Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-78663 BIT-golang-2026-78663EUVD-2026-95427GO-2026-6612

Double flow control refund on HTTP/2 server streams in net/http

Published Oct 8, 2026 · Updated Oct 9, 2026 · Assigned by Go

Vendor: Go standard library Vendor: golang.org/x/net Product: golang.org/x/net/http2 Product: net/http Product: net/http/internal/http2 Package: aactl Package: actions-runner-controller Package: addon-resizer Package: adsys Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-operator Package: amazon-k8s-cni Package: apache-exporter Package: apisix-ingress-controller Package: apko Package: application-gateway-kubernetes-ingress Package: argo-cd-3.2 Package: argo-cd-3.2-compat Package: argo-cd-3.3 Package: argo-cd-3.3-compat Package: argo-cd-3.4 Package: argo-cd-3.4-compat Package: argo-events Package: argo-rollouts Package: argo-workflow-controller-4.0 Package: argo-workflow-executor-3.7 Package: argo-workflow-executor-4.0 Package: argo-workflows-3.7 Package: argo-workflows-4.0 Package: argocd-image-updater Package: atlantis Package: authservice Package: aws-application-networking-k8s Package: aws-efs-csi-driver Package: aws-eks-pod-identity-agent Package: aws-load-balancer-controller Package: aws-network-policy-agent Package: aws-node-termination-handler Package: aws-otel-collector Package: aws-privateca-issuer Package: aws-s3-controller Package: azcopy Package: azcopy Package: azl-otel-collector Package: azure-ipam Package: azure-service-operator Package: azure-workload-identity-webhook Package: azuredisk-csi-1.34 Package: azurefile-csi-1.35 Package: azurelinux-image-tools Package: bank-vaults Package: bank-vaults-template Package: bento Package: blob-csi-1.27 Package: blobfuse2 Package: boring-registry Package: buildah Package: buildah Package: buildctl Package: buildkitd Package: caddy Package: cadvisor Package: calico-apiserver-3.31 Package: calico-apiserver-3.32 Package: calico-app-policy-3.31 Package: calico-app-policy-3.32 Package: calico-cni-3.31 Package: calico-cni-3.32 Package: calico-felix-3.31 Package: calico-felix-3.32 Package: calico-goldmane-3.31 Package: calico-goldmane-3.32 Package: calico-key-cert-provisioner-3.31 Package: calico-key-cert-provisioner-3.32 Package: calico-kube-controllers-3.31 Package: calico-kube-controllers-3.32 Package: calico-node-3.31 Package: calico-node-3.32 Package: calico-pod2daemon-3.31 Package: calico-pod2daemon-3.32 Package: calico-typha-client-3.31 Package: calico-typha-client-3.32 Package: calico-typhad-3.31 Package: calico-typhad-3.32 Package: calico-whisker-backend-3.31 Package: calico-whisker-backend-3.32 Package: calicoctl-3.31 Package: calicoctl-3.32 Package: cass-operator Package: cerbos Package: cerbosctl Package: cert-exporter Package: cert-manager Package: cert-manager-1.20 Package: cert-manager-acmesolver-1.20 Package: cert-manager-cainjector-1.20 Package: cert-manager-cmctl Package: cert-manager-controller-1.20 Package: cert-manager-csi-driver Package: cert-manager-istio-csr Package: cert-manager-startupapicheck-1.20 Package: cert-manager-webhook-1.20 Package: cert-manager-webhook-pdns Package: certificate-transparency-trillian-ctserver Package: cf-cli Package: cfssl Package: cfssl-multirootca Package: chartmuseum Package: chezmoi Package: cilium-1.19 Package: cilium-1.19-clustermesh-apiserver Package: cilium-1.19-envoy Package: cilium-1.19-hubble-relay Package: cilium-1.19-operator-aws Package: cilium-1.19-operator-generic Package: cilium-certgen-0.4 Package: cilium-cli Package: cis-operator-1.4 Package: clickhouse-operator Package: clickhouse-operator-metrics-exporter Package: cloud-provider-aws-1.35-cloud-controller-manager Package: cloud-provider-aws-1.36-cloud-controller-manager Package: cloud-provider-azure-cloud-controller-manager-1.35 Package: cloud-provider-azure-cloud-controller-manager-1.36 Package: cloud-provider-azure-cloud-node-manager-1.35 Package: cloud-provider-azure-cloud-node-manager-1.36 Package: cloud-provider-gcp-cloud-controller-manager Package: cloud-provider-kubevirt Package: cloud-provider-vsphere Package: cloud-sql-proxy-2.16 Package: cloud-sql-proxy-2.21 Package: cloud-sql-proxy-2.22 Package: cloud-sql-proxy-2.23 Package: cloud-sql-proxy-2.24 Package: cloud-sql-proxy-2.25 Package: cloud-sql-proxy-2.26 Package: cloudflared Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cloudprober Package: cluster-api-1.12-capd-manager Package: cluster-api-1.12-clusterctl Package: cluster-api-1.12-controller Package: cluster-api-1.12-kubeadm-bootstrap-controller Package: cluster-api-1.12-kubeadm-control-plane-controller Package: cluster-api-1.13-capd-manager Package: cluster-api-1.13-clusterctl Package: cluster-api-1.13-controller Package: cluster-api-1.13-kubeadm-bootstrap-controller Package: cluster-api-1.13-kubeadm-control-plane-controller Package: cluster-api-aws-controller Package: cluster-api-azure-controller Package: cluster-api-gcp-controller Package: cluster-api-helm-controller Package: cluster-api-ipam-provider-in-cluster Package: cluster-api-provider-vsphere Package: cluster-autoscaler-1.35 Package: cluster-proportional-autoscaler Package: cni-plugins Package: cni-plugins-all Package: cni-plugins-aws-k8s-compat Package: cni-plugins-dhcp Package: cni-plugins-ipam Package: configmap-reload Package: conftest Package: conjur-cli Package: consul-k8s-1.9 Package: consul-k8s-1.9-cli Package: container-object-storage-interface-controller Package: container-object-storage-interface-sidecar Package: containerd Package: containerd-1 Package: containerd-2 Package: containerd-2.3 Package: containerd-2.4 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-shim-runc-v2-2.3 Package: containerd-shim-runc-v2-2.4 Package: containerd-stress-1 Package: containerd-stress-2 Package: containerd-stress-2.3 Package: containerd-stress-2.4 Package: containerd2 Package: containerized-data-importer Package: continuity Package: coredns Package: coredns-1.14 Package: cortex Package: cosign-3 Package: cri-o Package: cri-tools Package: cri-tools Package: crictl Package: critest Package: crossplane-2.2 Package: crossplane-2.2-crank Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sqs Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-storage Package: crossplane-provider-family-aws Package: crossplane-provider-family-azure Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: ctr-1 Package: ctr-2 Package: ctr-2.3 Package: ctr-2.4 Package: custom-pod-autoscaler Package: custom-pod-autoscaler-operator Package: dagdotdev Package: dagger Package: dapr-daprd-1.17 Package: dapr-injector-1.17 Package: dapr-operator-1.17 Package: dapr-placement-1.17 Package: dapr-scheduler-1.17 Package: datadog-agent-7.77 Package: datadog-agent-7.77-fakeintake Package: datadog-agent-7.77-full Package: datadog-agent-7.78 Package: datadog-agent-7.78-fakeintake Package: datadog-agent-7.78-full Package: datadog-agent-7.79 Package: datadog-agent-7.79-full Package: datadog-agent-7.80 Package: datadog-agent-7.80-fakeintake Package: datadog-agent-7.80-full Package: datadog-agent-7.81 Package: datadog-agent-7.81-fakeintake Package: datadog-agent-7.81-full Package: datadog-cluster-agent-7.77 Package: datadog-cluster-agent-7.78 Package: datadog-cluster-agent-7.79 Package: datadog-cluster-agent-7.80 Package: datadog-cluster-agent-7.81 Package: datadog-operator Package: dataplaneapi Package: db-operator Package: dbmate Package: descheduler Package: dex Package: dgraph Package: distribution Package: dkron Package: dkron-executor-gcppubsub Package: dkron-executor-grpc Package: dkron-executor-kafka Package: dkron-executor-nats Package: dkron-executor-rabbitmq Package: dkron-processor-files Package: dkron-processor-fluent Package: dkron-processor-log Package: dkron-processor-syslog Package: docker Package: docker-buildx Package: docker-cli Package: docker-cli-buildx Package: docker-compose Package: docker-compose Package: docker-machine-driver-harvester Package: docker-machine-driver-linode Package: dockerd-28 Package: dogstatsd-7.77 Package: dogstatsd-7.78 Package: dogstatsd-7.79 Package: dogstatsd-7.80 Package: dogstatsd-7.81 Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: emissary Package: emissary-apiext Package: envconsul Package: envoy-ratelimit Package: esbuild Package: etcd Package: etcd-3.6 Package: external-dns-0.21 Package: external-secrets-operator-2.3 Package: external-secrets-operator-2.4 Package: external-secrets-operator-2.5 Package: external-secrets-operator-2.6 Package: falco-exporter Package: falco-no-driver Package: falcoctl Package: falcosidekick Package: ferretdb Package: filebrowser Package: flannel Package: flannel Package: fluent-bit-plugin-loki Package: fluent-operator Package: flux-2.7 Package: flux-2.8 Package: flux-2.9 Package: flux-helm-controller Package: flux-image-automation-controller Package: flux-image-reflector-controller Package: flux-kustomize-controller Package: flux-notification-controller Package: flux-source-controller Package: fluxcd-kustomize-mutating-webhook Package: flyte Package: fulcio Package: fuse-overlayfs-snapshotter Package: gatekeeper-3.22 Package: gatekeeper-3.22-gator Package: gatus Package: gcc Package: gcp-compute-persistent-disk-csi-driver-1.25 Package: gcsfuse Package: gh Package: gh Package: git-credential-oauth Package: