StackRadar

GHSA-m425-mq94-257g

High

Advisory

Published 25 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
781
of 17,787 indexed, latest versions
Container images
953
deployed by those charts
Fix available
1 of 1
affected package

gRPC-Go HTTP/2 Rapid Reset vulnerability

Carried by container images the latest versions of 781 of 17,787 indexed charts deploy, on 953 images.

Affected packageAffected versionsFixed inImages
google.golang.org/grpcgolangv0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+64 more1.56.3, 1.57.1, 1.58.3953
OSV records
GHSA-m425-mq94-257gGO-2023-2153

Charts affected

781 by stars
ChartLatestAffected imagesRadar Score
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

8,408
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.27.0828ee36cb13a
google.golang.org/grpc@v1.49.0
1.56.3

Open the chart page →

9,146
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
google.golang.org/grpc@v1.49.0
1.56.3

Open the chart page →

3,672
katibcowboysysopVerified publisher2.4.23 of 4See more

katib cowboysysop 2.4.2

3 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
google.golang.org/grpc@v1.32.0
1.56.3
kubeflowkatib/katib-db-manager:v0.12.0db88bf09d88e
google.golang.org/grpc@v1.32.0
1.56.3
kubeflowkatib/katib-ui:v0.12.0129f0aaba976
google.golang.org/grpc@v1.32.0
1.56.3

Open the chart page →

6,542
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
kfserving/kfserving-controller:v0.6.163d79d04c2e3
google.golang.org/grpc@v1.31.1
1.56.3

Open the chart page →

3,830
external-service-operatorcrowdfox0.1.01 of 1See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
crowdfox/external-service-operator:v1.1.06fa7e8063d27
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

4,625
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
google.golang.org/grpc@v1.29.1
1.56.3

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
google.golang.org/grpc@v1.29.1
1.56.3

Open the chart page →

5,973
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
google.golang.org/grpc@v1.49.0
1.56.3

Open the chart page →

14,206
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
google.golang.org/grpc@v1.29.1
1.56.3

Open the chart page →

13,937
secrets-store-csi-driver-provider-awscustom0.2.01 of 1See more

secrets-store-csi-driver-provider-aws custom 0.2.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-35-g41dc61e-2022.12.16.20.38363bd65cd707
google.golang.org/grpc@v1.49.0
1.56.3

Open the chart page →

1,232
irods-csi-drivercyverse0.12.02 of 4See more

irods-csi-driver cyverse 0.12.0

2 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v3.1.0122bfb8c1eda
google.golang.org/grpc@v1.40.0
1.56.3
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
google.golang.org/grpc@v1.58.0
1.56.3

Open the chart page →

5,257
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
google.golang.org/grpc@v1.41.0
1.56.3

Open the chart page →

3,238
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
google.golang.org/grpc@v1.28.0
1.56.3

Open the chart page →

2,977
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

1,926
datadog-csi-driverdatadogVerified publisher0.17.01 of 2See more

datadog-csi-driver datadog 0.17.0

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.0.1e07f914c32f0
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

2,041
agent-helmdatasaker0.1.82 of 6See more

agent-helm datasaker 0.1.8

2 of the 6 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
google.golang.org/grpc@v1.57.0
1.56.3
datasaker/dsk-k8s-agent:latest2542ee73be51
google.golang.org/grpc@v1.50.1
1.56.3

Open the chart page →

7,571
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
google.golang.org/grpc@v1.24.0
1.56.3

Open the chart page →

7,486
eg-edge-stackdatawire0.0.13 of 7See more

eg-edge-stack datawire 0.0.1

3 of the 7 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ambassador/aes-authsvc:v4.0.0-preview.12a4598b03a6a
google.golang.org/grpc@v1.56.2
1.56.3
ambassador/aes-eg-ext:v4.0.0-preview.1b7eb1be3345d
google.golang.org/grpc@v1.56.2
1.56.3
envoyproxy/gateway:v0.5.02a9f99d28567
google.golang.org/grpc@v1.56.2
1.56.3

Open the chart page →

15,781
cortex-gatewaydeliveryheroVerified publisher0.1.91 of 1See more

cortex-gateway deliveryhero 0.1.9

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
goelankit/cortex-gateway:v1.1.00d9a82dcf026
google.golang.org/grpc@v1.45.0
1.56.3

Open the chart page →

2,234
k8s-cloudwatch-adapterdeliveryheroVerified publisher0.2.21 of 1See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
google.golang.org/grpc@v1.23.1
1.56.3

Open the chart page →

2,468
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
google.golang.org/grpc@v1.46.0
1.56.3
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
google.golang.org/grpc@v1.46.0
1.56.3

Open the chart page →

4,722
argocddevtron1.8.12 of 3See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
google.golang.org/grpc@v1.15.0
1.56.3
quay.io/dexidp/dex:v2.25.07bcf286807b8
google.golang.org/grpc@v1.26.0
1.56.3

Open the chart page →

10,468
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
google.golang.org/grpc@v1.43.0
1.56.3

