Description
gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer() allow internal/transport/http2_server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go assumes that an authority value exists and indexes the empty slice. A remote client that can complete transport connection establishment can trigger an index-out-of-bounds panic that is not recovered by the per-RPC goroutine and terminates the entire server process. In insecure or ordinary TLS deployments the request can be unauthenticated, while strict mTLS or ALTS deployments require valid transport credentials before the malformed RPC can reach the interceptor. This issue is fixed in versions 1.82.2 and 1.83.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| grpc | grpc-go | < 1.82.2, >= 1.83.0, < 1.83.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | golang-google-grpc | No fix yet | — |
| Debian 13 | golang-google-grpc | No fix yet | — |
| Debian 12 | golang-google-grpc | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | golang-github-googlecloudplatform-grpc-gcp-go | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | opentelemetry-collector | 0.158.0-1.el10_2 | RHSA-2026:76743 |
| RHEL 9 | opentelemetry-collector | 0.158.0-1.el9_8 | RHSA-2026:76744 |
| RHEL 9 | rhc +1 | 1:0.2.7-13.el9_8 | RHSA-2026:72275 |
| RHEL 8 | rhc | 1:0.2.5-12.el8_10 | RHSA-2026:73915 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | opentelemetry-collector | 0.158.0-1.el10_0 | RHSA-2026:82344 |
| RHEL 9.6 EUS | opentelemetry-collector | 0.158.0-1.el9_6 | RHSA-2026:82342 |
| RHEL 9.6 EUS | rhc +1 | 1:0.2.7-1.el9_6.7 | RHSA-2026:79010 |
| RHEL 9.4 E4S | opentelemetry-collector | 0.158.0-1.el9_4 | RHSA-2026:82346 |
| RHEL 9.4 E4S | rhc | 1:0.2.4-9.el9_4.2 | RHSA-2026:79011 |
| RHEL 9.2 E4S | rhc | 1:0.2.2-1.el9_2.6 | RHSA-2026:79012 |
| RHEL 7 ELS | rhc-worker-script | 0.12-1.el7_9 | RHSA-2026:75689 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | opentelemetry-collector | 0.158.0-1.el10_2 | ALSA-2026:76743 |
| AlmaLinux 9 | opentelemetry-collector | 0.158.0-1.el9_8 | ALSA-2026:76744 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | opentelemetry-collector | 0.158.0-1.el10_2 | RLSA-2026:76743 |
| Rocky Linux 9 | opentelemetry-collector | 0.158.0-1.el9_8 | RLSA-2026:76744 |
| Rocky Linux 9 | osbuild-composer | 165.1-5.el9_8.1.rocky.0.1 | RLSA-2026:95272 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | alloy | 1.20.1-150700.15.34.1 | SUSE-SU-2026:5203-1 |
| SLES 15 SP7 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP7 | apptainer | 1.5.3-150600.4.43.1 | SUSE-SU-2026:4308-1 |
| SLES 15 SP7 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP7 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP7 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP7 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP7 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP7 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP7 | kubevirt | 1.7.4-150700.3.42.1 | SUSE-SU-2026:5167-1 |
| SLES 15 SP6 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP6 | apptainer | 1.5.3-150600.4.43.1 | SUSE-SU-2026:4308-1 |
| SLES 15 SP6 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP6 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP6 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP6 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP6 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP6 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP5 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP5 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP5 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP5 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP5 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP5 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP5 | terraform-provider-aws | 3.11.0-150200.6.29.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-azurerm | 2.32.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-external | 2.0.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-google | 3.43.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-helm | 2.9.0-150200.6.34.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-kubernetes | 1.13.2-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-local | 2.0.0-150200.6.30.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-null | 3.0.0-150200.6.32.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-random | 3.0.0-150200.6.26.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP5 | terraform-provider-susepubliccloud | 0.0.1-150100.3.23.1 | SUSE-SU-2026:4444-1, SUSE-SU-2026:4389-1 |
| SLES 15 SP5 | terraform-provider-tls | 3.0.0-150200.5.26.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 | SUSE-SU-2026:4388-1 |
| SLES 15 SP4 | azure-storage-azcopy | 10.32.8-150400.9.21.1 | SUSE-SU-2026:4125-1 |
| SLES 15 SP4 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES 15 SP4 | google-cloud-sap-agent | 3.15-150100.3.87.1 | SUSE-SU-2026:4206-1 |
