CVE-2026-84303
Fixed in a distro release EPSS <1%CVSS 6.3
gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, the xDS RBAC HTTP filter in internal/xds/httpfilter/rbac/rbac.go does not lowercase header matcher names in normalizeHeaderMatcher even though incoming metadata keys are lowercase. A DENY policy using a mixed-case name such as X-Role or User-Agent therefore does not match and fails open, allowing requests that should be rejected. The same case mismatch permits :Scheme or Grpc-Status to evade gRFC A41 validation and prevents Host from being rewritten to :authority. This issue is fixed in version 1.83.1.
Products: grpc-go
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | google.golang.org/grpc | 1.83.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | amazon-cloudwatch-agent | 1.300073.0-r1 |
| Chainguard | amazon-ssm-agent-ecs-exec-fips | 3.3.5226.0-r4 |
| Chainguard | amazon-ssm-agent-fips | 3.3.5226.0-r4 |
| Chainguard | argo-cd-3.1 | no fix |
| Chainguard | argo-cd-3.1-compat | no fix |
| Chainguard | argo-cd-3.3-compat | no fix |
| Chainguard | argo-cd-fips-3.1 | no fix |
| Chainguard | argo-cd-fips-3.1-compat | no fix |
| Chainguard | argo-cd-fips-3.2 | no fix |
| Chainguard | argo-cd-fips-3.2-compat | no fix |
| Chainguard | argo-workflow-controller-3.7 | no fix |
| Chainguard | argo-workflow-controller-fips-3.7 | no fix |
| Chainguard | argo-workflow-executor-3.7 | no fix |
| Chainguard | argo-workflow-executor-fips-3.7 | no fix |
| Chainguard | argo-workflows-3.7 | no fix |
| Chainguard | argo-workflows-fips-3.7 | no fix |
| Chainguard | auditbeat-fips-9.2 | no fix |
| Chainguard | aws-ebs-csi-driver-1.59 | no fix |
| Chainguard | aws-ebs-csi-driver-1.61 | no fix |
| Chainguard | aws-ebs-csi-driver-fips-1.55 | no fix |
| Chainguard | aws-ebs-csi-driver-fips-1.56 | no fix |
| Chainguard | aws-ebs-csi-driver-fips-1.61 | no fix |
| Chainguard | aws-ebs-csi-driver-fips-1.63 | no fix |
| Chainguard | aws-otel-collector | 0.50.0-r3 |
| Chainguard | azurefile-csi-1.33 | 1.33.10-r11 |
| Chainguard | bank-vaults-template | 1.33.2-r3 |
| Chainguard | blob-csi-1.27 | 1.27.10-r0 |
| Chainguard | cadence | 0 |
| Chainguard | cadence-cassandra-tool | 0 |
| Chainguard | cadence-fips | 0 |
| Chainguard | cadence-fips-cassandra-tool | 0 |
| Chainguard | cadence-fips-server | 0 |
| Chainguard | cadence-fips-sql-tool | 0 |
| Chainguard | cadence-server | 0 |
| Chainguard | cadence-sql-tool | 0 |
| Chainguard | calico-apiserver-3.30 | no fix |
| Chainguard | calico-apiserver-fips-3.30 | no fix |
| Chainguard | calico-app-policy-3.30 | no fix |
| Chainguard | calico-app-policy-fips-3.30 | no fix |
| Chainguard | calico-cni-3.30 | no fix |
| Chainguard | calico-cni-fips-3.30 | no fix |
| Chainguard | calico-felix-3.30 | no fix |
| Chainguard | calico-felix-3.32 | 3.32.2-r3 |
| Chainguard | calico-felix-fips-3.30 | no fix |
| Chainguard | calico-goldmane-3.30 | no fix |
| Chainguard | calico-goldmane-3.31 | 3.31.7-r3 |
| Chainguard | calico-goldmane-3.31 | no fix |
| Chainguard | calico-goldmane-3.32 | 3.32.2-r3 |
| Chainguard | calico-goldmane-fips-3.30 | no fix |
| Chainguard | calico-kube-controllers-3.30 | no fix |
| Chainguard | calico-kube-controllers-fips-3.30 | no fix |
| Chainguard | calico-node-3.30 | no fix |
| Chainguard | calico-node-fips-3.30 | no fix |
| Chainguard | calico-pod2daemon-3.30 | no fix |
| Chainguard | calico-pod2daemon-fips-3.30 | no fix |
| Chainguard | calico-typhad-3.30 | no fix |
| Chainguard | calico-typhad-3.32 | 3.32.2-r3 |
| Chainguard | calico-typhad-fips-3.30 | no fix |
| Chainguard | calico-whisker-backend-3.30 | no fix |
| Chainguard | calico-whisker-backend-fips-3.30 | no fix |
| Chainguard | calicoctl-3.30 | no fix |
| Chainguard | calicoctl-fips-3.30 | no fix |
| Chainguard | cerbos | no fix |
| Chainguard | cert-manager-1.18 | no fix |
| Chainguard | cert-manager-1.19 | no fix |
| Chainguard | cert-manager-controller-1.18 | no fix |
| Chainguard | cert-manager-controller-1.19 | no fix |
| Chainguard | cert-manager-controller-fips-1.18 | no fix |
| Chainguard | cert-manager-controller-fips-1.19 | no fix |
| Chainguard | cert-manager-fips-1.18 | no fix |
| Chainguard | cert-manager-fips-1.19 | no fix |
| Chainguard | cert-manager-webhook-1.18 | no fix |
| Chainguard | cert-manager-webhook-1.19 | no fix |
| Chainguard | cert-manager-webhook-fips-1.18 | no fix |
| Chainguard | cert-manager-webhook-fips-1.19 | no fix |