git-lfs Package: git-lfs Package: github-mcp-server Package: gitlab-agent-19.2 Package: gitlab-agent-19.3 Package: gitlab-agent-19.4 Package: gitlab-docker-machine-19.2 Package: gitlab-docker-machine-19.3 Package: gitlab-kas-19.2 Package: gitlab-kas-19.3 Package: gitlab-kas-19.4 Package: gitlab-pages-19.2 Package: gitlab-pages-19.3 Package: gitlab-runner-19.2 Package: gitlab-runner-19.3 Package: gitlab-runner-helper-19.2 Package: gitlab-runner-helper-19.3 Package: gitness Package: gitsign Package: gitsign-credential-cache Package: go Package: go-1.25 Package: go-1.25-asm Package: go-1.25-cover Package: go-1.25-doc Package: go-bindata Package: go-discover Package: gogatekeeper Package: golang Package: golang-1.10 Package: golang-1.13 Package: golang-1.14 Package: golang-1.16 Package: golang-1.17 Package: golang-1.18 Package: golang-1.19 Package: golang-1.20 Package: golang-1.21 Package: golang-1.22 Package: golang-1.23 Package: golang-1.24 Package: golang-1.24 Package: golang-1.25 Package: golang-1.26 Package: golang-1.26 Package: golang-1.27 Package: golang-1.27 Package: golang-1.6 Package: golang-1.8 Package: golang-1.9 Package: golang-golang-x-net Package: golang-golang-x-net Package: golang-golang-x-net-dev Package: golang.org/x/net Package: gomplate-5 Package: google-guest-agent Package: google-osconfig-agent Package: goreleaser Package: gostatsd Package: gptscript Package: gpu-feature-discovery Package: grafana-12.3 Package: grafana-12.4 Package: grafana-13.0 Package: grafana-agent-operator Package: grafana-alloy Package: grafana-image-renderer Package: grafana-mimir-3.0 Package: grafana-mimir-3.0-metaconvert-3.0 Package: grafana-mimir-3.0-mimirtool-3.0 Package: grafana-mimir-3.0-query-tee-3.0 Package: grafana-mimir-3.1 Package: grafana-mimir-3.1-metaconvert-3.1 Package: grafana-mimir-3.1-mimirtool-3.1 Package: grafana-mimir-3.1-query-tee-3.1 Package: grafana-operator Package: grafana-pyroscope-1.19 Package: grafana-pyroscope-2.0 Package: grafana-rollout-operator Package: grpc-health-probe Package: grpcurl Package: grype Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: haproxy-ingress-0.16 Package: harbor-2.14 Package: harbor-2.14-exporter Package: harbor-2.14-jobservice Package: harbor-2.14-registryctl Package: harbor-registry Package: headlamp Package: helm-3 Package: helm-4 Package: helm-mapkubeapis Package: helm-operator Package: helm-push Package: helm-set-status Package: http-echo Package: hubble Package: hubble-ui-backend Package: hydra Package: ignition-flatcar Package: infinispan-operator Package: influxdb Package: ingress-nginx-controller-1.15 Package: ingress-nginx-custom-error-pages-1.15 Package: istio-cni-1.29 Package: istio-cni-1.30 Package: istio-install-cni-1.29 Package: istio-install-cni-1.30 Package: istio-pilot-agent-1.29 Package: istio-pilot-agent-1.30 Package: istio-pilot-discovery-1.29 Package: istio-pilot-discovery-1.30 Package: istioctl-1.29 Package: istioctl-1.30 Package: jaeger-2-anonymizer Package: jaeger-2-es-index-cleaner Package: jaeger-2-es-rollover Package: jaeger-2-esmapping-generator Package: jaeger-2-jaeger Package: jaeger-2-remote-storage Package: jaeger-2-tracegen Package: jitsucom-bulker-bulker Package: jitsucom-bulker-ingest Package: jitsucom-bulker-ingmgr Package: jitsucom-bulker-sidecar Package: juicefs-1.3 Package: juicefs-csi-driver Package: juju-core Package: jx Package: k3d Package: k3d-proxy Package: k3s-1.32 Package: k3s-1.34 Package: k3s-1.35 Package: k3s-1.36 Package: k3s-1.37 Package: k3s-multicall-1.32 Package: k3s-static-1.32 Package: k3s-static-1.34 Package: k3s-static-1.35 Package: k3s-static-1.36 Package: k3s-static-1.37 Package: k6 Package: k8s_gateway Package: k8sgpt Package: k8sgpt-operator Package: k8ssandra-client Package: k8ssandra-operator Package: k9s Package: kaf Package: kafka-proxy Package: kaniko Package: kapp Package: kapp-controller Package: kargo-1.10 Package: karpenter-1.11 Package: karpenter-1.12 Package: kata-containers Package: kata-containers-cc Package: kata-containers-preview Package: katib-controller Package: katib-db-manager Package: katib-file-metricscollector Package: katib-suggestion-goptuna Package: keda Package: keda-2.19 Package: keda-2.19-admission-webhooks Package: keda-2.19-metrics-apiserver Package: keda-2.20 Package: keda-2.20-admission-webhooks Package: keda-2.20-metrics-apiserver Package: kiali Package: kine Package: knative-client Package: knative-eventing-1.21-channel-controller Package: knative-eventing-1.21-channel-dispatcher Package: knative-eventing-1.21-controller Package: knative-eventing-1.21-filter Package: knative-eventing-1.21-ingress Package: knative-eventing-1.21-jobsink Package: knative-eventing-1.21-mtchannel-broker Package: knative-eventing-1.21-webhook Package: knative-eventing-1.22-channel-controller Package: knative-eventing-1.22-channel-dispatcher Package: knative-eventing-1.22-controller Package: knative-eventing-1.22-filter Package: knative-eventing-1.22-ingress Package: knative-eventing-1.22-jobsink Package: knative-eventing-1.22-mtchannel-broker Package: knative-eventing-1.22-webhook Package: knative-operator-1.21 Package: knative-operator-1.21-webhook Package: knative-operator-1.22 Package: knative-operator-1.22-webhook Package: knative-serving-1.21-activator Package: knative-serving-1.21-autoscaler Package: knative-serving-1.21-autoscaler-hpa Package: knative-serving-1.21-cleanup Package: knative-serving-1.21-controller Package: knative-serving-1.21-queue Package: knative-serving-1.21-webhook Package: knative-serving-1.22-activator Package: knative-serving-1.22-autoscaler Package: knative-serving-1.22-autoscaler-hpa Package: knative-serving-1.22-cleanup Package: knative-serving-1.22-controller Package: knative-serving-1.22-queue Package: knative-serving-1.22-webhook Package: ko Package: kor Package: kots Package: kpt Package: kratos Package: kratos-protoc-gen Package: kserve-agent Package: kserve-localmodel Package: kserve-manager Package: kserve-modelmesh-serving Package: kserve-qpext Package: kserve-rest-proxy Package: kserve-router Package: ksops Package: kube-apiserver-1.34 Package: kube-apiserver-1.35 Package: kube-apiserver-1.36 Package: kube-apiserver-1.37 Package: kube-arangodb-1.4 Package: kube-bench Package: kube-controller-manager-1.34 Package: kube-controller-manager-1.35 Package: kube-controller-manager-1.36 Package: kube-controller-manager-1.37 Package: kube-logging-operator Package: kube-logging-operator-config-reloader Package: kube-logging-operator-custom-runner Package: kube-metrics-adapter Package: kube-proxy-1.34 Package: kube-proxy-1.35 Package: kube-proxy-1.36 Package: kube-proxy-1.37 Package: kube-rbac-proxy Package: kube-scheduler-1.34 Package: kube-scheduler-1.35 Package: kube-scheduler-1.36 Package: kube-scheduler-1.37 Package: kube-state-metrics Package: kube-vip Package: kube-vip-cloud-provider Package: kube-vip-cloud-provider Package: kube-webhook-certgen-1.15 Package: kubeadm-1.34 Package: kubeadm-1.35 Package: kubeadm-1.36 Package: kubeadm-1.37 Package: kubectl-1.32 Package: kubectl-1.33 Package: kubectl-1.34 Package: kubectl-1.35 Package: kubectl-1.36 Package: kubectl-1.37 Package: kubectl-argo-rollouts Package: kubeflow-access-management Package: kubeflow-admission-webhook Package: kubeflow-notebook-controller Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: kubeflow-profile-controller Package: kubeflow-pvcviewer-controller Package: kubeflow-tensorboard-controller Package: kubelet-1.34 Package: kubelet-1.35 Package: kubelet-1.36 Package: kubelet-1.37 Package: kubelet-csr-approver Package: kuberay-operator Package: kuberlr Package: kubernetes Package: kubernetes-1.34 Package: kubernetes-1.35 Package: kubernetes-1.36 Package: kubernetes-1.37 Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-health-monitor Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-external-snapshot-controller-8.5 Package: kubernetes-csi-external-snapshot-controller-8.6 Package: kubernetes-csi-external-snapshotter-8.5 Package: kubernetes-csi-external-snapshotter-8.6 Package: kubernetes-csi-livenessprobe Package: kubernetes-csi-node-driver-registrar-2.16 Package: kubernetes-csi-node-driver-registrar-2.17 Package: kubernetes-dashboard Package: kubernetes-dashboard-api Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-web Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubernetes-ingress-defaultbackend Package: kubernetes-replicator Package: kubescape Package: kubescape-operator Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubevirt Package: kubevirt-openvmm Package: kubewatch Package: kubo Package: kuma-cni-2.12 Package: kuma-cni-2.13 Package: kuma-coredns-1.14 Package: kuma-cp-2.12 Package: kuma-cp-2.13 Package: kuma-dp-2.12 Package: kuma-dp-2.13 Package: kuma-install-cni-2.12 Package: kuma-install-cni-2.13 Package: kumactl-2.12 Package: kumactl-2.13 Package: kured Package: kwok Package: kwokctl Package: kyverno-1.17 Package: kyverno-1.18 Package: kyverno-background-controller-1.17 Package: kyverno-background-controller-1.18 Package: kyverno-cleanup-controller-1.17 Package: kyverno-cleanup-controller-1.18 Package: kyverno-cli-1.17 Package: kyverno-cli-1.18 Package: kyverno-init-container-1.17 Package: kyverno-init-container-1.18 Package: kyverno-notation-aws Package: