StackRadar

GHSA-m425-mq94-257g

High

Advisory

Published 25 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
782
of 17,790 indexed, latest versions
Container images
954
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go HTTP/2 Rapid Reset vulnerability

Carried by container images the latest versions of 782 of 17,790 indexed charts deploy, on 954 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+64 more1.56.3, 1.57.1, 1.58.3954
OSV records
GHSA-m425-mq94-257gGO-2023-2153

Charts affected

782 by stars
ChartLatestAffected imagesRadar Score
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
sarwansharma/minio:v359d1da9385d1
google.golang.org/grpc@v1.46.0
1.56.3

Open the chart page →

6,674
loki-stackpyalive-cdmswebappVerified publisher2.6.52 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

2 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/loki:2.5.0f9ef133793af
google.golang.org/grpc@v1.44.0
1.56.3
grafana/promtail:2.4.2626900031c4e
google.golang.org/grpc@v1.40.0
1.56.3

Open the chart page →

6,556
saleorrc-helm-charts0.1.11 of 5See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.22.0ca6b73330616
google.golang.org/grpc@v1.29.1
1.56.3

Open the chart page →

3,745
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
google.golang.org/grpc@v1.27.1
1.56.3

Open the chart page →

15,299
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
google.golang.org/grpc@v1.27.1
1.56.3

Open the chart page →

15,299
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

11,446
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
google.golang.org/grpc@v1.33.2
1.56.3

Open the chart page →

29,564
reportportalreportportal5.7.21 of 8See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
reportportal/migrations:5.7.0da5d8e1395fe
google.golang.org/grpc@v1.20.1
1.56.3

Open the chart page →

25,756
review-componentreview-component1.0.01 of 3See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/review-component-php:latestafe623824b82
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

7,501
rke2-canal-1.19-1.20rke2-charts3.13.3-build20211022022 of 2See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
google.golang.org/grpc@v1.19.0
1.56.3
rancher/hardened-flannel:v0.14.1-build20211022d6a47d394c03
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

5,956
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
google.golang.org/grpc@v1.49.0
1.56.3

Open the chart page →

4,047
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
google.golang.org/grpc@v1.41.0
1.56.3

Open the chart page →

5,430
imgproxyrock8sVerified publisher0.8.301 of 1See more

imgproxy rock8s 0.8.30

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.15.040f6eb807444
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

2,029
mailserverrock8sVerified publisher0.1.21 of 1See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
google.golang.org/grpc@v1.54.0
1.56.3

Open the chart page →

1,954
argocdromholdings1.8.12 of 3See more

argocd romholdings 1.8.1

2 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
google.golang.org/grpc@v1.15.0
1.56.3
quay.io/dexidp/dex:v2.25.07bcf286807b8
google.golang.org/grpc@v1.26.0
1.56.3

Open the chart page →

10,484
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
google.golang.org/grpc@v1.43.0
1.56.3

Open the chart page →

13,011
argo-workflowromholdings0.1.61 of 1See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

1,587
calicoromholdings0.1.13 of 4See more

calico romholdings 0.1.1

3 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
google.golang.org/grpc@v1.27.1
1.56.3
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
google.golang.org/grpc@v1.27.1
1.56.3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
google.golang.org/grpc@v1.27.1
1.56.3

Open the chart page →

10,094
devtron-enterpriseromholdings48.0.05 of 28See more

devtron-enterprise romholdings 48.0.0

5 of the 28 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/grpc@v1.36.1
1.56.3
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/grpc@v1.34.0
1.56.3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
google.golang.org/grpc@v1.27.1
1.56.3
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/grpc@v1.47.0
1.56.3
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/grpc@v1.51.0
1.56.3

Open the chart page →

68,695
devtron-in-clustercdromholdings0.10.22 of 2See more

devtron-in-clustercd romholdings 0.10.2

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
google.golang.org/grpc@v1.33.1
1.56.3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

5,055
devtron-operatorromholdings0.23.34 of 11See more

devtron-operator romholdings 0.23.3

4 of the 11 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/grpc@v1.36.1
1.56.3
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/grpc@v1.34.0
1.56.3
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/grpc@v1.47.0
1.56.3
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/grpc@v1.51.0
1.56.3

Open the chart page →

33,180
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
google.golang.org/grpc@v1.20.1
1.56.3

Open the chart page →

11,959
kube-prometheus-stackromholdings19.3.02 of 6See more

kube-prometheus-stack romholdings 19.3.0

2 of the 6 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
google.golang.org/grpc@v1.40.0
1.56.3
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
google.golang.org/grpc@v1.38.0
1.56.3

Open the chart page →

8,659
securityromholdings0.2.21 of 1See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
google.golang.org/grpc@v1.43.0
1.56.3

Open the chart page →

2,441
zincromholdings0.1.21 of 1See more

zinc romholdings 0.1.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
public.ecr.aws/zinclabs/zinc:latestfefa9ee7256a
google.golang.org/grpc@v1.41.0
1.56.3

Open the chart page →

1,514
controllerrookout0.2.561 of 1See more

controller rookout 0.2.56

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
rookout/controller:latest4451a6f6b8ec
google.golang.org/grpc@v1.57.0
1.56.3

Open the chart page →

1,967
datastorerookout0.1.481 of 1See more

datastore rookout 0.1.48

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
rookout/data-on-prem:latest51c0fce64467
google.golang.org/grpc@v1.57.0
1.56.3