| Chainguard | cilium-1.17 | 1.17.18-r12 |
| Chainguard | cilium-1.17-clustermesh-apiserver | 1.17.18-r12 |
| Chainguard | cilium-1.17-envoy | 1.17.18-r12 |
| Chainguard | cilium-1.17-hubble-relay | 1.17.18-r12 |
| Chainguard | cilium-1.17-operator-aws | 1.17.18-r12 |
| Chainguard | cilium-1.17-operator-generic | 1.17.18-r12 |
| Chainguard | cilium-1.19-operator-generic | no fix |
| Chainguard | cilium-fips-1.17 | 1.17.18-r10 |
| Chainguard | cilium-fips-1.17-clustermesh-apiserver | 1.17.18-r10 |
| Chainguard | cilium-fips-1.17-host-utils | 1.17.18-r10 |
| Chainguard | cilium-fips-1.17-hubble-relay | 1.17.18-r10 |
| Chainguard | cilium-fips-1.17-operator-aws | 1.17.18-r10 |
| Chainguard | cilium-fips-1.17-operator-azure | 1.17.18-r10 |
| Chainguard | cilium-fips-1.17-operator-generic | 1.17.18-r10 |
| Chainguard | cilium-fips-1.19 | 1.19.7-r1 |
| Chainguard | cilium-fips-1.19-clustermesh-apiserver | 1.19.7-r1 |
| Chainguard | cilium-fips-1.19-envoy | 1.19.7-r1 |
| Chainguard | cilium-fips-1.19-host-utils | 1.19.7-r1 |
| Chainguard | cilium-fips-1.19-hubble-relay | 1.19.7-r1 |
| Chainguard | cilium-fips-1.19-operator-aws | 1.19.7-r1 |
| Chainguard | cilium-fips-1.19-operator-azure | 1.19.7-r1 |
| Chainguard | cilium-fips-1.19-operator-generic | 1.19.7-r1 |
| Chainguard | cloud-provider-aws-fips-1.33-cloud-controller-manager | no fix |
| Chainguard | cloud-provider-azure-cloud-controller-manager-fips-1.33 | 1.33.18-r0 |
| Chainguard | cloud-provider-azure-cloud-node-manager-fips-1.33 | 1.33.18-r0 |
| Chainguard | cloud-provider-vsphere | 1.37.0-r3 |
| Chainguard | cloudbeat-9.3 | 9.3.8-r12 |
| Chainguard | cloudflared | no fix |
| Chainguard | cluster-api-1.14-capd-manager | 0 |
| Chainguard | cluster-api-1.14-kubeadm-bootstrap-controller | 0 |
| Chainguard | cluster-api-fips-1.14-controller | 0 |
| Chainguard | cluster-autoscaler-fips-1.33 | 1.33.6-r8 |
| Chainguard | commercial-chainloop-backend | no fix |
| Chainguard | commercial-chainloop-cli | no fix |
| Chainguard | commercial-expanso-edge | 2.1.22-r0 |
| Chainguard | commercial-grafana-11.6 | no fix |
| Chainguard | commercial-grafana-12.1 | no fix |
| Chainguard | commercial-grafana-12.2 | no fix |
| Chainguard | commercial-grafana-12.3 | no fix |
| Chainguard | commercial-grafana-12.4 | 12.4.11-r0 |
| Chainguard | commercial-grafana-13.0 | 13.0.9-r0 |
| Chainguard | commercial-grafana-13.1 | 13.1.6-r0 |
| Chainguard | commercial-grafana-13.2 | 13.2.2-r0 |
| Chainguard | commercial-kyverno-1.13 | no fix |
| Chainguard | commercial-kyverno-1.14 | no fix |
| Chainguard | commercial-kyverno-1.15 | no fix |
| Chainguard | commercial-kyverno-1.16 | no fix |
| Chainguard | commercial-kyverno-1.17 | 1.17.2-r0 |
| Chainguard | commercial-kyverno-background-controller-1.13 | no fix |
| Chainguard | commercial-kyverno-background-controller-1.14 | no fix |
| Chainguard | commercial-kyverno-background-controller-1.15 | no fix |
| Chainguard | commercial-kyverno-background-controller-1.16 | no fix |
| Chainguard | commercial-kyverno-background-controller-1.17 | 1.17.2-r0 |
| Chainguard | commercial-kyverno-cleanup-controller-1.13 | no fix |
| Chainguard | commercial-kyverno-cleanup-controller-1.14 | no fix |
| Chainguard | commercial-kyverno-cleanup-controller-1.15 | no fix |
| Chainguard | commercial-kyverno-cleanup-controller-1.16 | no fix |
| Chainguard | commercial-kyverno-cleanup-controller-1.17 | 1.17.2-r0 |
| Chainguard | commercial-kyverno-reports-controller-1.13 | no fix |
| Chainguard | commercial-kyverno-reports-controller-1.14 | no fix |
| Chainguard | commercial-kyverno-reports-controller-1.15 | no fix |
| Chainguard | commercial-kyverno-reports-controller-1.16 | no fix |
| Chainguard | commercial-kyverno-reports-controller-1.17 | 1.17.2-r0 |
| Chainguard | commercial-kyvernopre-1.13 | no fix |
| Chainguard | commercial-kyvernopre-1.14 | no fix |
| Chainguard | commercial-kyvernopre-1.15 | no fix |
| Chainguard | commercial-kyvernopre-1.16 | no fix |
| Chainguard | commercial-kyvernopre-1.17 | 1.17.2-r0 |
| Chainguard | commercial-nginx-ingress | 5.6.1-r0 |
| Chainguard | consul-2.0 | no fix |
| Chainguard | crossplane-provider-aws-codestarnotifications-fips | 2.7.0-r4 |
| Chainguard | crossplane-provider-aws-codestarnotifications-fips | 2.7.0-r5 |
| Chainguard | dapr-daprd-1.15 | 1.15.14-r15 |
| Chainguard | dapr-daprd-1.15 | 1.15.14-r16 |
| Chainguard | dapr-daprd-1.16 | 1.16.19-r9 |