| SLES 15 SP4 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLES 15 SP4 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLES 15 SP4 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 15 SP4 | terraform-provider-aws | 3.11.0-150200.6.29.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-azurerm | 2.32.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-external | 2.0.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-google | 3.43.0-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-helm | 2.9.0-150200.6.34.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-kubernetes | 1.13.2-150200.6.23.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-local | 2.0.0-150200.6.30.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-null | 3.0.0-150200.6.32.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-random | 3.0.0-150200.6.26.2 | SUSE-SU-2026:4628-1 |
| SLES 15 SP4 | terraform-provider-susepubliccloud | 0.0.1-150100.3.23.1 | SUSE-SU-2026:4444-1, SUSE-SU-2026:4389-1 |
| SLES 15 SP4 | terraform-provider-tls | 3.0.0-150200.5.26.2 | SUSE-SU-2026:4628-1 |
| SLES 12 | google-cloud-sap-agent | 3.15-6.81.1 | SUSE-SU-2026:4178-1 |
| SLES 12 | google-guest-agent | 20260903.01-1.75.1 | SUSE-SU-2026:4272-1 |
| SLES 12 | google-osconfig-agent | 20260911.00-1.60.1 | SUSE-SU-2026:4292-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | amazon-ecs-init | 1.108.0-160000.1.1 | SUSE-SU-2026:24265-1 |
| SLES for SAP 16.0 | distribution | 3.1.1-160000.3.1 | SUSE-SU-2026:23864-1, SUSE-SU-2026:23852-1 |
| SLES for SAP 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 | SUSE-SU-2026:23729-1, SUSE-SU-2026:23708-1 |
| SLES for SAP 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 | SUSE-SU-2026:23863-1, SUSE-SU-2026:23855-1 |
| SLES for SAP 16.0 | helm | 3.21.3-160000.2.1 | SUSE-SU-2026:23688-1 |
| SLES for SAP 15 SP6 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES for SAP 15 SP6 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES for SAP 15 SP5 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES for SAP 15 SP5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES for SAP 15 SP4 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLES for SAP 15 SP4 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLES 16.0 | amazon-ecs-init | 1.108.0-160000.1.1 | SUSE-SU-2026:24265-1 |
| SLES 16.0 | distribution | 3.1.1-160000.3.1 | SUSE-SU-2026:23864-1, SUSE-SU-2026:23852-1 |
| SLES 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 | SUSE-SU-2026:23729-1, SUSE-SU-2026:23708-1 |
| SLES 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 | SUSE-SU-2026:23863-1, SUSE-SU-2026:23855-1 |
| SLES 16.0 | helm | 3.21.3-160000.2.1 | SUSE-SU-2026:23688-1 |
| SLE Micro 6.2 | helm | 3.21.3-160000.2.1 | SUSE-SU-2026:23506-1 |
| SLE Micro 6.1 | google-guest-agent | 20260903.01-slfo.1.1_1.1 | SUSE-SU-2026:23736-1 |
| SLE Micro 6.1 | google-osconfig-agent | 20260908.00-slfo.1.1_1.1 | SUSE-SU-2026:23739-1 |
| SLE Micro 6.1 | helm | 3.21.3-slfo.1.1_3.1 | SUSE-SU-2026:23730-1 |
| SLE Micro 6.0 | google-guest-agent | 20260903.01-1.1 | SUSE-SU-2026:23831-1 |
| SLE Micro 6.0 | google-osconfig-agent | 20260908.00-1.1 | SUSE-SU-2026:23548-1 |
| SLE Micro 6.0 | helm | 3.21.3-3.1 | SUSE-SU-2026:23546-1 |
| SLE Micro 5.5 | google-guest-agent | 20260903.01-150000.1.85.1 | SUSE-SU-2026:4270-1 |
| SLE Micro 5.5 | google-osconfig-agent | 20260911.00-150000.1.67.1 | SUSE-SU-2026:4293-1 |
| SLE Micro 5.5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLE HPC 15 SP5 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLE HPC 15 SP5 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
| SLE HPC 15 SP4 | distribution | 3.1.2-150400.9.47.1 | SUSE-SU-2026:5202-1 |
| SLE HPC 15 SP4 | helm | 3.21.3-150000.1.96.1 | SUSE-SU-2026:4175-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | alloy | 1.20.1-1.1 | openSUSE-SU-2026:12114-1 |
| openSUSE Tumbleweed | amazon-cloudwatch-agent | 1.300072.0-1.1 | openSUSE-SU-2026:11828-1 |
| openSUSE Tumbleweed | amazon-ecs-init | 1.108.0-1.1 | openSUSE-SU-2026:12107-1 |
| openSUSE Tumbleweed | apptainer | 1.5.3-4.1 | openSUSE-SU-2026:11830-1 |
| openSUSE Tumbleweed | azure-storage-azcopy | 10.32.8-1.1 | openSUSE-SU-2026:11740-1 |
| openSUSE Tumbleweed | cadvisor | 0.60.5-3.1 | openSUSE-SU-2026:11695-1 |
| openSUSE Tumbleweed | containerized-data-importer1.65 | 1.65.0-4.1 | openSUSE-SU-2026:12235-1 |
| openSUSE Tumbleweed | distribution | 3.1.1-6.1 | openSUSE-SU-2026:11697-1 |
| openSUSE Tumbleweed | gh | 2.102.0-1.1 | openSUSE-SU-2026:12163-1 |
| openSUSE Tumbleweed | google-guest-agent | 20260903.00-1.1 | openSUSE-SU-2026:11699-1 |
| openSUSE Tumbleweed | google-osconfig-agent | 20260908.00-1.1 | openSUSE-SU-2026:11743-1 |
| openSUSE Tumbleweed | grafana | 12.4.11-1.1 | openSUSE-SU-2026:11920-1 |
| openSUSE Tumbleweed | hauler | 2.1.0-3.1 | openSUSE-SU-2026:11700-1 |
| openSUSE Tumbleweed | helm | 4.2.4-3.1 | openSUSE-SU-2026:11718-1 |
| openSUSE Tumbleweed | helm3 | 3.21.3-8.1 | openSUSE-SU-2026:11686-1 |
| openSUSE Tumbleweed | inspektor-gadget | 0.57.0-1.1 | openSUSE-SU-2026:12073-1 |
| openSUSE Tumbleweed | kubevirt1.8 | 1.8.4-7.1 | openSUSE-SU-2026:12241-1 |
| openSUSE Tumbleweed | mcphost | 0.34.0-11.1 | openSUSE-SU-2026:11837-1 |
| openSUSE Tumbleweed | rclone | 1.75.2-1.1 | openSUSE-SU-2026:12112-1 |
| openSUSE Tumbleweed | rqlite | 10.6.1-1.1 | openSUSE-SU-2026:12186-1 |
| openSUSE Tumbleweed | trivy | 0.74.0-4.1 | openSUSE-SU-2026:11713-1 |
