StackRadar

GHSA-m425-mq94-257g

High

Advisory

Published 25 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
782
of 17,790 indexed, latest versions
Container images
954
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go HTTP/2 Rapid Reset vulnerability

Carried by container images the latest versions of 782 of 17,790 indexed charts deploy, on 954 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+64 more1.56.3, 1.57.1, 1.58.3954
OSV records
GHSA-m425-mq94-257gGO-2023-2153

Charts affected

782 by stars
ChartLatestAffected imagesRadar Score
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
google.golang.org/grpc@v1.31.0
1.56.3

Open the chart page →

13,575
vineyard-operatorvineyardVerified publisher0.24.22 of 2See more

vineyard-operator vineyard 0.24.2

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
google.golang.org/grpc@v1.27.0
1.56.3
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
google.golang.org/grpc@v1.40.0
1.56.3

Open the chart page →

4,558
cert-manager-webhook-vultrvultrVerified publisher1.0.01 of 1See more

cert-manager-webhook-vultr vultr 1.0.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
vultr/cert-manager-webhook-vultr:v0.1.0541c3e0aec58
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

2,507
vultr-csivultrVerified publisher2.0.01 of 4See more

vultr-csi vultr 2.0.0

1 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
vultr/vultr-csi:v0.3.041d26735d437
google.golang.org/grpc@v1.40.0
1.56.3

Open the chart page →

2,353
consulwarjiang1.3.01 of 2See more

consul warjiang 1.3.0

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
google.golang.org/grpc@v1.27.1
1.56.3

Open the chart page →

4,072
wavefront-hpa-adapterwavefront0.2.101 of 1See more

wavefront-hpa-adapter wavefront 0.2.10

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
wavefronthq/wavefront-hpa-adapter:0.9.12af5fef9a4768
google.golang.org/grpc@v1.38.0
1.56.3

Open the chart page →

1,691
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
google.golang.org/grpc@v1.29.1
1.56.3

Open the chart page →

5,492
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
google.golang.org/grpc@v1.29.1
1.56.3

Open the chart page →

11,171
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
google.golang.org/grpc@v1.52.3
1.56.3

Open the chart page →

6,282
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

7,562
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
google.golang.org/grpc@v1.34.0
1.56.3

Open the chart page →

4,093
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
gomods/athens:v0.11.0efb811df7844
google.golang.org/grpc@v1.26.0
1.56.3

Open the chart page →

4,999
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ubercadence/server:0.23.22ac5491d13bb
google.golang.org/grpc@v1.29.1
1.56.3

Open the chart page →

10,134
harborwenerme1.19.22 of 8See more

harbor wenerme 1.19.2

2 of the 8 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a
1.56.3
goharbor/registry-photon:v2.15.2c4ebef61ceb5
google.golang.org/grpc@v0.0.0-20160317175043-d3ddb4469d5a
1.56.3

Open the chart page →

1,686
juicefs-csi-driverwenerme0.32.52 of 5See more

juicefs-csi-driver wenerme 0.32.5

2 of the 5 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.0cd21e19cd8bb
google.golang.org/grpc@v1.58.0
1.56.3
registry.k8s.io/sig-storage/csi-resizer:v1.9.0f1f352df9787
google.golang.org/grpc@v1.54.0
1.56.3

Open the chart page →

9,183
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
google.golang.org/grpc@v1.26.0
1.56.3

Open the chart page →

15,288
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
google.golang.org/grpc@v1.26.0
1.56.3

Open the chart page →

6,922
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
google.golang.org/grpc@v1.41.0
1.56.3

Open the chart page →

6,144
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
google.golang.org/grpc@v1.47.0
1.56.3
openebs/provisioner-localpv:3.5.0aea39e49bb97
google.golang.org/grpc@v1.55.0
1.56.3

Open the chart page →

10,587
temporalwenerme0.15.14 of 13See more

temporal wenerme 0.15.1

4 of the 13 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
google.golang.org/grpc@v1.23.1
1.56.3
prom/prometheus:v2.16.0e4ca62c0d62f
google.golang.org/grpc@v1.22.1
1.56.3
temporalio/admin-tools:1.15.135034611d981
google.golang.org/grpc@v1.44.0
1.56.3
temporalio/server:1.15.1e26758f5a1bf
google.golang.org/grpc@v1.44.0
1.56.3

Open the chart page →

22,693
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
google.golang.org/grpc@v1.27.1
1.56.3

Open the chart page →

3,377
ceph-csi-cephfswikimedia0.1.85 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

