1

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

2,347
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
google.golang.org/grpc@v1.35.0
1.56.3

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
google.golang.org/grpc@v1.35.0
1.56.3

Open the chart page →

15,466
loki-stackphntom2.10.22 of 2See more

loki-stack phntom 2.10.2

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/loki:2.4.2b3af8ead67d7
google.golang.org/grpc@v1.40.0
1.56.3
grafana/promtail:2.4.2626900031c4e
google.golang.org/grpc@v1.40.0
1.56.3

Open the chart page →

5,708
npre-essentialsphntom0.1.606 of 22See more

npre-essentials phntom 0.1.60

6 of the 22 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
google.golang.org/grpc@v1.44.0
1.56.3
grafana/promtail:2.7.0c16c710f7333
google.golang.org/grpc@v1.45.0
1.56.3
phntom/chartmuseum:v0.15.29242b4df9e65
google.golang.org/grpc@v1.47.0
1.56.3
phntom/oauth2-proxy:v7.3.48ea656a2a895
google.golang.org/grpc@v1.27.0
1.56.3
quay.io/groundcover/grafana:9.3.18c65b333a3d3
google.golang.org/grpc@v1.45.0
1.56.3
quay.io/prometheus-operator/prometheus-operator:v0.61.1cd7d1a82ef00
google.golang.org/grpc@v1.50.1
1.56.3

Open the chart page →

26,840
firehose-corepinaxVerified publisher0.1.11 of 2See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
google.golang.org/grpc@v1.48.0
1.56.3

Open the chart page →

3,527
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
google.golang.org/grpc@v1.48.0
1.56.3

Open the chart page →

7,149
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
google.golang.org/grpc@v1.48.0
1.56.3

Open the chart page →

4,938
pixie-operator-helm2-chartpixie0.1.21 of 2See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinnedf9ea8cef95ac
google.golang.org/grpc@v1.40.0
1.56.3

Open the chart page →

1,753
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
google.golang.org/grpc@v1.49.0
1.56.3

Open the chart page →

25,626
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
google.golang.org/grpc@v1.24.0
1.56.3

Open the chart page →

11,153
tenant-namespace-operatorpnnl-miscscripts0.1.281 of 1See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

12,754
liftbridgepozetron0.1.11 of 1See more

liftbridge pozetron 0.1.1

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
pozetroninc/liftbridge:v1.1.079fd6b9d93e6
google.golang.org/grpc@v1.24.0
1.56.3

Open the chart page →

3,167
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
google.golang.org/grpc@v1.22.0
1.56.3

Open the chart page →

9,605
oauth2-proxypresto-loadbalancer4.3.181 of 2See more

oauth2-proxy presto-loadbalancer 4.3.18

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v6.1.1791aef35b8d1
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

3,958
procestypecatalogusprocestypecatalogus1.1.01 of 4See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

7,429
productenendienstencatalogusproductenendienstencatalogus1.0.01 of 3See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

7,510
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

8,724
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

7,510
kspanpuckpuck0.2.41 of 1See more

kspan puckpuck 0.2.4

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/honeycombio/kspan/kspan:0.2c966a4f8a4b7
google.golang.org/grpc@v1.36.0
1.56.3

Open the chart page →

1,681
seashellpuckpuck1.2.01 of 1See more

seashell puckpuck 1.2.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/puckpuck/seashell:1.2ef5e31333821
google.golang.org/grpc@v1.48.0
1.56.3

Open the chart page →

4,214
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
sarwansharma/minio:v359d1da9385d1
google.golang.org/grpc@v1.46.0
1.56.3

Open the chart page →

6,667

Container images carrying it

953 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
google.golang.org/grpc@v1.34.0
google.golang.org/grpc@v1.34.0
1.56.3
1.56.3
1
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.56.3
1.56.3
1
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
google.golang.org/grpc@v1.58.0
google.golang.org/grpc@v1.58.0
1.58.3
1.56.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.