| openSUSE Tumbleweed | velero | 1.18.4-1.1 | openSUSE-SU-2026:11931-1 |
| openSUSE Tumbleweed | wait4x | 3.7.2-1.1 | openSUSE-SU-2026:11911-1 |
| openSUSE Tumbleweed | warewulf4 | 4.7.1-2.1 | openSUSE-SU-2026:12375-1 |
| openSUSE Leap 16.0 | amazon-ecs-init | 1.108.0-160000.1.1 | openSUSE-SU-2026:22145-1 |
| openSUSE Leap 16.0 | apptainer | 1.5.3-bp160.4.1 | openSUSE-SU-2026:21927-1 |
| openSUSE Leap 16.0 | cadvisor | 0.60.5-bp160.2.1 | openSUSE-SU-2026:21843-1 |
| openSUSE Leap 16.0 | distribution | 3.1.1-160000.3.1 | openSUSE-SU-2026:21898-1 |
| openSUSE Leap 16.0 | gh | 2.102.0-bp160.1.1 | openSUSE-SU-2026:22134-1 |
| openSUSE Leap 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 | openSUSE-SU-2026:21834-1 |
| openSUSE Leap 16.0 | google-guest-agent | 20260903.01-160000.1.1 | openSUSE-SU-2026:21879-1 |
| openSUSE Leap 16.0 | google-osconfig-agent | 20260911.00-160000.1.1 | openSUSE-SU-2026:21882-1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 | openSUSE-SU-2026:21897-1 |
| openSUSE Leap 16.0 | hauler | 2.1.0-bp160.3.1 | openSUSE-SU-2026:21841-1 |
| openSUSE Leap 16.0 | helm | 3.21.3-160000.2.1 | openSUSE-SU-2026:21809-1 |
| openSUSE Leap 16.0 | mcphost | 0.34.0-160000.5.1 | openSUSE-SU-2026:21886-1 |
| openSUSE Leap 16.0 | rqlite | 10.6.6-bp160.1.1 | openSUSE-SU-2026:22224-1 |
| openSUSE Leap 16.0 | trivy | 0.74.0-160000.2.1 | openSUSE-SU-2026:21801-1 |
| openSUSE Leap 16.0 | v2ray-core | 5.54.2-bp160.1.1 | openSUSE-SU-2026:21996-1 |
| openSUSE Leap 16.0 | warewulf4 | 4.7.1-bp160.2.1 | openSUSE-SU-2026:22221-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | azcopy | 10.25.1-9 | — |
| Azure Linux 3 | azurelinux-image-tools | 1.6.0-3 | — |
| Azure Linux 3 | cert-manager | 1.12.15-14 | — |
| Azure Linux 3 | cloud-provider-kubevirt | 0.5.1-9 | — |
| Azure Linux 3 | containerd2 | 2.3.7-1 | — |
| Azure Linux 3 | containerized-data-importer | 1.62.0-8 | — |
| Azure Linux 3 | coredns | 1.11.4-21 | — |
| Azure Linux 3 | docker-compose | 2.27.0-15 | — |
| Azure Linux 3 | etcd | 3.5.34-1 | — |
| Azure Linux 3 | flannel | 0.24.2-33 | — |
| Azure Linux 3 | gh | 2.101.0-1 | — |
| Azure Linux 3 | kata-containers | 3.32.0.kata0-6 | — |
| Azure Linux 3 | kata-containers-cc | 3.15.0.aks0-21 | — |
| Azure Linux 3 | kube-vip-cloud-provider | 0.0.10-10 | — |
| Azure Linux 3 | kubernetes | 1.30.10-32 | — |
| Azure Linux 3 | kubevirt | 1.8.4-4 | — |
| Azure Linux 3 | moby-engine | 25.0.18-1 | — |
| Azure Linux 3 | opa +18 | No fix yet | — |
| Azure Linux 3 | prometheus-adapter | 0.12.0-12 | — |
| Azure Linux 3 | skopeo | 1.14.4-13 | — |
| Azure Linux 3 | sriov-network-device-plugin | 3.7.0-8 | — |
| Azure Linux 3 | telegraf | 1.31.0-33 | — |
| Azure Linux 3 | vitess | 19.0.4-14 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | aactl | 0.4.12-r76 | — |
| Wolfi rolling | amass | 5.1.1-r17 | — |
| Wolfi rolling | amazon-cloudwatch-agent | 1.300073.0-r1 | — |
| Wolfi rolling | amazon-cloudwatch-agent-operator | 3.7.0-r6 | — |
| Wolfi rolling | amazon-k8s-cni | 1.23.0-r5 | — |
| Wolfi rolling | amazon-k8s-cni-init-compat | 1.23.1-r0 | — |
| Wolfi rolling | apisix-ingress-controller | 2.2.0-r5 | — |
| Wolfi rolling | argo-cd-3.2 +1 | 3.2.12-r18 | — |
| Wolfi rolling | argo-cd-3.3 +1 | 3.3.14-r9 | — |
| Wolfi rolling | argo-cd-3.4 +1 | 3.4.8-r3 | — |
| Wolfi rolling | argo-events | 1.9.11-r11 | — |
| Wolfi rolling | argo-rollouts +1 | 1.10.0-r2 | — |
| Wolfi rolling | argo-workflows-4.0 +2 | 4.0.10-r6 | — |
| Wolfi rolling | argo-workflows-ui-4.0 | 4.0.11-r0 | — |
| Wolfi rolling | argocd-image-updater | 1.3.0-r9 | — |
| Wolfi rolling | authservice | 1.1.8-r5 | — |
| Wolfi rolling | aws-efs-csi-driver | 3.4.2-r4 | — |
| Wolfi rolling | aws-network-policy-agent | 1.4.2-r1 | — |
| Wolfi rolling | aws-otel-collector | 0.50.0-r3 | — |
| Wolfi rolling | azure-service-operator | 2.21.1-r0 | — |
| Wolfi rolling | bank-vaults +1 | 1.33.2-r3 | — |
| Wolfi rolling | bento | 1.21.1-r7 | — |
| Wolfi rolling | blob-csi-1.27 | 1.27.10-r0 | — |
| Wolfi rolling | boring-registry | 0.19.0-r7 | — |
| Wolfi rolling | buildah | 1.45.0-r7 | — |
| Wolfi rolling | caddy | 2.11.4-r12 | — |
| Wolfi rolling | cadvisor +1 | 0.60.5-r8 | — |
| Wolfi rolling | calicoctl-3.31 +12 | 3.31.7-r3 | — |
| Wolfi rolling | calicoctl-3.32 +11 | 3.32.2-r3 | — |
| Wolfi rolling | cass-operator | 1.32.0-r3 | — |
| Wolfi rolling | cerbos +1 | 0.55.0-r7 | — |
| Wolfi rolling | cert-manager-1.20 +4 | 1.20.3-r18 | — |
| Wolfi rolling | cert-manager-csi-driver | 0.16.0-r7 | — |
| Wolfi rolling | cert-manager-istio-csr | 0.17.0-r5 | — |
| Wolfi rolling | cert-manager-webhook-pdns | 2.5.5-r25 | — |
| Wolfi rolling | certificate-transparency +1 | 1.3.3-r22 | — |
| Wolfi rolling | chartmuseum | 0.16.6-r5 | — |
| Wolfi rolling | cilium-1.19 +5 | 1.19.7-r7 | — |
| Wolfi rolling | cilium-cli +2 | 0.20.0-r4 | — |
| Wolfi rolling | cloud-provider-aws-1.35-cloud-controller-manager | 1.35.2-r16 | — |
| Wolfi rolling | cloud-provider-aws-1.36-cloud-controller-manager | 1.36.1-r8 | — |
| Wolfi rolling | cloud-provider-azure-cloud-controller-manager-1.36-compat | 1.36.6-r0 | — |
| Wolfi rolling | cloud-provider-azure-cloud-node-manager-1.35 +1 | 1.35.8-r6 | — |
| Wolfi rolling | cloud-provider-azure-cloud-node-manager-1.36 +1 | 1.36.5-r6 | — |