| Chainguard | dapr-daprd-1.17 | 1.17.13-r7 |
| Chainguard | dapr-daprd-fips-1.15 | 1.15.14-r17 |
| Chainguard | dapr-daprd-fips-1.15 | 1.15.14-r18 |
| Chainguard | dapr-daprd-fips-1.16 | 1.16.20-r1 |
| Chainguard | dapr-daprd-fips-1.17 | 1.17.13-r7 |
| Chainguard | dapr-daprd-fips-1.18 | 1.18.3-r5 |
| Chainguard | dapr-daprd-fips-1.18 | no fix |
| Chainguard | dapr-injector-1.15 | 1.15.14-r16 |
| Chainguard | dapr-injector-1.15 | no fix |
| Chainguard | dapr-injector-1.16 | 1.16.19-r9 |
| Chainguard | dapr-injector-1.17 | 1.17.13-r7 |
| Chainguard | dapr-injector-fips-1.15 | 1.15.14-r18 |
| Chainguard | dapr-injector-fips-1.16 | 1.16.20-r1 |
| Chainguard | dapr-injector-fips-1.17 | 1.17.13-r7 |
| Chainguard | dapr-injector-fips-1.18 | 1.18.3-r5 |
| Chainguard | dapr-operator-1.15 | 1.15.14-r15 |
| Chainguard | dapr-operator-1.15 | 1.15.14-r16 |
| Chainguard | dapr-operator-1.16 | 1.16.19-r9 |
| Chainguard | dapr-operator-1.16 | no fix |
| Chainguard | dapr-operator-1.17 | 1.17.13-r7 |
| Chainguard | dapr-operator-fips-1.15 | 1.15.14-r18 |
| Chainguard | dapr-operator-fips-1.16 | 1.16.20-r1 |
| Chainguard | dapr-operator-fips-1.17 | 1.17.13-r7 |
| Chainguard | dapr-operator-fips-1.18 | 1.18.3-r5 |
| Chainguard | dapr-placement-1.15 | 1.15.14-r16 |
| Chainguard | dapr-placement-1.16 | 1.16.19-r9 |
| Chainguard | dapr-placement-1.17 | 1.17.13-r7 |
| Chainguard | dapr-placement-fips-1.15 | 1.15.14-r18 |
| Chainguard | dapr-placement-fips-1.16 | 1.16.20-r1 |
| Chainguard | dapr-placement-fips-1.17 | 1.17.13-r7 |
| Chainguard | dapr-placement-fips-1.18 | 1.18.3-r5 |
| Chainguard | dapr-scheduler-1.15 | 1.15.14-r15 |
| Chainguard | dapr-scheduler-1.15 | 1.15.14-r16 |
| Chainguard | dapr-scheduler-1.16 | 1.16.19-r9 |
| Chainguard | dapr-scheduler-1.16 | no fix |
| Chainguard | dapr-scheduler-1.17 | 1.17.13-r7 |
| Chainguard | dapr-scheduler-fips-1.15 | 1.15.14-r18 |
| Chainguard | dapr-scheduler-fips-1.15 | no fix |
| Chainguard | dapr-scheduler-fips-1.16 | 1.16.20-r1 |
| Chainguard | dapr-scheduler-fips-1.17 | 1.17.13-r7 |
| Chainguard | dapr-scheduler-fips-1.18 | no fix |
| Chainguard | dapr-sentry-1.15 | no fix |
| Chainguard | dapr-sentry-1.17 | 1.17.13-r7 |
| Chainguard | dapr-sentry-fips-1.15 | 1.15.14-r18 |
| Chainguard | dapr-sentry-fips-1.15 | no fix |
| Chainguard | dapr-sentry-fips-1.16 | 1.16.20-r1 |
| Chainguard | dapr-sentry-fips-1.17 | 1.17.13-r7 |
| Chainguard | dapr-sentry-fips-1.18 | 1.18.3-r5 |
| Chainguard | datadog-agent-7.76 | 7.76.3-r41 |
| Chainguard | datadog-agent-7.76 | no fix |
| Chainguard | datadog-agent-7.76-full | 7.76.3-r41 |
| Chainguard | datadog-agent-7.77 | 7.77.3-r25 |
| Chainguard | datadog-agent-7.77-full | 7.77.3-r25 |
| Chainguard | datadog-agent-7.78 | 7.78.4-r20 |
| Chainguard | datadog-agent-7.78-full | 7.78.4-r20 |
| Chainguard | datadog-agent-7.79 | 7.79.2-r18 |
| Chainguard | datadog-agent-7.79-full | 7.79.2-r18 |
| Chainguard | datadog-agent-7.80 | 7.80.4-r16 |
| Chainguard | datadog-agent-7.80-core-integrations | no fix |
| Chainguard | datadog-agent-7.80-fakeintake | 7.80.4-r16 |
| Chainguard | datadog-agent-7.80-full | 7.80.4-r16 |
| Chainguard | datadog-agent-7.80-oci-compat | 7.80.4-r16 |
| Chainguard | datadog-agent-7.80-s6-overlay | 7.80.4-r16 |
| Chainguard | datadog-agent-7.81 | 7.81.3-r5 |
| Chainguard | datadog-agent-7.81-fakeintake | 7.81.3-r5 |
| Chainguard | datadog-agent-7.81-full | 7.81.3-r5 |
| Chainguard | datadog-agent-fips-7.76 | 7.76.3-r42 |
| Chainguard | datadog-agent-fips-7.76-full | 7.76.3-r42 |
| Chainguard | datadog-agent-fips-7.77 | no fix |
| Chainguard | datadog-agent-fips-7.77-full | no fix |
| Chainguard | datadog-agent-fips-7.77-serverless-init | 0 |
| Chainguard | datadog-agent-fips-7.78 | 7.78.4-r18 |
| Chainguard | datadog-agent-fips-7.78-full | 7.78.4-r18 |
| Chainguard | datadog-agent-fips-7.79 | 7.79.2-r13 |
| Chainguard | datadog-agent-fips-7.79-full | 7.79.2-r13 |
| Chainguard | datadog-agent-fips-7.80 | 7.80.4-r16 |
| Chainguard | datadog-agent-fips-7.80-fakeintake | 7.80.4-r16 |
| Chainguard | datadog-agent-fips-7.80-full | 7.80.4-r16 |
| Chainguard | datadog-agent-fips-7.82 | 7.82.3-r3 |
| Chainguard | datadog-agent-fips-7.82-fakeintake | 7.82.3-r3 |
| Chainguard | datadog-agent-fips-7.82-full | 7.82.3-r3 |
| Chainguard | datadog-cluster-agent-7.76 | 7.76.3-r41 |
| Chainguard | datadog-cluster-agent-7.77 | 7.77.3-r25 |
| Chainguard | datadog-cluster-agent-7.78 | 7.78.4-r20 |