kyverno-policy-reporter Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-ui Package: kyverno-readiness-checker-1.17 Package: kyverno-readiness-checker-1.18 Package: kyverno-reports-controller-1.17 Package: kyverno-reports-controller-1.18 Package: lazygit Package: libcontainers-common Package: linkerd2-cli Package: linkerd2-controller Package: linkerd2-metrics-api Package: linkerd2-tap Package: linkerd2-web Package: litefs Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: local-volume-node-cleanup Package: logstash-exporter Package: loki-3.6 Package: loki-3.6-logcli Package: loki-3.6-loki-canary Package: loki-3.6-promtail Package: loki-3.7 Package: loki-3.7-logcli Package: loki-3.7-loki-canary Package: lvm-driver Package: lxd Package: mailpit Package: mariadb-operator Package: mattermost-11.5 Package: mattermost-11.6 Package: mattermost-11.7 Package: mc Package: mcp-grafana Package: melange Package: mesosphere-vsphere-csi-driver Package: mesosphere-vsphere-csi-syncer Package: metacontroller Package: metallb Package: metallb-controller Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metrics-agent Package: metrics-server Package: migrate Package: minio Package: minio-object-browser Package: minio-operator Package: minio-operator-sidecar Package: moby-containerd-cc Package: moby-engine Package: mongo-tools Package: mongodb-kubernetes-operator Package: mongodb-kubernetes-operator-compat Package: mongodb-kubernetes-operator-readinessprobe Package: mongodb-kubernetes-operator-version-upgrade-post-start-hook Package: mountpoint-s3-csi-driver-2.5 Package: mountpoint-s3-csi-driver-2.6 Package: mps-control-daemon Package: multus Package: multus-cni Package: nats Package: nats-server Package: nerdctl Package: net-kourier-1.21 Package: net-kourier-1.22 Package: neuvector-scanner Package: neuvector-scanner-task Package: neuvector-sigstore-interface Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-nri-kube-events Package: newrelic-nri-statsd Package: nfs-subdir-external-provisioner Package: no-docs-check Package: node-feature-discovery-0.18 Package: node-problem-detector-1.35 Package: node-problem-detector-1.36 Package: nodetaint Package: nova Package: nri-discovery-kubernetes Package: nri-kubernetes Package: nri-mssql Package: nri-prometheus Package: nuclei Package: nvidia-device-plugin Package: oauth2-proxy Package: octo-sts Package: octo-sts-webhook Package: ollama Package: op-geth Package: op-geth-clef Package: op-geth-devp2p Package: op-geth-evm Package: opa Package: opa Package: opa-envoy Package: openbao Package: openbao-k8s Package: opencost Package: openfga Package: opensearch-k8s-operator Package: opentelemetry-collector Package: opentelemetry-collector-contrib Package: opentelemetry-operator Package: opentelemetry-operator-otel-allocator Package: opentofu-1.11 Package: opentofu-1.12 Package: opentofu-1.9 Package: osv-scanner Package: otel-cli Package: packer Package: percona-server-mongodb-operator Package: pg_timetable Package: pgpool2_exporter Package: php-fpm_exporter Package: pluto Package: podcli Package: podinfo Package: podman Package: podman-6.0 Package: polaris Package: policy-controller Package: policy-controller-tester Package: portieris Package: postgres-operator Package: prometheus-3.11 Package: prometheus-3.12 Package: prometheus-adapter Package: prometheus-adapter Package: prometheus-admission-webhook Package: prometheus-alertmanager Package: prometheus-config-reloader Package: prometheus-node-exporter Package: prometheus-operator Package: prometheus-process-exporter Package: promxy Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-go Package: pulumi-language-java Package: pulumi-language-nodejs Package: pulumi-language-python Package: pulumi-language-yaml Package: pvc-autoresizer Package: python-tensorboard Package: q Package: rabbitmq-cluster-operator Package: rabbitmq-messaging-topology-operator Package: rancher-2.13 Package: rancher-2.14 Package: rancher-agent-2.13 Package: rancher-agent-2.14 Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-helm-3 Package: rancher-machine Package: rancher-system-agent Package: rancher-system-upgrade-controller Package: rancher-webhook-0.10 Package: ratify Package: ratify-licensechecker Package: ratify-sbom Package: ratify-schemavalidator Package: ratify-vulnerabilityreport Package: rclone Package: redis-operator Package: rekor-cli Package: rekor-server Package: renovate Package: restic Package: rke2-cloud-provider Package: rook-1.19 Package: rook-1.19-oci-compat Package: rqlite Package: runc Package: runc-1.4 Package: scorecard Package: sealed-secrets Package: sealed-secrets-kubeseal Package: seaweedfs Package: secrets-store-csi-driver Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: secrets-store-csi-driver-provider-gcp Package: sftpgo Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-geoipfilter Package: sftpgo-plugin-kms Package: sftpgo-plugin-pubsub Package: sigstore-scaffolding-ctlog-createctconfig Package: sigstore-scaffolding-fulcio-createcerts Package: sigstore-scaffolding-rekor-createsecret Package: sigstore-scaffolding-trillian-createtree Package: sigstore-scaffolding-trillian-updatetree Package: sigstore-scaffolding-tsa-createcertchain Package: sigstore-scaffolding-tuf-createsecret Package: sigstore-scaffolding-tuf-server Package: skaffold Package: skopeo Package: skopeo Package: slsa-verifier Package: smarter-device-manager Package: snyk-cli Package: sonobuoy Package: sops Package: spark-operator Package: spegel Package: spicedb Package: spicedb-operator Package: spiffe-helper Package: spire-agent Package: spire-controller-manager Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: spqr Package: sql_exporter Package: src Package: sriov-network-device-plugin Package: sriov-network-device-plugin Package: stakater-reloader Package: stdlib Package: steampipe Package: step Package: step-ca Package: step-issuer Package: step-kms-plugin Package: stern Package: syft Package: symlink-check Package: tailscale-k8s-operator Package: task Package: tekton-chains Package: tekton-pipelines-controller-1.11 Package: tekton-pipelines-controller-1.12 Package: tekton-pipelines-controller-1.13 Package: tekton-pipelines-entrypoint-1.11 Package: tekton-pipelines-entrypoint-1.12 Package: tekton-pipelines-entrypoint-1.13 Package: tekton-pipelines-events-1.11 Package: tekton-pipelines-events-1.12 Package: tekton-pipelines-events-1.13 Package: tekton-pipelines-resolvers-1.11 Package: tekton-pipelines-resolvers-1.12 Package: tekton-pipelines-resolvers-1.13 Package: tekton-pipelines-sidecarlogresults-1.11 Package: tekton-pipelines-sidecarlogresults-1.12 Package: tekton-pipelines-sidecarlogresults-1.13 Package: tekton-pipelines-webhook-1.11 Package: tekton-pipelines-webhook-1.12 Package: tekton-pipelines-webhook-1.13 Package: telegraf Package: telegraf-1.38 Package: tempo-2.10 Package: tempo-2.10-cli Package: tempo-2.10-query Package: tempo-2.10-vulture Package: tempo-3.0 Package: tempo-3.0-cli Package: tempo-3.0-query Package: tempo-3.0-vulture Package: temporal Package: temporal-ui-server Package: tensorflow Package: terraform Package: terraform-docs Package: terraform-mcp-server Package: terraform-provider-acme Package: terraform-provider-aws Package: terraform-provider-azapi Package: terraform-provider-azuread Package: terraform-provider-azurerm Package: terraform-provider-google Package: terraform-provider-grafana Package: terraform-provider-kubernetes Package: terraform-provider-pagerduty Package: terraform-provider-random Package: terraform-provider-sendgrid Package: terraform-provider-time Package: terraform-provider-tls Package: terragrunt Package: tetra Package: tetragon Package: tetragon-operator Package: tflint Package: tfsec Package: thanos Package: thanos-operator Package: tigera-operator-1.42 Package: timestamp-authority-server Package: timoni Package: tkn Package: tofu-controller Package: traefik-3.6 Package: traefik-3.7 Package: trillian-logserver Package: trillian-logsigner Package: trivy Package: trivy-operator Package: trufflehog Package: trust-manager Package: tw Package: twt Package: undock Package: vault-benchmark Package: vault-env Package: vault-k8s Package: vault-secrets-webhook Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: velero Package: velero-plugin-for-aws Package: velero-plugin-for-aws-compat Package: velero-plugin-for-microsoft-azure Package: verticadb-operator Package: vertical-pod-autoscaler Package: vertical-pod-autoscaler-updater Package: vexctl Package: victoriametrics Package: victoriametrics-operator Package: victoriametrics-operator-config-reloader Package: victoriametrics-vmagent Package: victoriametrics-vmalert Package: victoriametrics-vmauth Package: vitess Package: vitess-23-binaries Package: vitess-24 Package: vitess-24-binaries Package: volume-modifier-for-k8s Package: wal-g-pg Package: wave Package: weaviate Package: whereabouts Package: witness Package: wolfictl Package: x509-certificate-exporter Package: xeol Package: yace Package: yunikorn-k8shim Package: yunikorn-web Package: zarf Package: zot Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configured connection-level flow control limit (MaxReceiveBufferPerConnection). Total buffered data is still limited by the concurrent stream limit and stream-level flow control.