5 of the 5 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/csi-provisioner:v3.2.14ad5fcdbe7e9
google.golang.org/grpc@v1.45.0
1.56.3
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
google.golang.org/grpc@v1.48.0
1.56.3
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.10103eee7c35e
google.golang.org/grpc@v1.40.0
1.56.3
registry.k8s.io/sig-storage/csi-resizer:v1.5.08f7520bd957e
google.golang.org/grpc@v1.40.0
1.56.3
registry.k8s.io/sig-storage/csi-snapshotter:v6.0.1ad16874e2140
google.golang.org/grpc@v1.40.0
1.56.3

Open the chart page →

10,321
ceph-csi-rbdwikimedia0.1.136 of 6See more

ceph-csi-rbd wikimedia 0.1.13

6 of the 6 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/csi-provisioner:v3.2.14ad5fcdbe7e9
google.golang.org/grpc@v1.45.0
1.56.3
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
google.golang.org/grpc@v1.48.0
1.56.3
registry.k8s.io/sig-storage/csi-attacher:v3.5.0dd245051317e
google.golang.org/grpc@v1.40.0
1.56.3
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.10103eee7c35e
google.golang.org/grpc@v1.40.0
1.56.3
registry.k8s.io/sig-storage/csi-resizer:v1.5.08f7520bd957e
google.golang.org/grpc@v1.40.0
1.56.3
registry.k8s.io/sig-storage/csi-snapshotter:v6.0.1ad16874e2140
google.golang.org/grpc@v1.40.0
1.56.3

Open the chart page →

11,827
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
google.golang.org/grpc@v1.56.1
1.56.3

Open the chart page →

2,032
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
google.golang.org/grpc@v1.30.0
1.56.3

Open the chart page →

2,752
csi-driver-host-pathwiremindVerified publisher0.1.18 of 8See more

csi-driver-host-path wiremind 0.1.1

8 of the 8 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.0.09a685020911e
google.golang.org/grpc@v1.47.0
1.56.3
registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.7.080b9ba94aa2a
google.golang.org/grpc@v1.48.0
1.56.3
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.0f1c25991bac2
google.golang.org/grpc@v1.50.1
1.56.3
registry.k8s.io/sig-storage/csi-provisioner:v3.3.0ee3b525d5b89
google.golang.org/grpc@v1.49.0
1.56.3
registry.k8s.io/sig-storage/csi-resizer:v1.6.0425d8f1b7693
google.golang.org/grpc@v1.47.0
1.56.3
registry.k8s.io/sig-storage/csi-snapshotter:v6.1.0291334908ddf
google.golang.org/grpc@v1.47.0
1.56.3
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
google.golang.org/grpc@v1.34.0
1.56.3
registry.k8s.io/sig-storage/livenessprobe:v2.8.0cacee2b5c36d
google.golang.org/grpc@v1.48.0
1.56.3

Open the chart page →

12,658
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

2,512
mrtg-backendwitcom-gmbh0.7.01 of 2See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

2,623
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
google.golang.org/grpc@v1.49.0
1.56.3

Open the chart page →

13,783
matrixdb-operatorymatrixOfficialVerified publisher0.13.01 of 2See more

matrixdb-operator ymatrix 0.13.0

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
matrixdb/kubebuilder_kube-rbac-proxy:v0.12.0ed3c7e6291e8
google.golang.org/grpc@v1.40.0
1.56.3

Open the chart page →

1,965
rawfile-csiymatrixVerified publisher0.2.14 of 4See more

rawfile-csi ymatrix 0.2.1

4 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
matrixdb/custom-external-provisioner:4622a07d7-202204247e9ffe249a51
google.golang.org/grpc@v1.40.0
1.56.3
matrixdb/rawfile-csi:v0.2.195b2e38e913d
google.golang.org/grpc@v1.45.0
1.56.3
matrixdb/sig-storage_csi-node-driver-registrar:v2.2.0ba763bb01ddc
google.golang.org/grpc@v1.36.0
1.56.3
matrixdb/sig-storage_livenessprobe:v2.3.07ab06fe3d8a7
google.golang.org/grpc@v1.36.0
1.56.3

Open the chart page →

7,998
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
google.golang.org/grpc@v1.49.0
1.56.3
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
google.golang.org/grpc@v1.49.0
1.56.3

Open the chart page →

5,047

Container images carrying it

954 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
google.golang.org/grpc@v1.40.0
google.golang.org/grpc@v1.40.0
1.56.3
1.56.3
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
google.golang.org/grpc@v1.34.0
google.golang.org/grpc@v1.34.0
1.56.3
1.56.3
1
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.56.3
1.56.3
1
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
google.golang.org/grpc@v1.58.0
google.golang.org/grpc@v1.58.0
1.58.3
1.56.3
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.