| Chainguard | datadog-cluster-agent-7.79 | 7.79.2-r18 |
| Chainguard | datadog-cluster-agent-7.80 | 7.80.4-r16 |
| Chainguard | datadog-cluster-agent-7.81 | 7.81.3-r5 |
| Chainguard | datadog-cluster-agent-fips-7.76 | 7.76.3-r42 |
| Chainguard | datadog-cluster-agent-fips-7.77 | no fix |
| Chainguard | datadog-cluster-agent-fips-7.78 | 7.78.4-r18 |
| Chainguard | datadog-cluster-agent-fips-7.79 | 7.79.2-r13 |
| Chainguard | datadog-cluster-agent-fips-7.80 | 7.80.4-r16 |
| Chainguard | datadog-cluster-agent-fips-7.82 | 7.82.3-r3 |
| Chainguard | dockerd-28 | 28.5.2-r39 |
| Chainguard | dogstatsd-7.76 | 7.76.3-r41 |
| Chainguard | dogstatsd-7.77 | 7.77.3-r25 |
| Chainguard | dogstatsd-7.78 | 7.78.4-r20 |
| Chainguard | dogstatsd-7.79 | 7.79.2-r18 |
| Chainguard | dogstatsd-7.80 | 7.80.4-r16 |
| Chainguard | dogstatsd-7.81 | 7.81.3-r5 |
| Chainguard | elastic-agent-9.2 | no fix |
| Chainguard | elastic-agent-9.3 | 9.3.8-r7 |
| Chainguard | elastic-agent-fips-9.2 | no fix |
| Chainguard | elastic-agent-fips-9.3 | no fix |
| Chainguard | elastic-otel-collector-9.3 | 9.3.8-r7 |
| Chainguard | elastic-otel-collector-fips-9.3 | no fix |
| Chainguard | envoy-gateway-1.6 | no fix |
| Chainguard | envoy-gateway-1.6-egctl | no fix |
| Chainguard | envoy-gateway-1.6-ratelimit-3fb70258 | no fix |
| Chainguard | envoy-gateway-fips-1.8-ratelimit-fe26676d | 1.8.4-r3 |
| Chainguard | etcd-fips-3.4 | no fix |
| Chainguard | external-secrets-operator-2.2 | 2.2.0-r26 |
| Chainguard | falco-exporter | no fix |
| Chainguard | filebeat-9.2 | no fix |
| Chainguard | filebeat-fips-9.2 | no fix |
| Chainguard | filebeat-oss-7 | no fix |
| Chainguard | filebeat-oss-fips-7 | no fix |
| Chainguard | fleet-server-9.2 | 9.2.8-r13 |
| Chainguard | fleet-server-fips-9.3 | 9.3.8-r6 |
| Chainguard | flyte | 1.16.9-r0 |
| Chainguard | gatekeeper-3.20 | no fix |
| Chainguard | gatekeeper-3.20-gator | no fix |
| Chainguard | gatekeeper-fips-3.20 | no fix |
| Chainguard | gcp-compute-persistent-disk-csi-driver-1.13 | 1.13.9-r76 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-1.15 | 1.15.4-r77 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-1.16 | 1.16.2-r28 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-1.17 | 1.17.15-r23 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-1.18 | 1.18.1-r26 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-1.20 | 1.20.4-r20 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-1.21 | 1.21.12-r22 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-1.23 | 1.23.4-r2 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-1.25 | 1.25.2-r17 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-1.25-compat | no fix |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.13 | 1.13.9-r37 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.14 | 1.14.6-r28 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.15 | 1.15.4-r36 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.16 | 1.16.2-r31 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.17 | 1.17.15-r30 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.18 | 1.18.1-r30 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.20 | 1.20.4-r21 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.21 | 1.21.12-r25 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.22 | 1.22.5-r25 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.23 | 1.23.4-r4 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.24 | 1.24.1-r9 |
| Chainguard | gcp-compute-persistent-disk-csi-driver-fips-1.25 | 1.25.2-r14 |
| Chainguard | gitlab-pages-19.1 | no fix |
| Chainguard | gitlab-rails-ce-18.10 | no fix |
| Chainguard | gitlab-rails-ce-18.11 | no fix |
| Chainguard | gitlab-rails-ce-18.7 | no fix |
| Chainguard | gitlab-rails-ce-18.8 | no fix |
| Chainguard | gitlab-rails-ce-18.9 | no fix |
| Chainguard | gitlab-rails-ce-19.0 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.10 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.11 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.7 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.8 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.9 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.0 | no fix |
| Chainguard | gitlab-runner-helper-19.1 | 19.1.5-r0 |
| Chainguard | gitlab-workhorse-ce-fips-18.10 | 18.10.8-r9 |
| Chainguard | gitlab-workhorse-ce-fips-18.9 | no fix |
| Chainguard | gitlab-workhorse-ce-fips-19.0 | no fix |