Affected products

VendorProductAffectedFixed
Go standard library net/http < 1.26.9 1.26.9
Go standard library net/http/internal/http2 1.27.0-0 – < 1.27.2 1.27.2
golang.org/x/net golang.org/x/net/http2 < 0.60.0 0.60.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-1.26 1.26.9-1 —
Debian 14 golang-1.27 1.27.2-1 —
Debian 14 golang-golang-x-net 1:0.60.0-1 —
Debian 13 golang-1.24 +1 No fix yet —
Debian 12 golang-1.19 +1 No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 adsys +6 No fix yet —
Ubuntu 26.04 LTS adsys +7 No fix yet —
Ubuntu 24.04 LTS adsys +7 No fix yet —
Ubuntu 24.04 LTS golang-1.22 1.22.2-2ubuntu0.5 USN-8935-1
Ubuntu 22.04 LTS adsys +12 No fix yet —
Ubuntu 22.04 LTS golang-1.22 1.22.2-2~22.04.4 USN-8935-1
Ubuntu 20.04 LTS golang-1.22 1.22.2-2~20.04.3 USN-8935-1
Ubuntu 20.04 LTS lxd +5 No fix yet —
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS golang-1.8 +2 No fix yet —
Ubuntu 16.04 LTS golang-1.6 +1 No fix yet —
Ubuntu 14.04 LTS golang-1.10 No fix yet —
Ubuntu Pro 26.04 LTS containerd No fix yet —
Ubuntu Pro 24.04 LTS containerd +1 No fix yet —
Ubuntu Pro 22.04 LTS golang-1.13 No fix yet —
Ubuntu Pro 20.04 LTS adsys +5 No fix yet —
Ubuntu Pro 18.04 LTS lxd +7 No fix yet —
Ubuntu Pro 16.04 LTS lxd +7 No fix yet —

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 golang +7 1.26.10-1.el10_2.alma.1 ALSA-2026:86093
AlmaLinux 9 golang +7 1.26.10-1.el9_8 ALSA-2026:86196
AlmaLinux 8 delve 1.26.1-1.module_el8.10.0+4307+6e4cbc60 ALSA-2026:86203
AlmaLinux 8 golang +7 1.26.10-1.module_el8.10.0+4307+6e4cbc60 ALSA-2026:86203

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES 15 SP7 go1.26-openssl 1.26.10-150600.13.18.1 SUSE-SU-2026:4866-1
SLES 15 SP7 go1.27 1.27.2-150000.1.12.1 SUSE-SU-2026:4625-1
SLES 15 SP7 kubevirt 1.7.4-150700.3.42.1 SUSE-SU-2026:5167-1
SLES 15 SP6 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES 15 SP6 go1.26-openssl 1.26.10-150600.13.18.1 SUSE-SU-2026:4866-1
SLES 15 SP6 go1.27 1.27.2-150000.1.12.1 SUSE-SU-2026:4625-1
SLES 15 SP5 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES 15 SP5 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLES 15 SP5 go1.27 1.27.2-150000.1.12.1 SUSE-SU-2026:4625-1
SLES 15 SP4 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES 15 SP4 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLES 15 SP4 go1.27 1.27.2-150000.1.12.1 SUSE-SU-2026:4625-1
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 go1.26 1.26.10-160000.1.1 SUSE-SU-2026:24359-1
SLES for SAP 16.0 go1.27 1.27.2-160000.1.1 SUSE-SU-2026:24237-1
SLES for SAP 16.0 google-cloud-sap-agent 3.15-160000.5.1 SUSE-SU-2026:24604-1
SLES for SAP 15 SP6 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES for SAP 15 SP6 go1.26-openssl 1.26.10-150600.13.18.1 SUSE-SU-2026:4866-1
SLES for SAP 15 SP6 go1.27 1.27.2-150000.1.12.1 SUSE-SU-2026:4625-1
SLES for SAP 15 SP5 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES for SAP 15 SP5 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLES for SAP 15 SP5 go1.27 1.27.2-150000.1.12.1 SUSE-SU-2026:4625-1
SLES for SAP 15 SP4 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLES for SAP 15 SP4 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLES for SAP 15 SP4 go1.27 1.27.2-150000.1.12.1 SUSE-SU-2026:4625-1
SLES 16.0 go1.26 1.26.10-160000.1.1 SUSE-SU-2026:24359-1
SLES 16.0 go1.27 1.27.2-160000.1.1 SUSE-SU-2026:24237-1
SLES 16.0 google-cloud-sap-agent 3.15-160000.5.1 SUSE-SU-2026:24604-1
SLE Micro 6.1 google-guest-agent 20261022.00-slfo.1.1_1.1 SUSE-SU-2026:24555-1
SLE Micro 6.0 google-guest-agent 20261022.00-159998.1.1 SUSE-SU-2026:24475-1
SLE HPC 15 SP5 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLE HPC 15 SP5 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLE HPC 15 SP5 go1.27 1.27.2-150000.1.12.1 SUSE-SU-2026:4625-1
SLE HPC 15 SP4 go1.26 1.26.10-150000.1.36.1 SUSE-SU-2026:4864-1
SLE HPC 15 SP4 go1.26-openssl 1.26.10-150000.1.21.2 SUSE-SU-2026:4867-1
SLE HPC 15 SP4 go1.27 1.27.2-150000.1.12.1 SUSE-SU-2026:4625-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed alloy 1.21.3-1.1 openSUSE-SU-2026:12446-1
openSUSE Tumbleweed amazon-cloudwatch-agent 1.300073.2-2.1 openSUSE-SU-2026:12267-1
openSUSE Tumbleweed amazon-ssm-agent 3.3.5708.0-1.1 openSUSE-SU-2026:12414-1
openSUSE Tumbleweed azure-storage-azcopy 10.34.1-1.1 openSUSE-SU-2026:12268-1
openSUSE Tumbleweed cadvisor 0.60.6-5.1 openSUSE-SU-2026:12317-1
openSUSE Tumbleweed distribution 3.1.2-3.1 openSUSE-SU-2026:12283-1
openSUSE Tumbleweed git-bug 0.11.0-3.1 openSUSE-SU-2026:12261-1
openSUSE Tumbleweed go1.26 1.26.10-1.1 openSUSE-SU-2026:12212-1
openSUSE Tumbleweed go1.27 1.27.2-1.1 openSUSE-SU-2026:12101-1
openSUSE Tumbleweed google-guest-agent +1 20261022.00-1.1 openSUSE-SU-2026:12287-1, openSUSE-SU-2026:12286-1
openSUSE Tumbleweed helm 4.3.1-3.1 openSUSE-SU-2026:12326-1
openSUSE Tumbleweed hugo 0.168.0-3.1 openSUSE-SU-2026:12293-1
openSUSE Tumbleweed kyverno 1.19.2-1.1 openSUSE-SU-2026:12214-1
openSUSE Tumbleweed rclone 1.75.2-1.1 openSUSE-SU-2026:12112-1
openSUSE Tumbleweed timoni 0.36.0-1.1 openSUSE-SU-2026:12309-1
openSUSE Tumbleweed vexctl 0.4.4+git106.aa6ffc8-1.1 openSUSE-SU-2026:12207-1
openSUSE Leap 16.0 cadvisor 0.60.6-bp160.4.1 openSUSE-SU-2026:22218-1
openSUSE Leap 16.0 go1.26 1.26.10-160000.1.1 openSUSE-SU-2026:22152-1
openSUSE Leap 16.0 go1.27 1.27.2-160000.1.1 openSUSE-SU-2026:22093-1
openSUSE Leap 16.0 google-cloud-sap-agent 3.15-160000.5.1 openSUSE-SU-2026:22236-1
openSUSE Leap 16.0 kubevirt1.9 1.9.1-160000.1.1 openSUSE-SU-2026:22180-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 docker 29.9.0-r0 —
Alpine v3.24 go 1.26.9-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300073.2-1.amzn2023 ALAS2023-2026-3350
Amazon Linux 2023 amazon-ecr-credential-helper 0.12.0-5.amzn2023 ALAS2023-2026-3271
Amazon Linux 2023 buildah 2:1.43.1-1.amzn2023.0.2 ALAS2023-2026-3256
Amazon Linux 2023 containerd +1 2.3.7-1.amzn2023.0.1 ALAS2023-2026-3273
Amazon Linux 2023 credentials-fetcher 2.0.3-1.amzn2023.0.7 ALAS2023-2026-3228
Amazon Linux 2023 docker 25.0.18-1.amzn2023.0.2 ALAS2023-2026-3324
Amazon Linux 2023 golang +6 1.26.9-1.amzn2023.0.1 ALAS2023-2026-3225
Amazon Linux 2023 nerdctl 2.3.5-1.amzn2023.0.2 ALAS2023-2026-3274
Amazon Linux 2023 oci-add-hooks 0-0.1.20200504git268e3bb.amzn2023.0.13 ALAS2023-2026-3272