| Wolfi rolling | cloud-provider-gcp-cloud-controller-manager | 35.0.5-r22 | — |
| Wolfi rolling | cloud-provider-vsphere | 1.37.0-r3 | — |
| Wolfi rolling | cloud-sql-proxy-2.16 | 2.16.0-r33 | — |
| Wolfi rolling | cloud-sql-proxy-2.21 | 2.21.3-r15 | — |
| Wolfi rolling | cloud-sql-proxy-2.22 | 2.22.1-r9 | — |
| Wolfi rolling | cloud-sql-proxy-2.23 | 2.23.0-r9 | — |
| Wolfi rolling | cloud-sql-proxy-2.24 | 2.24.1-r6 | — |
| Wolfi rolling | cloudflared | 2026.9.1-r0 | — |
| Wolfi rolling | cloudnative-pg +1 | 1.30.0-r9 | — |
| Wolfi rolling | cloudprober | 0.14.5-r3 | — |
| Wolfi rolling | cluster-api-1.12-clusterctl +5 | 1.12.11-r5 | — |
| Wolfi rolling | cluster-api-1.13-controller +4 | 1.13.6-r1 | — |
| Wolfi rolling | cluster-api-aws-controller | 2.13.0-r6 | — |
| Wolfi rolling | cluster-api-azure-controller +1 | 1.27.0-r1 | — |
| Wolfi rolling | cluster-api-gcp-controller | 1.13.1-r6 | — |
| Wolfi rolling | cluster-api-helm-controller | 0.6.4-r18 | — |
| Wolfi rolling | cluster-api-ipam-provider-in-cluster | 1.1.0-r16 | — |
| Wolfi rolling | cluster-api-provider-vsphere | 1.17.0-r2 | — |
| Wolfi rolling | cluster-autoscaler-1.35 | 1.35.2-r9 | — |
| Wolfi rolling | conftest | 0.69.0-r6 | — |
| Wolfi rolling | consul-k8s-1.9 +1 | 1.9.11-r7 | — |
| Wolfi rolling | container-object-storage-interface-sidecar | 0.2.2-r31 | — |
| Wolfi rolling | coredns-1.14 +1 | 1.14.7-r5 | — |
| Wolfi rolling | cortex | 1.21.1-r14 | — |
| Wolfi rolling | cosign-3 | 3.1.3-r6 | — |
| Wolfi rolling | crossplane-2.2 +1 | 2.2.5-r4 | — |
| Wolfi rolling | crossplane-provider-aws-cloudwatchlogs | 2.7.0-r7 | — |
| Wolfi rolling | crossplane-provider-aws-ec2 +17 | 2.7.0-r6 | — |
| Wolfi rolling | crossplane-provider-aws-kms | 2.7.0-r4 | — |
| Wolfi rolling | crossplane-provider-aws-s3 +5 | 2.7.0-r5 | — |
| Wolfi rolling | crossplane-provider-azure-authorization | 2.7.0-r3 | — |
| Wolfi rolling | crossplane-provider-keycloak | 3.0.1-r3 | — |
| Wolfi rolling | crossplane-provider-sql | 0.16.1-r6 | — |
| Wolfi rolling | ctr-1 +3 | 1.7.35-r1 | — |
| Wolfi rolling | ctr-2 +7 | 2.3.5-r1 | — |
| Wolfi rolling | dagdotdev | 0.0.20-r30 | — |
| Wolfi rolling | dagger | 0.20.8-r22 | — |
| Wolfi rolling | dapr-daprd-1.17 +5 | 1.17.13-r7 | — |
| Wolfi rolling | datadog-operator | 1.30.0-r1 | — |
| Wolfi rolling | dataplaneapi | 3.4.3-r2 | — |
| Wolfi rolling | dbmate | 2.35.1-r4 | — |
| Wolfi rolling | descheduler | 0.36.0-r14 | — |
| Wolfi rolling | dex | 2.45.1-r26 | — |
| Wolfi rolling | dgraph | 25.4.1-r4 | — |
| Wolfi rolling | distribution +1 | 3.1.1-r15 | — |
| Wolfi rolling | dockerd-28 +2 | 28.5.2-r38 | — |
| Wolfi rolling | dogstatsd-7.78 +3 | 7.78.4-r20 | — |
| Wolfi rolling | dogstatsd-7.79 +3 | 7.79.2-r18 | — |
| Wolfi rolling | dogstatsd-7.80 +7 | 7.80.4-r16 | — |
| Wolfi rolling | dogstatsd-7.81 +4 | 7.81.3-r5 | — |
| Wolfi rolling | dynamic-localpv-provisioner | 4.6.0-r4 | — |
| Wolfi rolling | eksctl | 0.230.0-r6 | — |
| Wolfi rolling | emissary | 4.1.0-r16 | — |
| Wolfi rolling | envoy-ratelimit | 0.0.0_git20260825-r2 | — |
| Wolfi rolling | etcd-3.6 | 3.6.14-r8 | — |
| Wolfi rolling | external-dns-0.21 | 0.21.0-r25 | — |
| Wolfi rolling | external-secrets-operator-2.3 | 2.3.0-r23 | — |
| Wolfi rolling | external-secrets-operator-2.4 | 2.4.1-r20 | — |
| Wolfi rolling | external-secrets-operator-2.5 | 2.5.0-r17 | — |
| Wolfi rolling | external-secrets-operator-2.6 | 2.6.0-r13 | — |
| Wolfi rolling | falco-exporter | 0.8.7-r32 | — |
| Wolfi rolling | falco-no-driver | 0.44.1-r10 | — |
| Wolfi rolling | falcoctl | 0.14.1-r0 | — |
| Wolfi rolling | falcosidekick | 2.35.0-r4 | — |
| Wolfi rolling | ferretdb | 2.7.0-r31 | — |
| Wolfi rolling | flannel +1 | 0.28.9-r7 | — |
| Wolfi rolling | fluent-operator | 3.10.0-r4 | — |
| Wolfi rolling | flux-2.7 | 2.7.5-r39 | — |
| Wolfi rolling | flux-2.8 | 2.8.8-r22 | — |
| Wolfi rolling | flux-2.9 | 2.9.5-r4 | — |
| Wolfi rolling | flux-helm-controller | 1.6.4-r2 | — |
| Wolfi rolling | flux-image-automation-controller | 1.2.5-r3 | — |
| Wolfi rolling | flux-image-reflector-controller | 1.2.5-r4 | — |
| Wolfi rolling | flux-kustomize-controller +1 | 1.9.5-r2 | — |
| Wolfi rolling | flux-notification-controller | 1.9.4-r4 | — |
| Wolfi rolling | flux-source-controller | 1.9.5-r5 | — |
| Wolfi rolling | flyte | 1.16.8-r8 | — |
| Wolfi rolling | fulcio | 1.8.8-r6 | — |
| Wolfi rolling | fuse-overlayfs-snapshotter | 2.1.7-r27 | — |
| Wolfi rolling | gatekeeper-3.22 +1 | 3.22.2-r19 | — |
| Wolfi rolling | gatus | 5.36.0-r16 | — |
| Wolfi rolling | gcp-compute-persistent-disk-csi-driver-1.25 +1 | 1.25.2-r18 | — |
| Wolfi rolling | gcsfuse | 2.12.2-r36 | — |
| Wolfi rolling | gitaly-19.1 +2 | 19.1.7-r3 | — |
| Wolfi rolling | gitaly-compat-19.1 | 19.1.8-r0 | — |
| Wolfi rolling | gitea | 1.27.3-r5 | — |
| Wolfi rolling | gitlab-kas-19.1 +1 | 19.1.8-r1 | — |
| Wolfi rolling | gitlab-kas-19.2 +1 | 19.2.6-r1 | — |
| Wolfi rolling | gitlab-kas-19.3 +4 | 19.3.1-r4 | — |
| Wolfi rolling | gitlab-pages-19.2 | 19.2.5-r3 | — |
| Wolfi rolling | gitlab-pages-19.3 | 19.3.1-r3 | — |
| Wolfi rolling | gitlab-runner-19.1 +2 | 19.1.2-r9 | — |
| Wolfi rolling | gitlab-runner-19.2 +2 | 19.2.3-r4 | — |
| Wolfi rolling | gitness | 3.3.0-r37 | — |