| Chainguard | grafana-11.6 | no fix |
| Chainguard | grafana-12.1 | no fix |
| Chainguard | grafana-12.2 | no fix |
| Chainguard | grafana-12.3 | no fix |
| Chainguard | grafana-fips-11.6 | no fix |
| Chainguard | grafana-fips-12.1 | no fix |
| Chainguard | grafana-fips-12.2 | no fix |
| Chainguard | grafana-fips-12.3 | no fix |
| Chainguard | grafana-mimir-3.0 | 3.0.9-r4 |
| Chainguard | grafana-mimir-3.1-query-tee-3.1 | 3.1.6-r0 |
| Chainguard | grafana-pyroscope-1.13 | no fix |
| Chainguard | grpc-1.66 | no fix |
| Chainguard | grpc-1.67 | no fix |
| Chainguard | grpc-1.68 | no fix |
| Chainguard | grpc-1.69 | no fix |
| Chainguard | grpc-1.70 | no fix |
| Chainguard | grpc-1.71 | no fix |
| Chainguard | grpc-1.72 | no fix |
| Chainguard | grpc-1.73 | no fix |
| Chainguard | grpc-1.74 | no fix |
| Chainguard | grpc-1.75 | no fix |
| Chainguard | grpc-1.76 | no fix |
| Chainguard | grpc-1.78 | no fix |
| Chainguard | grpc-1.80 | no fix |
| Chainguard | grpc-1.81 | no fix |
| Chainguard | grpc-1.82 | no fix |
| Chainguard | harbor-2.14-photon-registry | 0 |
| Chainguard | harbor-fips-2.14-photon-registry | 0 |
| Chainguard | heartbeat-9.2 | no fix |
| Chainguard | heartbeat-fips-9.2 | no fix |
| Chainguard | helm-3 | 3.22.0-r0 |
| Chainguard | hydra | 26.2.0-r26 |
| Chainguard | ipfs-cluster | 1.1.6-r18 |
| Chainguard | istio-cni-fips-1.28 | no fix |
| Chainguard | istio-install-cni-fips-1.28 | no fix |
| Chainguard | istio-pilot-agent-fips-1.28 | no fix |
| Chainguard | istio-pilot-discovery-fips-1.28 | no fix |
| Chainguard | istioctl-1.29 | 1.29.7-r3 |
| Chainguard | jaeger-2-fips-query | no fix |
| Chainguard | k3s-1.31 | no fix |
| Chainguard | k3s-1.32 | no fix |
| Chainguard | k3s-1.33 | no fix |
| Chainguard | k3s-fips-1.33 | 0 |
| Chainguard | k3s-fips-1.34 | 0 |
| Chainguard | k3s-fips-1.36 | 0 |
| Chainguard | k3s-fips-1.37 | 0 |
| Chainguard | k3s-multicall-1.33 | no fix |
| Chainguard | k3s-static-1.31 | no fix |
| Chainguard | k3s-static-1.32 | no fix |
| Chainguard | k3s-static-1.33 | no fix |
| Chainguard | k8sgpt | 0.4.38-r3 |
| Chainguard | k8ssandra-client | 0.9.1-r2 |
| Chainguard | keda-fips-2.18 | no fix |
| Chainguard | keda-fips-2.18-metrics-apiserver | no fix |
| Chainguard | knative-eventing-1.21-jobsink | no fix |
| Chainguard | knative-eventing-1.21-webhook | no fix |
| Chainguard | knative-eventing-1.22-jobsink | 1.22.2-r8 |
| Chainguard | knative-eventing-fips-1.20-channel-controller | 1.20.3-r16 |
| Chainguard | knative-eventing-fips-1.20-channel-controller | 1.20.3-r17 |
| Chainguard | knative-eventing-fips-1.20-channel-dispatcher | 1.20.3-r17 |
| Chainguard | knative-eventing-fips-1.20-controller | 1.20.3-r17 |
| Chainguard | knative-eventing-fips-1.20-filter | 1.20.3-r16 |
| Chainguard | knative-eventing-fips-1.20-filter | 1.20.3-r17 |
| Chainguard | knative-eventing-fips-1.20-ingress | 1.20.3-r17 |
| Chainguard | knative-eventing-fips-1.20-jobsink | 1.20.3-r16 |
| Chainguard | knative-eventing-fips-1.20-mtchannel-broker | 1.20.3-r16 |
| Chainguard | knative-eventing-fips-1.20-mtchannel-broker | 1.20.3-r17 |
| Chainguard | knative-eventing-fips-1.20-webhook | 1.20.3-r17 |
| Chainguard | knative-eventing-fips-1.20-webhook | 1.20.3-r16 |
| Chainguard | knative-eventing-fips-1.21-channel-controller | no fix |
| Chainguard | knative-eventing-fips-1.21-channel-dispatcher | no fix |
| Chainguard | knative-eventing-fips-1.21-controller | no fix |
| Chainguard | knative-eventing-fips-1.21-filter | no fix |
| Chainguard | knative-eventing-fips-1.21-ingress | no fix |
| Chainguard | knative-eventing-fips-1.21-jobsink | no fix |
| Chainguard | knative-eventing-fips-1.21-mtchannel-broker | no fix |
| Chainguard | knative-eventing-fips-1.21-webhook | no fix |
| Chainguard | knative-kafka-broker-1.21-controller | no fix |
| Chainguard | knative-kafka-broker-fips-1.21-controller | 1.21.5-r9 |
| Chainguard | knative-net-istio-1.20-controller | no fix |
| Chainguard | knative-net-istio-1.20-webhook | no fix |
| Chainguard | knative-net-istio-fips-1.21-controller | no fix |
| Chainguard | knative-net-istio-fips-1.21-webhook | no fix |
| Chainguard | knative-operator-1.20 | no fix |
| Chainguard | knative-operator-1.20-webhook | no fix |
| Chainguard | knative-operator-1.23 | 0 |
| Chainguard | knative-operator-1.23-webhook | 0 |
| Chainguard | knative-operator-fips-1.23 | 0 |
| Chainguard | knative-operator-fips-1.23-webhook | 0 |