Amazon Linux 2023 skopeo +1 2:1.22.2-1.amzn2023.0.2 ALAS2023-2026-3254
Amazon Linux 2023 soci-snapshotter 0.16.0-1.amzn2023.0.2 ALAS2023-2026-3270
Amazon Linux 2 amazon-cloudwatch-agent 1.300073.2-1.amzn2 ALAS2-2026-4049
Amazon Linux 2 golang +6 1.26.9-1.amzn2.0.1 ALAS2-2026-4005
Amazon Linux 2 nerdctl 2.3.5-1.amzn2.0.2 ALAS2-2026-4018

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 cert-manager 1.12.15-15 —
Azure Linux 3 cloud-provider-kubevirt 0.5.1-10 —
Azure Linux 3 containerized-data-importer 1.62.0-9 —
Azure Linux 3 etcd 3.5.35-1 —
Azure Linux 3 gh +34 No fix yet —
Azure Linux 3 influxdb 2.7.5-22 —
Azure Linux 3 kata-containers 4.1.0.kata1-2 —
Azure Linux 3 kata-containers-cc 3.15.0.aks0-23 —
Azure Linux 3 kube-vip-cloud-provider 0.0.10-11 —
Azure Linux 3 kubernetes 1.30.10-32 —
Azure Linux 3 kubevirt 1.8.4-4 —
Azure Linux 3 moby-containerd-cc 1.7.7-19 —
Azure Linux 3 opa 0.63.0-6 —
Azure Linux 3 prometheus-adapter 0.12.0-12 —
Azure Linux 3 prometheus-node-exporter 1.7.0-6 —
Azure Linux 3 prometheus-process-exporter 0.8.2-6 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r79 —
Wolfi rolling actions-runner-controller 0.15.0-r1 —
Wolfi rolling addon-resizer 1.8.24-r7 —
Wolfi rolling amass 5.1.1-r20 —
Wolfi rolling amazon-cloudwatch-agent 1.300074.0-r2 —
Wolfi rolling amazon-cloudwatch-agent-operator 3.7.0-r9 —
Wolfi rolling amazon-k8s-cni 1.23.2-r2 —
Wolfi rolling apache-exporter 1.1.1-r7 —
Wolfi rolling apisix-ingress-controller 2.2.0-r8 —
Wolfi rolling apko 1.4.8-r2 —
Wolfi rolling argo-cd-3.2 +1 3.2.12-r22 —
Wolfi rolling argo-cd-3.3 +1 3.3.15-r1 —
Wolfi rolling argo-cd-3.4 +1 3.4.10-r1 —
Wolfi rolling argo-events 1.9.11-r16 —
Wolfi rolling argo-rollouts +1 1.10.0-r5 —
Wolfi rolling argo-workflow-executor-4.0 4.0.13-r1 —
Wolfi rolling argo-workflows-3.7 +1 3.7.18-r10 —
Wolfi rolling argo-workflows-4.0 +1 4.0.12-r2 —
Wolfi rolling argocd-image-updater 1.3.1-r2 —
Wolfi rolling atlantis 0.48.1-r1 —
Wolfi rolling authservice 1.1.8-r6 —
Wolfi rolling aws-application-networking-k8s 2.1.3-r5 —
Wolfi rolling aws-efs-csi-driver 3.5.1-r5 —
Wolfi rolling aws-eks-pod-identity-agent 0.2.5-r1 —
Wolfi rolling aws-load-balancer-controller 3.6.0-r2 —
Wolfi rolling aws-network-policy-agent 1.4.3-r1 —
Wolfi rolling aws-node-termination-handler 1.25.6-r21 —
Wolfi rolling aws-otel-collector 0.50.0-r6 —
Wolfi rolling aws-s3-controller 1.13.0-r1 —
Wolfi rolling azcopy 10.32.8-r5 —
Wolfi rolling azure-ipam 0.4.0-r33 —
Wolfi rolling azure-service-operator 2.21.1-r2 —
Wolfi rolling azure-workload-identity-webhook 1.6.3-r4 —
Wolfi rolling azuredisk-csi-1.34 1.34.7-r1 —
Wolfi rolling azurefile-csi-1.35 1.35.10-r3 —
Wolfi rolling bank-vaults +1 1.33.2-r5 —
Wolfi rolling bento 1.22.0-r0 —
Wolfi rolling blob-csi-1.27 1.27.11-r1 —
Wolfi rolling blobfuse2 2.4.2-r28 —
Wolfi rolling boring-registry 0.19.0-r10 —
Wolfi rolling buildah 1.45.1-r3 —
Wolfi rolling buildctl +1 0.34.0-r1 —
Wolfi rolling caddy 2.11.7-r3 —
Wolfi rolling cadvisor 0.60.6-r3 —
Wolfi rolling calicoctl-3.31 +12 3.31.7-r7 —
Wolfi rolling calicoctl-3.32 +12 3.32.3-r0 —
Wolfi rolling cass-operator 1.32.0-r4 —
Wolfi rolling cerbos +1 0.56.0-r2 —
Wolfi rolling cert-exporter 2.19.0-r6 —
Wolfi rolling cert-manager-1.20 +4 1.20.4-r2 —
Wolfi rolling cert-manager-cainjector-1.20 1.20.4-r3 —
Wolfi rolling cert-manager-cmctl 2.6.1-r3 —
Wolfi rolling cert-manager-csi-driver 0.16.0-r10 —
Wolfi rolling cert-manager-istio-csr 0.18.0-r1 —
Wolfi rolling cert-manager-webhook-pdns 2.5.5-r27 —
Wolfi rolling certificate-transparency-trillian-ctserver 1.3.3-r24 —
Wolfi rolling cfssl +1 1.7.1-r1 —
Wolfi rolling chartmuseum 0.16.6-r9 —
Wolfi rolling chezmoi 2.73.0-r2 —
Wolfi rolling cilium-1.19 +5 1.19.8-r3 —
Wolfi rolling cilium-certgen-0.4 0.4.11-r4 —
Wolfi rolling cilium-cli 0.20.1-r3 —
Wolfi rolling cis-operator-1.4 1.4.10-r3 —
Wolfi rolling clickhouse-operator +1 0.27.4-r2 —
Wolfi rolling cloud-provider-aws-1.35-cloud-controller-manager 1.35.2-r18 —
Wolfi rolling cloud-provider-aws-1.36-cloud-controller-manager 1.36.1-r10 —
Wolfi rolling cloud-provider-azure-cloud-node-manager-1.35 +1 1.35.10-r2 —
Wolfi rolling cloud-provider-azure-cloud-node-manager-1.36 +1 1.36.7-r1 —
Wolfi rolling cloud-provider-gcp-cloud-controller-manager 35.0.5-r26 —
Wolfi rolling cloud-provider-vsphere 1.37.0-r5 —
Wolfi rolling cloud-sql-proxy-2.16 2.16.0-r36 —
Wolfi rolling cloud-sql-proxy-2.21 2.21.3-r18 —
Wolfi rolling cloud-sql-proxy-2.22 2.22.1-r11 —
Wolfi rolling cloud-sql-proxy-2.23 2.23.0-r12 —
Wolfi rolling cloud-sql-proxy-2.24 2.24.1-r9 —
Wolfi rolling cloud-sql-proxy-2.25 2.25.4-r5 —
Wolfi rolling cloud-sql-proxy-2.26 2.26.0-r1 —
Wolfi rolling cloudflared 2026.10.0-r2 —
Wolfi rolling cloudnative-pg +1 1.30.1-r2 —
Wolfi rolling cloudprober 0.14.6-r1 —
Wolfi rolling cluster-api-1.12-capd-manager +1 1.12.11-r8 —
Wolfi rolling cluster-api-1.12-clusterctl +2 1.12.11-r7 —
Wolfi rolling cluster-api-1.13-clusterctl +4 1.13.7-r1 —
Wolfi rolling cluster-api-aws-controller 2.13.1-r1 —
Wolfi rolling cluster-api-azure-controller 1.27.0-r4 —
Wolfi rolling cluster-api-gcp-controller 1.13.1-r8 —
Wolfi rolling cluster-api-helm-controller 0.6.4-r24 —
Wolfi rolling cluster-api-ipam-provider-in-cluster 1.1.1-r2 —
Wolfi rolling cluster-api-provider-vsphere 1.17.0-r5 —
Wolfi rolling cluster-autoscaler-1.35 1.35.2-r13 —
Wolfi rolling cluster-proportional-autoscaler 1.11.0-r2 —
Wolfi rolling cni-plugins +4 1.9.1-r16 —
Wolfi rolling configmap-reload 0.15.0-r21 —
Wolfi rolling conftest 0.71.1-r1 —
Wolfi rolling conjur-cli 9.3.1-r2 —
Wolfi rolling consul-k8s-1.9 +1 1.9.12-r3 —
Wolfi rolling container-object-storage-interface-sidecar +1 0.2.2-r32 —
Wolfi rolling continuity 0.11.0-r5 —
Wolfi rolling coredns-1.14 +1 1.14.7-r7 —
Wolfi rolling cortex 1.21.1-r17 —
Wolfi rolling cosign-3 3.1.3-r9 —
Wolfi rolling crictl +2 1.37.0-r2 —
Wolfi rolling crossplane-2.2 +1 2.2.6-r3 —
Wolfi rolling crossplane-provider-aws-s3 +2 2.9.0-r2 —
Wolfi rolling crossplane-provider-azure-sql +4 2.8.0-r1 —
Wolfi rolling crossplane-provider-keycloak 3.1.1-r2 —
Wolfi rolling ctr-1 +3 1.7.36-r5 —
Wolfi rolling ctr-2 +8 2.4.1-r2 —
Wolfi rolling ctr-2.3 +3 2.3.6-r3 —
Wolfi rolling custom-pod-autoscaler 2.12.2-r20 —
Wolfi rolling custom-pod-autoscaler-operator 1.4.2-r25 —