| Wolfi rolling | gitsign +1 | 0.17.1-r8 | — |
| Wolfi rolling | go-discover | 0_git20260826-r3 | — |
| Wolfi rolling | gomplate-5 | 5.2.0-r10 | — |
| Wolfi rolling | goreleaser | 2.18.1-r1 | — |
| Wolfi rolling | grafana-12.4 | 12.4.10-r3 | — |
| Wolfi rolling | grafana-13.0 | 13.0.9-r0 | — |
| Wolfi rolling | grafana-agent-operator | 0.44.8-r19 | — |
| Wolfi rolling | grafana-alloy | 1.19.2-r5 | — |
| Wolfi rolling | grafana-image-renderer | 5.12.3-r1 | — |
| Wolfi rolling | grafana-mimir-3.0 +3 | 3.0.9-r4 | — |
| Wolfi rolling | grafana-mimir-3.1 +1 | 3.1.5-r4 | — |
| Wolfi rolling | grafana-mimir-3.1-query-tee-3.1 | 3.1.6-r0 | — |
| Wolfi rolling | grafana-pyroscope-1.19 | 1.19.3-r16 | — |
| Wolfi rolling | grafana-pyroscope-2.0 | 2.0.6-r7 | — |
| Wolfi rolling | grafana-rollout-operator | 0.39.0-r5 | — |
| Wolfi rolling | grpc-1.83 | 1.83.2-r0 | — |
| Wolfi rolling | grype | 0.118.0-r3 | — |
| Wolfi rolling | guac +4 | 1.1.0-r34 | — |
| Wolfi rolling | harbor-2.14 +3 | 2.14.4-r13 | — |
| Wolfi rolling | headlamp | 0.45.0-r5 | — |
| Wolfi rolling | helm-3 | 3.22.0-r0 | — |
| Wolfi rolling | helm-mapkubeapis | 0.6.1-r31 | — |
| Wolfi rolling | helm-operator | 1.42.3-r15 | — |
| Wolfi rolling | helm-push | 0.11.1-r26 | — |
| Wolfi rolling | helm-set-status | 0.3.0-r31 | — |
| Wolfi rolling | hubble | 1.19.4-r18 | — |
| Wolfi rolling | hubble-ui-backend | 0.13.5-r20 | — |
| Wolfi rolling | hydra | 26.2.0-r26 | — |
| Wolfi rolling | ipfs-cluster | 1.1.6-r18 | — |
| Wolfi rolling | istioctl-1.29 +4 | 1.29.7-r3 | — |
| Wolfi rolling | istioctl-1.30 +5 | 1.30.4-r2 | — |
| Wolfi rolling | jaeger-2 +1 | 2.21.0-r0 | — |
| Wolfi rolling | jaeger-2-jaeger +6 | 2.20.0-r11 | — |
| Wolfi rolling | jitsucom-bulker-bulker +3 | 2.15.0-r4 | — |
| Wolfi rolling | juicefs-1.3 | 1.3.3-r7 | — |
| Wolfi rolling | juicefs-csi-driver | 0.32.5-r4 | — |
| Wolfi rolling | k3d-proxy | 5.9.0-r13 | — |
| Wolfi rolling | k3s +2 | 1.36.4.1-r5 | — |
| Wolfi rolling | k3s-1.32 +34 | No fix yet | — |
| Wolfi rolling | k3s-1.34 +2 | 1.34.11.1-r4 | — |
| Wolfi rolling | k3s-1.35 +2 | 1.35.8.1-r5 | — |
| Wolfi rolling | k6 | 2.2.0-r6 | — |
| Wolfi rolling | k8s_gateway | 1.8.2-r10 | — |
| Wolfi rolling | k8sgpt | 0.4.38-r2 | — |
| Wolfi rolling | k8sgpt-operator | 0.2.29-r6 | — |
| Wolfi rolling | k8ssandra-client | 0.9.1-r2 | — |
| Wolfi rolling | k8ssandra-operator | 1.33.0-r1 | — |
| Wolfi rolling | k9s | 0.51.0-r18 | — |
| Wolfi rolling | kafka-proxy | 0.4.3-r31 | — |
| Wolfi rolling | kaniko +1 | 1.25.19-r4 | — |
| Wolfi rolling | kapp-controller | 0.60.6-r4 | — |
| Wolfi rolling | kargo-1.10 | 1.10.12-r1 | — |
| Wolfi rolling | katib-controller +5 | 0.19.0-r40 | — |
| Wolfi rolling | keda-2.19 +1 | 2.19.0-r31 | — |
| Wolfi rolling | keda-2.20 +2 | 2.20.2-r8 | — |
| Wolfi rolling | kiali | 2.31.0-r2 | — |
| Wolfi rolling | kine | 0.17.0-r4 | — |
| Wolfi rolling | knative-eventing-1.21-filter +7 | 1.21.4-r10 | — |
| Wolfi rolling | knative-eventing-1.22-filter +7 | 1.22.2-r8 | — |
| Wolfi rolling | knative-operator-1.21 +1 | 1.21.4-r8 | — |
| Wolfi rolling | knative-operator-1.22 +2 | 1.22.3-r8 | — |
| Wolfi rolling | knative-serving-1.22-queue +5 | 1.22.1-r13 | — |
| Wolfi rolling | ko +1 | 0.19.1-r8 | — |
| Wolfi rolling | kots | 1.131.8-r1 | — |
| Wolfi rolling | kserve-agent +4 | 0.20.0-r8 | — |
| Wolfi rolling | kserve-modelmesh-serving | 0.12.0-r43 | — |
| Wolfi rolling | kserve-rest-proxy +1 | 0.12.0-r37 | — |
| Wolfi rolling | ksops | 4.5.1-r17 | — |
| Wolfi rolling | kube-arangodb-1.4 | 1.4.5-r2 | — |
| Wolfi rolling | kube-metrics-adapter | 0.2.9-r21 | — |
| Wolfi rolling | kube-rbac-proxy | 0.22.1-r12 | — |
| Wolfi rolling | kube-state-metrics | 2.20.0-r4 | — |
| Wolfi rolling | kube-vip | 1.2.3-r6 | — |
| Wolfi rolling | kube-vip-cloud-provider | 0.0.12-r32 | — |
| Wolfi rolling | kubeadm-1.34 +6 | 1.34.11-r8 | — |
| Wolfi rolling | kubeadm-1.35 +6 | 1.35.8-r7 | — |
| Wolfi rolling | kubeadm-1.36 +6 | 1.36.4-r8 | — |
| Wolfi rolling | kubeflow-pipelines-apiserver +4 | 2.17.2-r4 | — |
| Wolfi rolling | kubeflow-profile-controller | 1.10.0-r36 | — |
| Wolfi rolling | kubernetes-csi-driver-hostpath | 1.18.0-r7 | — |
| Wolfi rolling | kubernetes-csi-driver-nfs | 4.13.4-r8 | — |
| Wolfi rolling | kubernetes-csi-external-health-monitor | 0.18.0-r17 | — |
| Wolfi rolling | kubernetes-csi-external-provisioner | 6.3.0-r11 | — |
| Wolfi rolling | kubernetes-csi-external-resizer | 2.2.1-r12 | — |
| Wolfi rolling | kubernetes-csi-external-snapshotter-8.5 +1 | 8.5.0-r29 | — |
| Wolfi rolling | kubernetes-csi-external-snapshotter-8.6 +1 | 8.6.0-r14 | — |
| Wolfi rolling | kubernetes-csi-node-driver-registrar-2.16 | 2.16.0-r29 | — |
| Wolfi rolling | kubernetes-csi-node-driver-registrar-2.17 | 2.17.0-r12 | — |
| Wolfi rolling | kubernetes-dns-node-cache | 1.26.8-r19 | — |
| Wolfi rolling | kubernetes-event-exporter | 1.7-r74 | — |
| Wolfi rolling | kubescape | 4.0.14-r1 | — |
| Wolfi rolling | kubescape-operator | 0.2.172-r1 | — |
| Wolfi rolling | kubevela-vela-cli +1 | 1.11.0-r14 | — |
| Wolfi rolling | kubo | 0.43.0-r6 | — |
| Wolfi rolling | kubo-compat | 0.43.1-r0 | — |
| Wolfi rolling | kuma-cp-2.13 +4 | 2.13.10-r8 | — |
| Wolfi rolling | kwok | 0.8.0-r10 | — |