| Chainguard | knative-serving-1.20-activator | no fix |
| Chainguard | knative-serving-1.20-autoscaler | no fix |
| Chainguard | knative-serving-1.20-autoscaler-hpa | no fix |
| Chainguard | knative-serving-1.20-controller | no fix |
| Chainguard | knative-serving-1.20-queue | no fix |
| Chainguard | knative-serving-1.20-webhook | no fix |
| Chainguard | knative-serving-1.21-activator | 1.21.3-r7 |
| Chainguard | kserve-localmodel | 0.20.0-r7 |
| Chainguard | kube-apiserver-fips-1.33 | 1.33.13-r7 |
| Chainguard | kube-conformance-1.33 | no fix |
| Chainguard | kube-conformance-1.37 | 1.37.0-r3 |
| Chainguard | kube-controller-manager-fips-1.33 | 1.33.13-r7 |
| Chainguard | kube-proxy-fips-1.33 | 1.33.13-r7 |
| Chainguard | kube-scheduler-fips-1.33 | 1.33.13-r7 |
| Chainguard | kubeadm-fips-1.33 | 1.33.13-r7 |
| Chainguard | kubeflow-pipelines-apiserver | 2.17.2-r4 |
| Chainguard | kubeflow-profile-controller | 1.10.0-r36 |
| Chainguard | kubelet-fips-1.33 | 1.33.13-r7 |
| Chainguard | kubernetes-csi-external-provisioner | 6.3.0-r11 |
| Chainguard | kubernetes-csi-external-resizer | 2.2.1-r12 |
| Chainguard | kubernetes-fips-1.33 | 1.33.13-r7 |
| Chainguard | kubescape-operator | 0.2.172-r2 |
| Chainguard | kuma-dp-2.13 | 2.13.11-r0 |
| Chainguard | kyverno-1.15 | no fix |
| Chainguard | kyverno-1.17 | 1.17.2-r35 |
| Chainguard | kyverno-1.17 | no fix |
| Chainguard | kyverno-background-controller-1.15 | no fix |
| Chainguard | kyverno-cleanup-controller-1.15 | no fix |
| Chainguard | kyverno-cli-1.15 | no fix |
| Chainguard | kyverno-cli-1.17 | 1.17.2-r35 |
| Chainguard | kyverno-init-container-1.15 | no fix |
| Chainguard | kyverno-init-container-1.18 | 1.18.2-r15 |
| Chainguard | kyverno-reports-controller-1.15 | no fix |
| Chainguard | litestream | no fix |
| Chainguard | loki-2.9 | no fix |
| Chainguard | loki-2.9-logcli | no fix |
| Chainguard | loki-2.9-loki-canary | no fix |
| Chainguard | loki-2.9-promtail | no fix |
| Chainguard | loki-3.4 | no fix |
| Chainguard | loki-3.4-logcli | no fix |
| Chainguard | loki-3.4-loki-canary | no fix |
| Chainguard | loki-3.4-promtail | no fix |
| Chainguard | loki-3.5 | no fix |
| Chainguard | loki-3.5-logcli | no fix |
| Chainguard | loki-3.5-loki-canary | no fix |
| Chainguard | loki-3.5-promtail | no fix |
| Chainguard | loki-fips-2.9 | no fix |
| Chainguard | loki-fips-2.9-logcli | no fix |
| Chainguard | loki-fips-2.9-loki-canary | no fix |
| Chainguard | loki-fips-2.9-promtail | no fix |
| Chainguard | loki-fips-3.4 | no fix |
| Chainguard | loki-fips-3.4-logcli | no fix |
| Chainguard | loki-fips-3.4-loki-canary | no fix |
| Chainguard | loki-fips-3.4-promtail | no fix |
| Chainguard | loki-fips-3.5 | no fix |
| Chainguard | loki-fips-3.5-logcli | no fix |
| Chainguard | loki-fips-3.5-loki-canary | no fix |
| Chainguard | loki-fips-3.5-promtail | no fix |
| Chainguard | longhorn-share-manager-fips-1.8 | no fix |
| Chainguard | lvm-driver | 1.10.1-r1 |
| Chainguard | mattermost-11.2 | no fix |
| Chainguard | mattermost-fips-11.4 | no fix |
| Chainguard | mattermost-fips-11.6 | no fix |
| Chainguard | mcp-grafana | 1.6.2-r0 |
| Chainguard | mcp-grafana-fips | 1.5.1-r1 |
| Chainguard | metricbeat-9.2 | no fix |
| Chainguard | metricbeat-fips-9.2 | no fix |
| Chainguard | mps-control-daemon | 0.20.0-r4 |
| Chainguard | nemo-rl-cuda-13.0-mooncake | no fix |
| Chainguard | net-kourier-fips-1.20 | 1.20.1-r18 |
| Chainguard | net-kourier-fips-1.21 | 1.21.1-r9 |
| Chainguard | opentelemetry-collector-fips | 0.160.0-r1 |
| Chainguard | opentofu-1.11 | no fix |
| Chainguard | opentofu-1.12 | 1.12.6-r6 |
| Chainguard | podman-6.0 | no fix |
| Chainguard | prometheus-fips-3.11 | no fix |
| Chainguard | rancher-2.10 | no fix |
| Chainguard | rancher-agent-2.13 | 2.13.9-r4 |
| Chainguard | rke2-runtime-1.33 | no fix |
| Chainguard | rke2-runtime-fips-1.33 | no fix |
| Chainguard | rke2-runtime-fips-kube-apiserver-1.33 | no fix |
| Chainguard | rke2-runtime-fips-kube-controller-manager-1.33 | no fix |
| Chainguard | rke2-runtime-fips-kube-proxy-1.33 | no fix |
| Chainguard | rke2-runtime-fips-kube-scheduler-1.33 | no fix |
| Chainguard | rke2-runtime-fips-kubelet-1.33 | no fix |
| Chainguard | rpk-26.1.9 | no fix |
| Chainguard | secrets-store-csi-driver-provider-azure | 1.8.2-r9 |
| Chainguard | smarter-device-manager | 1.20.11-r42 |
| Chainguard | spicedb-operator | 1.27.0-r0 |
| Chainguard | tekton-pipelines-controller-1.10 | 1.10.3-r12 |