Wolfi rolling dagdotdev 0.0.20-r33 —
Wolfi rolling dagger 0.21.10-r3 —
Wolfi rolling dapr-daprd-1.17 +4 1.17.15-r1 —
Wolfi rolling datadog-operator 1.31.0-r2 —
Wolfi rolling dataplaneapi 3.4.4-r0 —
Wolfi rolling db-operator 2.44.0-r0 —
Wolfi rolling dbmate 2.36.0-r3 —
Wolfi rolling descheduler 0.37.0-r3 —
Wolfi rolling dex 2.46.0-r1 —
Wolfi rolling dgraph 25.4.1-r7 —
Wolfi rolling distribution +1 3.1.2-r2 —
Wolfi rolling dkron +9 4.2.1-r2 —
Wolfi rolling docker-cli-buildx 0.38.0-r2 —
Wolfi rolling docker-compose 5.6.0-r2 —
Wolfi rolling docker-machine-driver-linode 0.1.16-r13 —
Wolfi rolling dockerd-28 28.5.2-r44 —
Wolfi rolling dogstatsd-7.78 +4 7.78.4-r23 —
Wolfi rolling dogstatsd-7.79 +3 7.79.2-r24 —
Wolfi rolling dogstatsd-7.80 +4 7.80.4-r26 —
Wolfi rolling doppler-kubernetes-operator 1.7.2-r1 —
Wolfi rolling dynamic-localpv-provisioner 4.6.0-r6 —
Wolfi rolling eksctl 0.231.0-r2 —
Wolfi rolling emissary +1 4.1.0-r20 —
Wolfi rolling envconsul 0.14.0-r7 —
Wolfi rolling envoy-ratelimit 0.0.0_git20261009-r1 —
Wolfi rolling esbuild 0.28.2-r7 —
Wolfi rolling etcd-3.6 3.6.15-r1 —
Wolfi rolling external-dns-0.21 0.21.0-r27 —
Wolfi rolling external-secrets-operator-2.3 2.3.0-r25 —
Wolfi rolling external-secrets-operator-2.4 2.4.1-r22 —
Wolfi rolling external-secrets-operator-2.6 2.6.0-r15 —
Wolfi rolling falco-exporter 0.8.7-r33 —
Wolfi rolling falco-no-driver 0.45.0-r4 —
Wolfi rolling falcoctl +1 0.14.2-r2 —
Wolfi rolling falcosidekick 2.35.0-r7 —
Wolfi rolling ferretdb 2.7.0-r34 —
Wolfi rolling filebrowser 2.63.23-r7 —
Wolfi rolling flannel 0.28.10-r1 —
Wolfi rolling fluent-bit-plugin-loki 3.7.8-r3 —
Wolfi rolling fluent-operator 3.10.1-r2 —
Wolfi rolling flux-2.7 2.7.5-r41 —
Wolfi rolling flux-2.8 2.8.8-r24 —
Wolfi rolling flux-2.9 2.9.6-r2 —
Wolfi rolling flux-helm-controller 1.6.5-r2 —
Wolfi rolling flux-image-reflector-controller +1 1.2.5-r8 —
Wolfi rolling flux-kustomize-controller 1.9.6-r2 —
Wolfi rolling flux-notification-controller 1.9.4-r8 —
Wolfi rolling flux-source-controller 1.9.6-r1 —
Wolfi rolling fluxcd-kustomize-mutating-webhook 0.12.1-r2 —
Wolfi rolling flyte 1.16.9-r2 —
Wolfi rolling fulcio 1.9.0-r2 —
Wolfi rolling fuse-overlayfs-snapshotter 2.1.7-r31 —
Wolfi rolling gatekeeper-3.22 +1 3.22.2-r22 —
Wolfi rolling gatus 5.37.0-r2 —
Wolfi rolling gcp-compute-persistent-disk-csi-driver-1.25 1.25.2-r22 —
Wolfi rolling gcsfuse 2.12.2-r38 —
Wolfi rolling gh 2.102.0-r2 —
Wolfi rolling git-credential-oauth 0.17.2-r14 —
Wolfi rolling git-lfs 3.8.0-r2 —
Wolfi rolling github-mcp-server 2.0.2-r1 —
Wolfi rolling gitlab-kas-19.2 +1 19.2.7-r1 —
Wolfi rolling gitlab-kas-19.3 +1 19.3.3-r1 —
Wolfi rolling gitlab-kas-19.4 +1 19.4.1-r2 —
Wolfi rolling gitlab-pages-19.2 19.2.7-r2 —
Wolfi rolling gitlab-pages-19.3 19.3.3-r2 —
Wolfi rolling gitlab-runner-19.2 +2 19.2.6-r3 —
Wolfi rolling gitlab-runner-19.3 +2 19.3.3-r3 —
Wolfi rolling gitness 3.3.0-r40 —
Wolfi rolling gitsign +1 0.17.1-r11 —
Wolfi rolling go-1.25 +19 No fix yet —
Wolfi rolling go-bindata 3.1.3-r47 —
Wolfi rolling go-discover 0_git20260915-r3 —
Wolfi rolling gogatekeeper 5.0.0-r2 —
Wolfi rolling gomplate-5 5.2.0-r13 —
Wolfi rolling goreleaser 2.18.3-r1 —
Wolfi rolling gostatsd 28.3.0-r39 —
Wolfi rolling gptscript 0.9.9-r449 —
Wolfi rolling grafana-12.4 12.4.12-r3 —
Wolfi rolling grafana-13.0 13.0.10-r1 —
Wolfi rolling grafana-alloy 1.20.1-r1 —
Wolfi rolling grafana-image-renderer 5.12.6-r0 —
Wolfi rolling grafana-mimir-3.0 +3 3.0.9-r8 —
Wolfi rolling grafana-mimir-3.1 +3 3.1.7-r1 —
Wolfi rolling grafana-operator 5.25.0-r4 —
Wolfi rolling grafana-pyroscope-1.19 1.19.3-r20 —
Wolfi rolling grafana-pyroscope-2.0 2.0.6-r9 —
Wolfi rolling grafana-rollout-operator 0.40.0-r1 —
Wolfi rolling grpc-health-probe 0.4.59-r0 —
Wolfi rolling grpcurl 1.9.4-r4 —
Wolfi rolling grype 0.120.1-r2 —
Wolfi rolling guac +4 1.1.0-r38 —
Wolfi rolling harbor-2.14 +3 2.14.4-r16 —
Wolfi rolling headlamp 0.45.0-r9 —
Wolfi rolling helm-3 3.22.0-r2 —
Wolfi rolling helm-4 4.3.0-r2 —
Wolfi rolling helm-mapkubeapis 0.6.1-r36 —
Wolfi rolling helm-operator 1.42.3-r19 —
Wolfi rolling helm-push 0.11.1-r31 —
Wolfi rolling helm-set-status 0.3.0-r36 —
Wolfi rolling http-echo 1.0.0-r36 —
Wolfi rolling hubble 1.19.4-r21 —
Wolfi rolling hubble-ui-backend 0.13.6-r1 —
Wolfi rolling hydra 26.2.0-r30 —
Wolfi rolling infinispan-operator 2.5.17-r2 —
Wolfi rolling ingress-nginx-controller-1.15 1.15.10-r7 —
Wolfi rolling istioctl-1.29 +4 1.29.8-r4 —
Wolfi rolling istioctl-1.30 +4 1.30.5-r3 —
Wolfi rolling jaeger-2-jaeger +6 2.22.0-r2 —
Wolfi rolling jitsucom-bulker-bulker +3 2.15.0-r7 —
Wolfi rolling juicefs-1.3 1.3.3-r10 —
Wolfi rolling juicefs-csi-driver 0.33.0-r2 —
Wolfi rolling k3d +1 5.9.0-r14 —
Wolfi rolling k3s-1.34 +1 1.34.12.1-r4 —
Wolfi rolling k3s-1.35 +1 1.35.9.1-r4 —
Wolfi rolling k3s-1.36 +1 1.36.5.1-r3 —
Wolfi rolling k3s-1.37 +1 1.37.1.1-r3 —
Wolfi rolling k6 +1 2.3.0-r1 —
Wolfi rolling k8s_gateway 1.8.2-r13 —
Wolfi rolling k8sgpt 0.4.39-r4 —
Wolfi rolling k8sgpt-operator 0.2.29-r8 —
Wolfi rolling k8ssandra-client 0.9.1-r3 —
Wolfi rolling k8ssandra-operator 1.33.0-r3 —
Wolfi rolling k9s 0.51.0-r24 —
Wolfi rolling kaf 0.2.14-r18 —
Wolfi rolling kafka-proxy 0.4.3-r33 —
Wolfi rolling kaniko 1.25.19-r9 —
Wolfi rolling kapp 0.65.4-r4 —
Wolfi rolling kapp-controller 0.60.9-r2 —
Wolfi rolling kargo-1.10 1.10.14-r1 —
Wolfi rolling karpenter-1.11 1.11.3-r5 —
Wolfi rolling karpenter-1.12 1.12.2-r6 —
Wolfi rolling katib-controller +3 0.19.0-r44 —
Wolfi rolling keda-2.19 +2 2.19.0-r34 —
Wolfi rolling keda-2.20 +2 2.20.2-r11 —
Wolfi rolling kiali 2.33.0-r2 —
Wolfi rolling kine 0.17.2-r2 —
Wolfi rolling knative-client 1.23.0-r8 —
Wolfi rolling knative-eventing-1.21-filter +7 1.21.4-r12 —
Wolfi rolling knative-eventing-1.22-filter +7 1.22.2-r10 —
Wolfi rolling knative-operator-1.21 +1 1.21.4-r10 —
Wolfi rolling knative-operator-1.22 +1 1.22.3-r10 —
Wolfi rolling knative-serving-1.21-queue +6 1.21.3-r10 —
Wolfi rolling knative-serving-1.22-queue +6 1.22.1-r15 —
Wolfi rolling ko +1 0.19.1-r11 —
Wolfi rolling kor 0.6.9-r2 —
Wolfi rolling kots 1.132.0-r2 —
Wolfi rolling kpt 1.0.1-r3 —
Wolfi rolling kratos +1 3.0.0-r6 —
Wolfi rolling kserve-agent +4 0.21.0-r5 —
Wolfi rolling kserve-modelmesh-serving 0.12.0-r45 —
Wolfi rolling kserve-rest-proxy 0.12.0-r38 —
Wolfi rolling ksops 4.5.1-r19 —