Open the chart page →

12,999
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

1,580
devtron-enterprisedevtron48.0.05 of 28See more

devtron-enterprise devtron 48.0.0

5 of the 28 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/grpc@v1.36.1
1.56.3
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/grpc@v1.34.0
1.56.3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
google.golang.org/grpc@v1.27.1
1.56.3
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/grpc@v1.47.0
1.56.3
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/grpc@v1.51.0
1.56.3

Open the chart page →

66,542
devtron-in-clustercddevtron0.10.22 of 2See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
google.golang.org/grpc@v1.33.1
1.56.3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

5,041
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
google.golang.org/grpc@v1.20.1
1.56.3

Open the chart page →

11,957
kube-prometheus-stackdevtron19.3.02 of 6See more

kube-prometheus-stack devtron 19.3.0

2 of the 6 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
google.golang.org/grpc@v1.40.0
1.56.3
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
google.golang.org/grpc@v1.38.0
1.56.3

Open the chart page →

8,645
securitydevtron0.2.21 of 1See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
google.golang.org/grpc@v1.43.0
1.56.3

Open the chart page →

2,435
zincdevtron0.1.21 of 1See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
public.ecr.aws/zinclabs/zinc:latestfefa9ee7256a
google.golang.org/grpc@v1.41.0
1.56.3

Open the chart page →

1,507
argocddevtron-labs1.8.12 of 3See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
google.golang.org/grpc@v1.15.0
1.56.3
quay.io/dexidp/dex:v2.25.07bcf286807b8
google.golang.org/grpc@v1.26.0
1.56.3

Open the chart page →

10,468
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
google.golang.org/grpc@v1.43.0
1.56.3

Open the chart page →

12,999
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

1,580
calicodevtron-labs0.1.13 of 4See more

calico devtron-labs 0.1.1

3 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
google.golang.org/grpc@v1.27.1
1.56.3
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
google.golang.org/grpc@v1.27.1
1.56.3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
google.golang.org/grpc@v1.27.1
1.56.3

Open the chart page →

10,073
devtron-enterprisedevtron-labs48.0.05 of 28See more

devtron-enterprise devtron-labs 48.0.0

5 of the 28 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/grpc@v1.36.1
1.56.3
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/grpc@v1.34.0
1.56.3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
google.golang.org/grpc@v1.27.1
1.56.3
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/grpc@v1.47.0
1.56.3
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/grpc@v1.51.0
1.56.3

Open the chart page →

66,542
devtron-in-clustercddevtron-labs0.10.22 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

2 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
google.golang.org/grpc@v1.33.1
1.56.3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
google.golang.org/grpc@v1.53.0
1.56.3

Open the chart page →

5,041
devtron-operatordevtron-labs0.23.34 of 11See more

devtron-operator devtron-labs 0.23.3

4 of the 11 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/grpc@v1.36.1
1.56.3
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/grpc@v1.34.0
1.56.3
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/grpc@v1.47.0
1.56.3
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/grpc@v1.51.0
1.56.3

Open the chart page →

31,447
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
google.golang.org/grpc@v1.20.1
1.56.3

Open the chart page →

11,957
kube-prometheus-stackdevtron-labs19.3.02 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

2 of the 6 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
google.golang.org/grpc@v1.40.0
1.56.3
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
google.golang.org/grpc@v1.38.0
1.56.3

Open the chart page →

8,645
securitydevtron-labs0.2.21 of 1See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
google.golang.org/grpc@v1.43.0
1.56.3

Open the chart page →

2,435
zincdevtron-labs0.1.21 of 1See more

zinc devtron-labs 0.1.2

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
public.ecr.aws/zinclabs/zinc:latestfefa9ee7256a
google.golang.org/grpc@v1.41.0
1.56.3

Open the chart page →

1,507
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
google.golang.org/grpc@v1.50.1
1.56.3
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
google.golang.org/grpc@v1.50.1
1.56.3

Open the chart page →

21,455
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
google.golang.org/grpc@v1.27.0
1.56.3

Open the chart page →

8,408
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
google.golang.org/grpc@v1.32.0
1.56.3

Open the chart page →

3,046
goinceptiondoubanVerified publisher0.3.11 of 2See more

goinception douban 0.3.1

1 of the 2 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
google.golang.org/grpc@v1.29.1
1.56.3

Open the chart page →

1,201
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
google.golang.org/grpc@v1.55.0
1.56.3

Open the chart page →

3,660
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
google.golang.org/grpc@v1.45.0
1.56.3

Open the chart page →

30,759
drogue-cloud-metricsdrogue-iotVerified publisher0.7.112 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

2 of the 8 container images this version deploys carry GHSA-m425-mq94-257g.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
google.golang.org/grpc@v1.45.0
1.56.3
quay.io/prometheus/prometheus:v2.26.038d40a760569
google.golang.org/grpc@v1.36.0
1.56.3

Open the chart page →

13,558

Container images carrying it

953 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
google.golang.org/grpc@v1.34.0
google.golang.org/grpc@v1.34.0
1.56.3
1.56.3
1
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
google.golang.org/grpc@v1.49.0
google.golang.org/grpc@v1.49.0
1.56.3
1.56.3
1
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
google.golang.org/grpc@v1.58.0
google.golang.org/grpc@v1.58.0
1.58.3
1.56.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.