Open the chart page →

1,948
rookout-hybridrookout0.3.12 of 2See more

rookout-hybrid rookout 0.3.1

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
rookout/controller:latest4451a6f6b8ec
google.golang.org/grpc@v1.57.0
1.56.3
rookout/data-on-prem:latest51c0fce64467
google.golang.org/grpc@v1.57.0
1.56.3

Open the chart page →

3,915
caddysagikazarmarkVerified publisher0.0.141 of 1See more

caddy sagikazarmark 0.0.14

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
library/caddy:2.4.5874405536b3e
google.golang.org/grpc@v1.38.0
1.56.3

Open the chart page →

2,967
tusdsagikazarmarkVerified publisher0.1.21 of 1See more

tusd sagikazarmark 0.1.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
tusproject/tusd:v1.10.01e457b59fd5b
google.golang.org/grpc@v1.50.0
1.56.3

Open the chart page →

1,552
knative-helm-operatorsalaboy1.9.01 of 2See more

knative-helm-operator salaboy 1.9.0

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/operator/cmd/webhookdigest-pinned6c5c90cdf707
google.golang.org/grpc@v1.47.0
1.56.3

Open the chart page →

2,345
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
google.golang.org/grpc@v1.51.0
1.56.3

Open the chart page →

4,750
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
google.golang.org/grpc@v1.38.0
1.56.3

Open the chart page →

2,140
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
google.golang.org/grpc@v1.38.0
1.56.3

Open the chart page →

3,168
cert-manager-desec-webhookschmitzis0.0.11 of 1See more

cert-manager-desec-webhook schmitzis 0.0.1

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
su541/cert-manager-desec-webhook:latest371ee33f83c1
google.golang.org/grpc@v1.51.0
1.56.3

Open the chart page →

1,777
cert-manager-webhook-bunnyschmitzis0.1.11 of 1See more

cert-manager-webhook-bunny schmitzis 0.1.1

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
google.golang.org/grpc@v1.51.0
1.56.3

Open the chart page →

1,505
icinga2-masterschmitzis0.2.01 of 6See more

icinga2-master schmitzis 0.2.0

1 of the 6 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/grafana:8.0.3696823fbc561
google.golang.org/grpc@v1.37.1
1.56.3

Open the chart page →

3,738
cernboxsciencebox0.0.41 of 6See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
google.golang.org/grpc@v1.47.0
1.56.3

Open the chart page →

2,337
centralbrainsciencemeshVerified publisher0.0.32 of 5See more

centralbrain sciencemesh 0.0.3

2 of the 5 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/grafana:7.3.315b977f5207d
google.golang.org/grpc@v1.30.0
1.56.3
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
google.golang.org/grpc@v1.32.0
1.56.3

Open the chart page →

9,769
hermitcrabseal-ioVerified publisher0.1.41 of 2See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

4,890
aws-secretssecretsprovider0.1.01 of 1See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64b32c99e7bc45
google.golang.org/grpc@v1.35.0
1.56.3

Open the chart page →

2,220
cloudflaredsectionmeVerified publisher2022.3.41 of 1See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
google.golang.org/grpc@v1.43.0
1.56.3

Open the chart page →

2,414
seldon-core-analyticsseldon1.17.12 of 8See more

seldon-core-analytics seldon 1.17.1

2 of the 8 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
google.golang.org/grpc@v1.27.1
1.56.3
prom/prometheus:v2.18.15880ec936055
google.golang.org/grpc@v1.29.0
1.56.3

Open the chart page →

10,747
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
google.golang.org/grpc@v1.54.0
1.56.3

Open the chart page →

4,210
keycloak-configuratorsikalabs0.2.01 of 1See more

keycloak-configurator sikalabs 0.2.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
hashicorp/terraform:1.44dcb45513699
google.golang.org/grpc@v1.50.1
1.56.3

Open the chart page →

2,870
bytesafe-cesimcube1.0.41 of 3See more

bytesafe-ce simcube 1.0.4

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
bytesafe/bytesafe-ce:v1.0.4ee287384c005
google.golang.org/grpc@v1.55.0
1.56.3

Open the chart page →

1,501
keydbsinextraVerified publisher0.31.01 of 1See more

keydb sinextra 0.31.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/keydb:6.3.376a19ddc3626
google.golang.org/grpc@v1.31.0
1.56.3

Open the chart page →

2,172
mimirskyloud-helm-chartsVerified publisher5.5.12 of 5See more

mimir skyloud-helm-charts 5.5.1

2 of the 5 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
google.golang.org/grpc@v1.58.0
1.56.3
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
google.golang.org/grpc@v1.58.0
1.56.3

Open the chart page →

10,676
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
google.golang.org/grpc@v1.34.0
1.56.3

Open the chart page →

9,246
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
google.golang.org/grpc@v1.40.0
1.56.3

Open the chart page →

3,471

Container images carrying it

954 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
google.golang.org/grpc@v1.40.0
google.golang.org/grpc@v1.40.0
1.56.3
1.56.3
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
google.golang.org/grpc@v1.34.0
google.golang.org/grpc@v1.34.0
1.56.3
1.56.3
1
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.56.3
1.56.3
1
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
google.golang.org/grpc@v1.58.0
google.golang.org/grpc@v1.58.0
1.58.3
1.56.3
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.