| Wolfi rolling | kyverno-1.17 +5 | 1.17.2-r35 | — |
| Wolfi rolling | kyverno-1.18 +5 | 1.18.2-r15 | — |
| Wolfi rolling | kyverno-notation-aws | 1.1-r79 | — |
| Wolfi rolling | litestream | 0.5.17-r3 | — |
| Wolfi rolling | loki-3.6 +3 | 3.6.16-r6 | — |
| Wolfi rolling | loki-3.7 +4 | 3.7.7-r4 | — |
| Wolfi rolling | lvm-driver | 1.10.1-r1 | — |
| Wolfi rolling | manifest-tool | 2.2.2-r14 | — |
| Wolfi rolling | mattermost-11.5 | 11.5.7-r12 | — |
| Wolfi rolling | mattermost-11.6 +1 | 11.6.6-r15 | — |
| Wolfi rolling | mattermost-11.7 | 11.7.10-r4 | — |
| Wolfi rolling | mc | 0.20250813.083541-r24 | — |
| Wolfi rolling | mcp-grafana | 1.3.0-r2 | — |
| Wolfi rolling | melange | 0.59.5-r1 | — |
| Wolfi rolling | mesosphere-vsphere-csi-driver +1 | 3.5.0-r31 | — |
| Wolfi rolling | metallb +4 | 0.16.1-r12 | — |
| Wolfi rolling | metrics-server +1 | 0.9.0-r11 | — |
| Wolfi rolling | migrate | 4.20.1-r1 | — |
| Wolfi rolling | minio | 0.20260717.120751-r15 | — |
| Wolfi rolling | minio-object-browser | 2.0.4-r28 | — |
| Wolfi rolling | mountpoint-s3-csi-driver-2.5 | 2.5.0-r18 | — |
| Wolfi rolling | mountpoint-s3-csi-driver-2.6 | 2.6.0-r10 | — |
| Wolfi rolling | multus-cni | 4.3.1-r1 | — |
| Wolfi rolling | nerdctl | 2.3.5-r13 | — |
| Wolfi rolling | net-kourier-1.21 | 1.21.1-r17 | — |
| Wolfi rolling | net-kourier-1.22 | 1.22.1-r14 | — |
| Wolfi rolling | neuvector-scanner +2 | 4.276-r0 | — |
| Wolfi rolling | newrelic-infrastructure-agent | 1.80.3-r1 | — |
| Wolfi rolling | node-feature-discovery-0.18 | 0.18.3-r29 | — |
| Wolfi rolling | node-problem-detector-1.35 | 1.35.3-r9 | — |
| Wolfi rolling | node-problem-detector-1.36 | 1.36.0-r10 | — |
| Wolfi rolling | nuclei | 3.11.1-r8 | — |
| Wolfi rolling | nvidia-container-toolkit-nvidia-ctk-installer +1 | 1.20.0-r7 | — |
| Wolfi rolling | oauth2-proxy | 7.15.4-r3 | — |
| Wolfi rolling | octo-sts +1 | 0.9.0-r0 | — |
| Wolfi rolling | op-geth +1 | 1.101702.3-r3 | — |
| Wolfi rolling | opa-envoy | 1.21.0-r1 | — |
| Wolfi rolling | openbao | 2.6.2-r5 | — |
| Wolfi rolling | opencost | 1.121.1-r6 | — |
| Wolfi rolling | openfga | 1.20.0-r1 | — |
| Wolfi rolling | opentelemetry-collector | 0.160.0-r1 | — |
| Wolfi rolling | opentelemetry-operator +1 | 0.158.0-r5 | — |
| Wolfi rolling | opentofu-1.11 | 1.11.14-r6 | — |
| Wolfi rolling | opentofu-1.12 +1 | 1.12.6-r6 | — |
| Wolfi rolling | opentofu-1.9 | 1.9.4-r31 | — |
| Wolfi rolling | osv-scanner | 2.5.1-r6 | — |
| Wolfi rolling | otel-cli | 0.4.5-r35 | — |
| Wolfi rolling | percona-server-mongodb-operator | 1.23.0-r8 | — |
| Wolfi rolling | pg_timetable | 7.1.0-r3 | — |
| Wolfi rolling | podman-6.0 | 6.0.2-r8 | — |
| Wolfi rolling | policy-controller +1 | 0.15.1-r27 | — |
| Wolfi rolling | prometheus-3.10 | 3.10.0-r23 | — |
| Wolfi rolling | prometheus-3.11 | 3.11.3-r17 | — |
| Wolfi rolling | prometheus-3.12 | 3.12.0-r13 | — |
| Wolfi rolling | prometheus-operator +1 | 0.94.0-r0 | — |
| Wolfi rolling | promxy | 0.0.97-r1 | — |
| Wolfi rolling | pulumi-kubernetes-operator | 2.9.1-r2 | — |
| Wolfi rolling | pulumi-language-go +1 | 3.265.0-r1 | — |
| Wolfi rolling | rabbitmq-cluster-operator | 2.23.0-r0 | — |
| Wolfi rolling | rabbitmq-messaging-topology-operator +1 | 1.20.3-r1 | — |
| Wolfi rolling | rancher-2.13 | 2.13.9-r6 | — |
| Wolfi rolling | rancher-2.14 +1 | 2.14.5-r5 | — |
| Wolfi rolling | rancher-agent-2.13 | 2.13.9-r3 | — |
| Wolfi rolling | rancher-helm-3 | 3.20.0-r26 | — |
| Wolfi rolling | rancher-machine | 0.15.0.145-r9 | — |
| Wolfi rolling | rancher-system-agent | 0.15.1-r3 | — |
| Wolfi rolling | ratify +1 | 1.4.5-r4 | — |
| Wolfi rolling | rclone | 1.75.1-r1 | — |
| Wolfi rolling | redis-operator | 0.26.0-r9 | — |
| Wolfi rolling | rekor-cli +1 | 1.5.4-r5 | — |
| Wolfi rolling | rke2-cloud-provider | 1.36.4-r1 | — |
| Wolfi rolling | rqlite | 10.3.2-r1 | — |
| Wolfi rolling | scorecard | 5.5.0-r21 | — |
| Wolfi rolling | seaweedfs | 4.46-r1 | — |
| Wolfi rolling | secrets-store-csi-driver | 1.6.1-r0 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-aws | 3.1.3-r2 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-azure | 1.8.2-r9 | — |
| Wolfi rolling | secrets-store-csi-driver-provider-gcp | 1.17.0-r5 | — |
| Wolfi rolling | sftpgo | 2.7.5-r12 | — |
| Wolfi rolling | sftpgo-plugin-auth | 1.0.16-r9 | — |
| Wolfi rolling | sftpgo-plugin-eventsearch | 1.0.24-r8 | — |
| Wolfi rolling | sftpgo-plugin-eventstore | 1.0.25-r9 | — |
| Wolfi rolling | sftpgo-plugin-geoipfilter | 1.0.14-r9 | — |
| Wolfi rolling | sftpgo-plugin-kms | 1.0.19-r10 | — |
| Wolfi rolling | sftpgo-plugin-pubsub | 1.0.18-r9 | — |
| Wolfi rolling | sigstore-scaffolding-trillian-createdb +4 | 0.7.37-r7 | — |
| Wolfi rolling | skaffold | 2.25.0-r2 | — |
| Wolfi rolling | skopeo | 1.24.0-r6 | — |
| Wolfi rolling | slsa-verifier | 2.7.1-r33 | — |
| Wolfi rolling | smarter-device-manager | 1.20.11-r42 | — |
| Wolfi rolling | snyk-cli | 1.1307.2-r0 | — |
| Wolfi rolling | sops | 3.13.3-r6 | — |
| Wolfi rolling | spegel | 0.7.4-r10 | — |
| Wolfi rolling | spicedb | 1.56.1-r4 | — |
| Wolfi rolling | spicedb-operator | 1.26.1-r1 | — |
| Wolfi rolling | spiffe-helper | 0.11.0-r29 | — |
| Wolfi rolling | spire-agent +2 | 1.15.3-r6 | — |