Wolfi rolling kube-arangodb-1.4 1.4.5-r7 —
Wolfi rolling kube-bench 0.15.0-r24 —
Wolfi rolling kube-logging-operator +1 6.9.0-r3 —
Wolfi rolling kube-logging-operator-custom-runner 1.0.0-r4 —
Wolfi rolling kube-metrics-adapter 0.2.9-r24 —
Wolfi rolling kube-rbac-proxy 0.23.0-r1 —
Wolfi rolling kube-state-metrics 2.20.0-r6 —
Wolfi rolling kube-vip 1.2.4-r2 —
Wolfi rolling kube-vip-cloud-provider 0.0.13-r2 —
Wolfi rolling kube-webhook-certgen-1.15 +1 1.15.10-r8 —
Wolfi rolling kubeadm-1.34 +7 1.34.12-r2 —
Wolfi rolling kubeadm-1.35 +7 1.35.9-r1 —
Wolfi rolling kubeadm-1.36 +7 1.36.5-r1 —
Wolfi rolling kubeadm-1.37 +7 1.37.1-r2 —
Wolfi rolling kubectl-1.33 1.33.13-r13 —
Wolfi rolling kubeflow-access-management +5 1.10.0-r39 —
Wolfi rolling kubeflow-pipelines-apiserver +4 2.17.2-r9 —
Wolfi rolling kubelet-csr-approver 1.2.15-r4 —
Wolfi rolling kuberay-operator 1.7.1-r2 —
Wolfi rolling kuberlr +1 0.8.0-r1 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.18.0-r10 —
Wolfi rolling kubernetes-csi-driver-nfs 4.13.5-r1 —
Wolfi rolling kubernetes-csi-external-attacher 4.13.0-r2 —
Wolfi rolling kubernetes-csi-external-health-monitor 0.19.0-r2 —
Wolfi rolling kubernetes-csi-external-provisioner 6.4.0-r0 —
Wolfi rolling kubernetes-csi-external-snapshotter-8.5 +1 8.5.0-r31 —
Wolfi rolling kubernetes-csi-external-snapshotter-8.6 +1 8.6.0-r17 —
Wolfi rolling kubernetes-csi-livenessprobe 2.20.0-r2 —
Wolfi rolling kubernetes-csi-node-driver-registrar-2.16 2.16.0-r31 —
Wolfi rolling kubernetes-csi-node-driver-registrar-2.17 2.17.0-r13 —
Wolfi rolling kubernetes-dashboard 7.14.0-r21 —
Wolfi rolling kubernetes-dashboard-api 1.14.0-r22 —
Wolfi rolling kubernetes-dashboard-auth 1.4.0-r26 —
Wolfi rolling kubernetes-dashboard-metrics-scraper 1.2.2-r36 —
Wolfi rolling kubernetes-dashboard-web 1.7.0-r35 —
Wolfi rolling kubernetes-dns-node-cache 1.26.8-r24 —
Wolfi rolling kubernetes-event-exporter 1.7-r76 —
Wolfi rolling kubernetes-ingress-defaultbackend 1.43.0-r1 —
Wolfi rolling kubernetes-replicator 2.12.4-r9 —
Wolfi rolling kubescape 4.0.15-r4 —
Wolfi rolling kubescape-operator 0.2.172-r6 —
Wolfi rolling kubevela-vela-cli +1 1.11.0-r18 —
Wolfi rolling kubewatch 2.16.1-r3 —
Wolfi rolling kubo 0.43.1-r2 —
Wolfi rolling kuma-cp-2.12 +4 2.12.3-r30 —
Wolfi rolling kuma-cp-2.13 +4 2.13.11-r3 —
Wolfi rolling kwok +1 0.8.0-r13 —
Wolfi rolling kyverno-1.17 +6 1.17.2-r38 —
Wolfi rolling kyverno-1.18 +6 1.18.2-r18 —
Wolfi rolling kyverno-notation-aws 1.1-r82 —
Wolfi rolling kyverno-policy-reporter 3.11.0-r1 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin 1.6.4-r36 —
Wolfi rolling kyverno-policy-reporter-ui +16 2.9.0-r1 —
Wolfi rolling lazygit 0.66.0-r1 —
Wolfi rolling linkerd2-cli +1 26.10.1-r2 —
Wolfi rolling linkerd2-tap +3 26.10.1-r1 —
Wolfi rolling litefs 0.5.14-r20 —
Wolfi rolling litestream 0.5.17-r6 —
Wolfi rolling local-path-provisioner 0.0.37-r5 —
Wolfi rolling local-static-provisioner +1 2.10.0-r1 —
Wolfi rolling logstash-exporter 1.9.1-r20 —
Wolfi rolling loki-3.6 +3 3.6.17-r4 —
Wolfi rolling loki-3.7 +2 3.7.8-r5 —
Wolfi rolling lvm-driver 1.10.1-r2 —
Wolfi rolling mailpit 1.31.4-r1 —
Wolfi rolling mattermost-11.5 11.5.7-r14 —
Wolfi rolling mattermost-11.6 11.6.6-r16 —
Wolfi rolling mattermost-11.7 11.7.12-r1 —
Wolfi rolling mc 0.20250813.083541-r26 —
Wolfi rolling mcp-grafana 2.0.2-r2 —
Wolfi rolling melange 0.62.0-r1 —
Wolfi rolling mesosphere-vsphere-csi-driver +1 3.5.0-r33 —
Wolfi rolling metacontroller 4.17.2-r4 —
Wolfi rolling metallb +4 0.16.1-r15 —
Wolfi rolling metrics-agent 2.14.16-r1 —
Wolfi rolling metrics-server 0.9.0-r14 —
Wolfi rolling migrate 4.20.1-r4 —
Wolfi rolling minio 0.20260922.192518-r2 —
Wolfi rolling minio-object-browser 2.0.4-r30 —
Wolfi rolling minio-operator +1 7.1.1-r34 —
Wolfi rolling mongo-tools 100.19.1-r2 —
Wolfi rolling mongodb-kubernetes-operator +1 0.13.0-r29 —
Wolfi rolling mongodb-kubernetes-operator-compat 0.13.0-r31 —
Wolfi rolling mongodb-kubernetes-operator-version-upgrade-post-start-hook 1.0.10-r29 —
Wolfi rolling mountpoint-s3-csi-driver-2.5 +1 2.5.0-r19 —
Wolfi rolling mountpoint-s3-csi-driver-2.6 2.6.0-r12 —
Wolfi rolling mps-control-daemon +2 0.20.1-r1 —
Wolfi rolling multus-cni 4.3.1-r3 —
Wolfi rolling nats 0.5.0-r1 —
Wolfi rolling nats-server 2.15.1-r0 —
Wolfi rolling net-kourier-1.21 1.21.1-r19 —
Wolfi rolling net-kourier-1.22 1.22.1-r17 —
Wolfi rolling neuvector-scanner +2 4.301-r1 —
Wolfi rolling newrelic-infra-operator 1.2.0-r1 —
Wolfi rolling newrelic-infrastructure-agent 1.80.5-r4 —
Wolfi rolling newrelic-nri-kube-events 2.22.1-r1 —
Wolfi rolling newrelic-nri-statsd 2.15.0-r4 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r50 —
Wolfi rolling node-feature-discovery-0.18 0.18.3-r32 —
Wolfi rolling node-problem-detector-1.35 1.35.3-r11 —
Wolfi rolling node-problem-detector-1.36 1.36.0-r12 —
Wolfi rolling nodetaint 0.0.5-r17 —
Wolfi rolling nova 3.12.1-r2 —
Wolfi rolling nri-discovery-kubernetes 1.15.3-r1 —
Wolfi rolling nri-kubernetes 4.8.1-r1 —
Wolfi rolling nri-mssql 2.39.0-r1 —
Wolfi rolling nri-prometheus 2.30.5-r1 —
Wolfi rolling nuclei 3.11.1-r11 —
Wolfi rolling oauth2-proxy 7.15.5-r2 —
Wolfi rolling octo-sts +1 0.12.0-r1 —
Wolfi rolling ollama 0.40.2-r1 —
Wolfi rolling op-geth +3 1.101702.3-r5 —
Wolfi rolling opa +1 1.21.1-r2 —
Wolfi rolling openbao 2.7.1-r1 —
Wolfi rolling openbao-k8s 1.4.0-r61 —
Wolfi rolling opencost 1.121.3-r2 —
Wolfi rolling openfga 1.22.0-r2 —
Wolfi rolling opensearch-k8s-operator 3.0.0-r3 —
Wolfi rolling opentelemetry-operator +1 0.160.0-r2 —
Wolfi rolling opentofu-1.11 1.11.14-r8 —
Wolfi rolling opentofu-1.12 1.12.7-r2 —
Wolfi rolling opentofu-1.9 1.9.4-r34 —
Wolfi rolling osv-scanner 2.6.0-r1 —
Wolfi rolling otel-cli 0.4.5-r38 —
Wolfi rolling percona-server-mongodb-operator 1.23.1-r1 —
Wolfi rolling pg_timetable 7.1.0-r5 —
Wolfi rolling pgpool2_exporter 1.2.2-r31 —
Wolfi rolling php-fpm_exporter 2.2.0-r38 —
Wolfi rolling pluto 5.24.4-r1 —
Wolfi rolling podcli +1 6.15.0-r4 —
Wolfi rolling podman-6.0 6.0.2-r11 —
Wolfi rolling polaris 10.2.5-r2 —
Wolfi rolling policy-controller +1 0.15.1-r29 —
Wolfi rolling portieris 0.15.1-r1 —
Wolfi rolling postgres-operator 2.0.3-r2 —
Wolfi rolling prometheus-3.11 3.11.3-r21 —
Wolfi rolling prometheus-3.12 3.12.0-r16 —
Wolfi rolling prometheus-adapter 0.12.0-r39 —