| Chainguard | tekton-pipelines-resolvers-1.11 | no fix |
| Chainguard | tekton-pipelines-webhook-1.10 | no fix |
| Chainguard | tekton-pipelines-webhook-1.11 | 1.11.1-r20 |
| Chainguard | telegraf-1.36 | no fix |
| Chainguard | telegraf-1.37 | no fix |
| Chainguard | tempo-3.0 | no fix |
| Chainguard | tempo-3.0-vulture | 3.0.3-r6 |
| Chainguard | terraform-1.10 | no fix |
| Chainguard | terraform-1.11 | no fix |
| Chainguard | terraform-1.12 | no fix |
| Chainguard | terraform-1.9 | no fix |
| Chainguard | terraform-fips-1.13 | no fix |
| Chainguard | traefik-fips-3.6 | no fix |
| Chainguard | trillian-logsigner | no fix |
| Chainguard | upwind-agent | no fix |
| Chainguard | vault-fips-1.21 | no fix |
| Chainguard | vc-scheduler-fips | 1.15.2-r4 |
| Chainguard | vcluster | 0.37.1-r0 |
| Chainguard | velero-plugin-for-alicloud | 0 |
| Chainguard | velero-plugin-for-alicloud-compat | 0 |
| Chainguard | velero-plugin-for-alicloud-fips | 0 |
| Chainguard | velero-plugin-for-alicloud-fips-compat | 0 |
| Chainguard | vitess-22 | no fix |
| Chainguard | vitess-22-binaries | no fix |
| Debian 12 | golang-google-grpc | no fix |
| Debian 13 | golang-google-grpc | no fix |
| Debian 14 | golang-google-grpc | no fix |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise Micro 5.5 | google-guest-agent | 20260903.01-150000.1.85.1 |
| SUSE Linux Enterprise Micro 5.5 | google-osconfig-agent | 20260911.00-150000.1.67.1 |
| SUSE Linux Enterprise Micro 5.5 | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise Module for Containers 15 SP7 | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise Module for HPC 15 SP7 | apptainer | 1.5.3-150600.4.43.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | apptainer | 1.5.3-150600.4.43.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | google-cloud-sap-agent | 3.15-6.81.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | google-guest-agent | 20260903.01-1.75.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | google-osconfig-agent | 20260911.00-1.60.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | azure-storage-azcopy | 10.32.8-150400.9.21.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | google-cloud-sap-agent | 3.15-150100.3.87.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | google-guest-agent | 20260903.01-150000.1.85.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | google-osconfig-agent | 20260911.00-150000.1.67.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-aws | 3.11.0-150200.6.29.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-azurerm | 2.32.0-150200.6.23.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-external | 2.0.0-150200.6.23.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-google | 3.43.0-150200.6.23.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-helm | 2.9.0-150200.6.34.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-kubernetes | 1.13.2-150200.6.23.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-local | 2.0.0-150200.6.30.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-null | 3.0.0-150200.6.27.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-null | 3.0.0-150200.6.32.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-random | 3.0.0-150200.6.26.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-susepubliccloud | 0.0.1-150100.3.23.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-susepubliccloud | 0.0.1-150100.3.26.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP4 | terraform-provider-tls | 3.0.0-150200.5.26.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | azure-storage-azcopy | 10.32.8-150400.9.21.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | google-cloud-sap-agent | 3.15-150100.3.87.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | google-guest-agent | 20260903.01-150000.1.85.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | google-osconfig-agent | 20260911.00-150000.1.67.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-aws | 3.11.0-150200.6.29.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-azurerm | 2.32.0-150200.6.23.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-external | 2.0.0-150200.6.23.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-google | 3.43.0-150200.6.23.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-helm | 2.9.0-150200.6.34.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-kubernetes | 1.13.2-150200.6.23.