| Wolfi rolling | spire-controller-manager | 0.7.0-r10 | — |
| Wolfi rolling | splunk-otel-collector | 0.159.0-r5 | — |
| Wolfi rolling | splunk-otel-collector-compat | 0.160.0-r0 | — |
| Wolfi rolling | spqr | 3.1.0-r3 | — |
| Wolfi rolling | sql_exporter | 0.24.8-r1 | — |
| Wolfi rolling | src | 7.6.0-r6 | — |
| Wolfi rolling | sriov-network-device-plugin | 3.11.0-r23 | — |
| Wolfi rolling | steampipe | 2.4.6-r1 | — |
| Wolfi rolling | step | 0.30.6-r11 | — |
| Wolfi rolling | step-ca | 0.30.2-r24 | — |
| Wolfi rolling | step-issuer +1 | 0.12.0-r12 | — |
| Wolfi rolling | step-kms-plugin | 0.17.0-r18 | — |
| Wolfi rolling | syft | 1.51.1-r3 | — |
| Wolfi rolling | task | 3.53.1-r4 | — |
| Wolfi rolling | tekton-chains | 0.29.3-r1 | — |
| Wolfi rolling | tekton-pipelines-events-1.11 +7 | 1.11.1-r20 | — |
| Wolfi rolling | tekton-pipelines-events-1.12 +6 | 1.12.2-r12 | — |
| Wolfi rolling | tekton-pipelines-events-1.13 +5 | 1.13.1-r9 | — |
| Wolfi rolling | tempo-2.10 +3 | 2.10.8-r5 | — |
| Wolfi rolling | tempo-3.0 +3 | 3.0.3-r6 | — |
| Wolfi rolling | temporal | 1.8.3-r3 | — |
| Wolfi rolling | temporal-ui-server | 2.54.0-r1 | — |
| Wolfi rolling | terraform | 1.5.7-r62 | — |
| Wolfi rolling | terraform-docs | 0.24.0-r11 | — |
| Wolfi rolling | terraform-mcp-server | 1.3.0-r4 | — |
| Wolfi rolling | terraform-provider-acme | 3.2.0-r1 | — |
| Wolfi rolling | terraform-provider-azapi | 2.12.0-r6 | — |
| Wolfi rolling | terraform-provider-azuread | 3.9.0-r9 | — |
| Wolfi rolling | terraform-provider-azurerm | 5.4.0-r1 | — |
| Wolfi rolling | terraform-provider-google | 8.2.0-r1 | — |
| Wolfi rolling | terraform-provider-grafana | 4.45.2-r2 | — |
| Wolfi rolling | terraform-provider-kubernetes | 3.2.1-r10 | — |
| Wolfi rolling | terraform-provider-pagerduty | 3.36.0-r3 | — |
| Wolfi rolling | terraform-provider-random | 3.9.0-r15 | — |
| Wolfi rolling | terraform-provider-sendgrid | 1.0.1-r30 | — |
| Wolfi rolling | terraform-provider-time | 0.14.1-r5 | — |
| Wolfi rolling | terraform-provider-tls | 4.4.0-r3 | — |
| Wolfi rolling | terragrunt | 1.1.4-r3 | — |
| Wolfi rolling | tetra +2 | 1.7.1-r2 | — |
| Wolfi rolling | tflint | 0.64.0-r7 | — |
| Wolfi rolling | tfsec | 1.28.14-r50 | — |
| Wolfi rolling | thanos | 0.42.4-r7 | — |
| Wolfi rolling | timestamp-authority-server | 2.1.3-r10 | — |
| Wolfi rolling | tkn | 0.46.0-r7 | — |
| Wolfi rolling | tofu-controller +1 | 0.16.5-r7 | — |
| Wolfi rolling | traefik-3.6 | 3.6.25-r7 | — |
| Wolfi rolling | trillian-logserver +1 | 1.7.3-r19 | — |
| Wolfi rolling | trivy | 0.74.0-r6 | — |
| Wolfi rolling | trivy-operator +1 | 0.34.0-r4 | — |
| Wolfi rolling | trufflehog | 3.97.4-r4 | — |
| Wolfi rolling | tw +3 | 0.0.51-r1 | — |
| Wolfi rolling | undock | 0.14.0-r11 | — |
| Wolfi rolling | vault-benchmark | 0.4.0-r28 | — |
| Wolfi rolling | vault-env | 1.23.0-r12 | — |
| Wolfi rolling | vault-secrets-webhook | 1.23.1-r11 | — |
| Wolfi rolling | vcluster +2 | 0.37.0-r1 | — |
| Wolfi rolling | velero +1 | 1.18.2-r10 | — |
| Wolfi rolling | velero-plugin-for-aws +1 | 1.14.2-r11 | — |
| Wolfi rolling | velero-plugin-for-microsoft-azure | 1.14.2-r9 | — |
| Wolfi rolling | verticadb-operator | 25.4.0.0-r29 | — |
| Wolfi rolling | vexctl | 0.4.4-r9 | — |
| Wolfi rolling | victoriametrics-operator | 0.74.1-r6 | — |
| Wolfi rolling | vitess-23 +1 | 23.0.6-r5 | — |
| Wolfi rolling | vitess-24 +1 | 24.0.3-r4 | — |
| Wolfi rolling | vitess-24-compat | 24.0.3-r7 | — |
| Wolfi rolling | wal-g-pg | 3.0.9-r5 | — |
| Wolfi rolling | witness | 0.12.0-r11 | — |
| Wolfi rolling | wolfictl | 0.39.25-r8 | — |
| Wolfi rolling | xeol | 0.10.8-r61 | — |
| Wolfi rolling | yunikorn-k8shim | 1.9.0-r7 | — |
| Wolfi rolling | zarf | 0.85.0-r2 | — |
| Wolfi rolling | zot | 2.1.21-r1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | google.golang.org/grpc | < 1.82.2 | 1.82.2 | GHSA-2v4p-qf9q-27wj |
| Go | google.golang.org/grpc | >= 1.83.0, < 1.83.2 | 1.83.2 | GHSA-2v4p-qf9q-27wj |
| Go | google.golang.org/grpc | >= 1.84.0-dev, < 1.84.0-dev.0.20260825144003-d5a41119e0e3 | 1.84.0-dev.0.20260825144003-d5a41119e0e3 | GHSA-2v4p-qf9q-27wj |
| Go | google.golang.org/grpc | >= 1.85.0-dev, < 1.85.0-dev.0.20260825072537-93e31b48545e | 1.85.0-dev.0.20260825072537-93e31b48545e | GHSA-2v4p-qf9q-27wj |
| Go | google.golang.org/grpc | < 1.82.2 · >= 1.83.0, < 1.83.2 · >= 1.84.0-dev, < 1.84.0-dev.0.20260825144003-d5a41119e0e3 · >= 1.85.0-dev, < 1.85.0-dev.0.20260825072537-93e31b48545e | 1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e | GO-2026-6443 |
Advisories 50
- SUSE-SU-2026:5202-1 Security update for distribution SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5203-1 Security update for alloy SUSE / openSUSE Security Updates · Nov 12, 2026
- SUSE-SU-2026:5167-1 Security update for kubevirt SUSE / openSUSE Security Updates · Nov 11, 2026
- WID-SEC-2026-3605 Red Hat Enterprise Linux (rhc): Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Nov 9, 2026
- RLSA-2026:95272 Important: osbuild-composer security update Rocky Linux Security Advisories · Nov 6, 2026
- openSUSE-SU-2026:22221-1 Security update for warewulf4 SUSE / openSUSE Security Updates · Nov 4, 2026
- openSUSE-SU-2026:22224-1 Security update for rqlite SUSE / openSUSE Security Updates · Nov 4, 2026