Wolfi rolling prometheus-alertmanager 0.34.1-r2 —
Wolfi rolling prometheus-operator +2 0.94.1-r3 —
Wolfi rolling promxy 0.0.97-r3 —
Wolfi rolling pulumi +3 3.268.0-r3 —
Wolfi rolling pulumi-kubernetes-operator 2.9.2-r1 —
Wolfi rolling pulumi-language-dotnet 3.114.2-r2 —
Wolfi rolling pulumi-language-java 1.37.4-r2 —
Wolfi rolling pulumi-language-yaml 1.38.9-r2 —
Wolfi rolling pvc-autoresizer 0.21.2-r1 —
Wolfi rolling q 0.19.12-r20 —
Wolfi rolling rabbitmq-cluster-operator 2.23.0-r2 —
Wolfi rolling rabbitmq-messaging-topology-operator 1.20.3-r3 —
Wolfi rolling rancher-2.13 +1 2.13.10-r3 —
Wolfi rolling rancher-2.14 2.14.6-r3 —
Wolfi rolling rancher-agent-2.14 2.14.6-r4 —
Wolfi rolling rancher-fleet-cli +4 0.16.2-r3 —
Wolfi rolling rancher-helm-3 3.20.0-r31 —
Wolfi rolling rancher-machine 0.15.0.145-r12 —
Wolfi rolling rancher-system-agent 0.15.2-r2 —
Wolfi rolling rancher-system-upgrade-controller 0.20.2-r1 —
Wolfi rolling rancher-webhook-0.10 0.10.12-r3 —
Wolfi rolling ratify +4 1.4.6-r2 —
Wolfi rolling rclone 1.75.2-r0 —
Wolfi rolling redis-operator 0.26.0-r12 —
Wolfi rolling rekor-cli +1 1.5.4-r7 —
Wolfi rolling renovate 44.198.3-r1 —
Wolfi rolling rke2-cloud-provider 1.36.5-r2 —
Wolfi rolling rook-1.19 +1 1.19.11-r1 —
Wolfi rolling rqlite 10.5.3-r1 —
Wolfi rolling runc 1.5.2-r3 —
Wolfi rolling runc-1.4 1.4.3-r10 —
Wolfi rolling scorecard 5.5.0-r26 —
Wolfi rolling sealed-secrets +1 0.40.0-r2 —
Wolfi rolling seaweedfs 4.48-r2 —
Wolfi rolling secrets-store-csi-driver 1.6.1-r2 —
Wolfi rolling secrets-store-csi-driver-provider-aws 3.1.4-r2 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.8.2-r11 —
Wolfi rolling secrets-store-csi-driver-provider-gcp 1.18.0-r2 —
Wolfi rolling sftpgo 2.7.6-r2 —
Wolfi rolling sftpgo-plugin-auth 1.0.17-r2 —
Wolfi rolling sftpgo-plugin-eventstore +2 1.1.0-r2 —
Wolfi rolling sftpgo-plugin-geoipfilter 1.0.15-r2 —
Wolfi rolling sftpgo-plugin-kms 1.0.20-r2 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.19-r2 —
Wolfi rolling sigstore-scaffolding-tuf-server +7 0.7.39-r1 —
Wolfi rolling skaffold 2.25.0-r4 —
Wolfi rolling skopeo 1.24.1-r2 —
Wolfi rolling slsa-verifier 2.7.1-r35 —
Wolfi rolling smarter-device-manager 1.20.11-r43 —
Wolfi rolling snyk-cli 1.1308.0-r1 —
Wolfi rolling sonobuoy 0.57.5-r7 —
Wolfi rolling sops 3.13.3-r9 —
Wolfi rolling spark-operator 2.5.2-r7 —
Wolfi rolling spegel 0.7.4-r15 —
Wolfi rolling spicedb 1.56.2-r4 —
Wolfi rolling spicedb-operator 1.27.0-r3 —
Wolfi rolling spiffe-helper 0.12.2-r1 —
Wolfi rolling spire-agent +2 1.15.3-r8 —
Wolfi rolling splunk-otel-collector +2 0.162.0-r2 —
Wolfi rolling spqr 3.1.0-r5 —
Wolfi rolling sql_exporter 0.24.9-r2 —
Wolfi rolling src 8.0.0-r3 —
Wolfi rolling sriov-network-device-plugin 3.11.0-r24 —
Wolfi rolling stakater-reloader 1.4.22-r3 —
Wolfi rolling steampipe 2.4.7-r3 —
Wolfi rolling step 0.31.0-r2 —
Wolfi rolling step-ca 0.30.2-r27 —
Wolfi rolling step-kms-plugin 0.17.0-r21 —
Wolfi rolling stern 1.34.0-r12 —
Wolfi rolling syft 1.54.1-r2 —
Wolfi rolling tailscale-k8s-operator 1.104.1-r2 —
Wolfi rolling task 3.54.0-r2 —
Wolfi rolling tekton-chains 0.29.7-r2 —
Wolfi rolling tekton-pipelines-events-1.11 +5 1.11.1-r23 —
Wolfi rolling tekton-pipelines-events-1.12 +5 1.12.2-r14 —
Wolfi rolling tekton-pipelines-events-1.13 +2 1.13.1-r11 —
Wolfi rolling tekton-pipelines-webhook-1.13 +2 1.13.1-r12 —
Wolfi rolling telegraf-1.38 1.38.4-r33 —
Wolfi rolling tempo-2.10 +3 2.10.8-r10 —
Wolfi rolling tempo-3.0 +3 3.0.3-r10 —
Wolfi rolling temporal 1.9.1-r3 —
Wolfi rolling temporal-ui-server 2.55.0-r1 —
Wolfi rolling terraform 1.5.7-r65 —
Wolfi rolling terraform-docs 0.24.0-r13 —
Wolfi rolling terraform-mcp-server 1.3.0-r6 —
Wolfi rolling terraform-provider-acme 3.2.1-r2 —
Wolfi rolling terraform-provider-aws 6.67.0-r2 —
Wolfi rolling terraform-provider-azapi 2.13.0-r2 —
Wolfi rolling terraform-provider-azuread 3.10.0-r2 —
Wolfi rolling terraform-provider-azurerm 5.9.0-r1 —
Wolfi rolling terraform-provider-google 8.6.0-r2 —
Wolfi rolling terraform-provider-grafana 4.49.0-r2 —
Wolfi rolling terraform-provider-kubernetes 3.3.0-r2 —
Wolfi rolling terraform-provider-pagerduty 3.36.0-r5 —
Wolfi rolling terraform-provider-random 3.9.1-r2 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r32 —
Wolfi rolling terraform-provider-tls 4.4.1-r2 —
Wolfi rolling terragrunt 1.1.6-r1 —
Wolfi rolling tetra +2 1.7.1-r6 —
Wolfi rolling tflint 0.64.0-r11 —
Wolfi rolling tfsec 1.28.14-r53 —
Wolfi rolling thanos 0.42.4-r10 —
Wolfi rolling thanos-operator 0.3.7-r56 —
Wolfi rolling tigera-operator-1.42 1.42.6-r4 —
Wolfi rolling timestamp-authority-server 2.1.4-r1 —
Wolfi rolling timoni 0.35.0-r2 —
Wolfi rolling tkn 0.46.1-r1 —
Wolfi rolling tofu-controller 0.16.5-r9 —
Wolfi rolling traefik-3.6 3.6.25-r11 —
Wolfi rolling traefik-3.7 3.7.13-r5 —
Wolfi rolling trillian-logserver +3 1.8.0-r1 —
Wolfi rolling trivy +2 0.75.0-r2 —
Wolfi rolling trivy-operator 0.35.0-r1 —
Wolfi rolling trufflehog 3.99.2-r1 —
Wolfi rolling trust-manager 0.25.0-r1 —
Wolfi rolling tw +3 0.0.53-r2 —
Wolfi rolling undock 0.14.0-r15 —
Wolfi rolling vault-benchmark 0.4.0-r31 —
Wolfi rolling vault-env 1.23.0-r15 —
Wolfi rolling vault-k8s 1.7.6-r6 —
Wolfi rolling vault-secrets-webhook 1.23.1-r14 —
Wolfi rolling vcluster +2 0.37.3-r1 —
Wolfi rolling velero 1.18.4-r2 —
Wolfi rolling velero-plugin-for-aws +2 1.14.4-r2 —
Wolfi rolling verticadb-operator 25.4.0.0-r31 —
Wolfi rolling vexctl 0.4.4-r12 —
Wolfi rolling victoriametrics +3 1.153.0-r1 —
Wolfi rolling vitess-23-binaries 23.0.7-r4 —
Wolfi rolling vitess-24 +1 24.0.4-r3 —
Wolfi rolling volume-modifier-for-k8s 0.9.6-r1 —
Wolfi rolling wal-g-pg 3.0.9-r7 —
Wolfi rolling wave 0.12.0-r2 —
Wolfi rolling weaviate 1.40.0-r2 —
Wolfi rolling whereabouts 0.9.4-r10 —
Wolfi rolling witness +1 0.12.0-r14 —
Wolfi rolling wolfictl 0.39.28-r2 —
Wolfi rolling x509-certificate-exporter 4.2.0-r6 —
Wolfi rolling xeol 0.10.8-r68 —
Wolfi rolling yace 0.68.0-r1 —
Wolfi rolling yunikorn-k8shim +1 1.10.0-r2 —
Wolfi rolling yunikorn-web 1.10.0-r1 —
Wolfi rolling zarf 0.87.0-r1 —
Wolfi rolling zot 2.1.22-r2 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/net < 0.60.0 0.60.0 GO-2026-6612
Go stdlib < 1.26.9 1.26.9 GO-2026-6612
Go stdlib >= 1.27.0-0, < 1.27.2 1.27.2 GO-2026-6612

Advisories 50

References