- openSUSE-SU-2026:12375-1 warewulf4-4.7.1-2.1 on GA media SUSE / openSUSE Security Updates · Nov 1, 2026
- ALSA-2026:76744 Important: opentelemetry-collector security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:76743 Important: opentelemetry-collector security update AlmaLinux Security Advisories · Oct 29, 2026
- openSUSE-SU-2026:12235-1 containerized-data-importer1.65-api-1.65.0-4.1 on GA media SUSE / openSUSE Security Updates · Oct 24, 2026
- openSUSE-SU-2026:12241-1 kubevirt1.8-container-disk-1.8.4-7.1 on GA media SUSE / openSUSE Security Updates · Oct 24, 2026
- openSUSE-SU-2026:22145-1 Security update for amazon-ecs-init SUSE / openSUSE Security Updates · Oct 23, 2026
- SUSE-SU-2026:24265-1 Security update for amazon-ecs-init SUSE / openSUSE Security Updates · Oct 23, 2026
- openSUSE-SU-2026:22134-1 Security update for gh SUSE / openSUSE Security Updates · Oct 20, 2026
- RHSA-2026:82346 Red Hat Security Advisory: opentelemetry-collector security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:82344 Red Hat Security Advisory: opentelemetry-collector security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:82342 Red Hat Security Advisory: opentelemetry-collector security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:79011 Red Hat Security Advisory: rhc security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:79012 Red Hat Security Advisory: rhc security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:79010 Red Hat Security Advisory: rhc security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:76744 Red Hat Security Advisory: opentelemetry-collector security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:76743 Red Hat Security Advisory: opentelemetry-collector security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:75689 Red Hat Security Advisory: rhc-worker-script security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:73915 Red Hat Security Advisory: rhc security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:72275 Red Hat Security Advisory: rhc security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- openSUSE-SU-2026:12186-1 rqlite-10.6.1-1.1 on GA media SUSE / openSUSE Security Updates · Oct 19, 2026
- openSUSE-SU-2026:12163-1 gh-2.102.0-1.1 on GA media SUSE / openSUSE Security Updates · Oct 18, 2026
- openSUSE-SU-2026:12114-1 alloy-1.20.1-1.1 on GA media SUSE / openSUSE Security Updates · Oct 14, 2026
- SUSE-SU-2026:4628-1 Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls SUSE / openSUSE Security Updates · Oct 13, 2026
- openSUSE-SU-2026:12107-1 amazon-ecs-init-1.108.0-1.1 on GA media SUSE / openSUSE Security Updates · Oct 13, 2026
- openSUSE-SU-2026:12112-1 rclone-1.75.2-1.1 on GA media SUSE / openSUSE Security Updates · Oct 13, 2026
- openSUSE-SU-2026:12073-1 inspektor-gadget-0.57.0-1.1 on GA media SUSE / openSUSE Security Updates · Oct 9, 2026
- RLSA-2026:76744 Important: opentelemetry-collector security update Rocky Linux Security Advisories · Oct 8, 2026
- RLSA-2026:76743 Important: opentelemetry-collector security update Rocky Linux Security Advisories · Oct 7, 2026
- SUSE-SU-2026:4444-1 Security update for terraform-provider-susepubliccloud SUSE / openSUSE Security Updates · Oct 5, 2026
- openSUSE-SU-2026:21996-1 Security update for v2ray-core SUSE / openSUSE Security Updates · Oct 1, 2026
- openSUSE-SU-2026:11920-1 grafana-12.4.11-1.1 on GA media SUSE / openSUSE Security Updates · Sep 30, 2026
- openSUSE-SU-2026:11931-1 velero-1.18.4-1.1 on GA media SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:4389-1 Security update for terraform-provider-susepubliccloud SUSE / openSUSE Security Updates · Sep 30, 2026
- SUSE-SU-2026:4388-1 Security update for amazon-cloudwatch-agent SUSE / openSUSE Security Updates · Sep 30, 2026
- openSUSE-SU-2026:11911-1 wait4x-3.7.2-1.1 on GA media SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23730-1 Security update for helm SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23688-1 Security update for helm SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23546-1 Security update for helm SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23548-1 Security update for google-osconfig-agent SUSE / openSUSE Security Updates · Sep 29, 2026
- SUSE-SU-2026:23708-1 Security update for google-cloud-sap-agent SUSE / openSUSE Security Updates · Sep 28, 2026
- SUSE-SU-2026:23729-1 Security update for google-cloud-sap-agent SUSE / openSUSE Security Updates · Sep 28, 2026
- SUSE-SU-2026:23863-1 Security update for govulncheck-vulndb SUSE / openSUSE Security Updates · Sep 27, 2026
- SUSE-SU-2026:23864-1 Security update for distribution SUSE / openSUSE Security Updates · Sep 27, 2026
References
- https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj
- https://github.com/grpc/grpc-go/issues/9354
- https://github.com/grpc/grpc-go/pull/9365
- https://github.com/grpc/grpc-go/pull/9366
- https://github.com/grpc/grpc-go/pull/9367
- https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7
- https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4
- https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f
- https://github.com/grpc/grpc-go/releases/tag/v1.82.2
- https://github.com/grpc/grpc-go/releases/tag/v1.83.2