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-local | 2.0.0-150200.6.30.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-null | 3.0.0-150200.6.27.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-null | 3.0.0-150200.6.32.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-random | 3.0.0-150200.6.26.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-susepubliccloud | 0.0.1-150100.3.26.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-susepubliccloud | 0.0.1-150100.3.23.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP5 | terraform-provider-tls | 3.0.0-150200.5.26.2 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP6 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP6 | azure-storage-azcopy | 10.32.8-150400.9.21.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP6 | google-cloud-sap-agent | 3.15-150100.3.87.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP6 | google-guest-agent | 20260903.01-150000.1.85.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP6 | google-osconfig-agent | 20260911.00-150000.1.67.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | amazon-cloudwatch-agent | 1.300072.0-150400.9.13.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | azure-storage-azcopy | 10.32.8-150400.9.21.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | google-cloud-sap-agent | 3.15-150100.3.87.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | google-guest-agent | 20260903.01-150000.1.85.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | google-osconfig-agent | 20260911.00-150000.1.67.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | apptainer | 1.5.3-150600.4.43.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise Server 16.0 | amazon-ecs-init | 1.107.0-160000.1.1 |
| SUSE Linux Enterprise Server 16.0 | distribution | 3.1.1-160000.3.1 |
| SUSE Linux Enterprise Server 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 |
| SUSE Linux Enterprise Server 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 |
| SUSE Linux Enterprise Server 16.0 | helm | 3.21.3-160000.2.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | helm | 3.21.3-150000.1.96.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | amazon-ecs-init | 1.107.0-160000.1.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | distribution | 3.1.1-160000.3.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | helm | 3.21.3-160000.2.1 |
| SUSE Linux Micro 6.0 | google-guest-agent | 20260903.01-1.1 |
| SUSE Linux Micro 6.0 | google-osconfig-agent | 20260908.00-1.1 |
| SUSE Linux Micro 6.0 | helm | 3.21.3-3.1 |
| SUSE Linux Micro 6.1 | google-guest-agent | 20260903.01-slfo.1.1_1.1 |
| SUSE Linux Micro 6.1 | google-osconfig-agent | 20260908.00-slfo.1.1_1.1 |
| SUSE Linux Micro 6.1 | helm | 3.21.3-slfo.1.1_3.1 |
| SUSE Linux Micro 6.2 | helm | 3.21.3-160000.2.1 |
| Ubuntu 16.04 LTS | golang-google-grpc | no fix |
| Ubuntu 16.04 LTS | grpc | no fix |
| Ubuntu 18.04 LTS | golang-google-grpc | no fix |
| Ubuntu 18.04 LTS | grpc | no fix |
| Ubuntu 20.04 LTS | golang-google-grpc | no fix |
| Ubuntu 20.04 LTS | grpc | no fix |
| Ubuntu 22.04 LTS | golang-google-grpc | no fix |
| Ubuntu 22.04 LTS | google-guest-agent | no fix |
| Ubuntu 22.04 LTS | grpc | no fix |
| Ubuntu 24.04 LTS | google-guest-agent | no fix |
| Ubuntu 24.04 LTS | grpc | no fix |
| Ubuntu 26.04 LTS | golang-google-grpc | no fix |
| Ubuntu 26.04 LTS | google-guest-agent | no fix |
| Ubuntu 26.04 LTS | grpc | no fix |
| Ubuntu 26.10 | golang-google-grpc | no fix |
| Ubuntu 26.10 | google-guest-agent | no fix |
| Ubuntu 26.10 | grpc | no fix |
| Ubuntu Pro 16.04 LTS | google-guest-agent | no fix |
| Ubuntu Pro 18.04 LTS | google-guest-agent | no fix |
| Ubuntu Pro 20.04 LTS | google-guest-agent | no fix |
| Ubuntu Pro 24.04 LTS | golang-google-grpc | no fix |
| Wolfi | amazon-cloudwatch-agent | 1.300073.0-r1 |
| Wolfi | argo-cd-3.3-compat | no fix |
| Wolfi | argo-workflow-executor-3.7 | no fix |
| Wolfi | argo-workflows-3.7 | no fix |
| Wolfi | aws-otel-collector | 0.50.0-r3 |
| Wolfi | bank-vaults-template | 1.33.2-r3 |
| Wolfi | blob-csi-1.27 | 1.27.10-r0 |
| Wolfi | calico-felix-3.32 | 3.32.2-r3 |
| Wolfi | calico-goldmane-3.31 | 3.31.7-r3 |
| Wolfi | calico-goldmane-3.31 | no fix |
| Wolfi | calico-goldmane-3.32 | 3.32.2-r3 |
| Wolfi | calico-typhad-3.32 | 3.32.2-r3 |
| Wolfi | cerbos | no fix |
| Wolfi | cilium-1.19-operator-generic | no fix |
| Wolfi | cloud-provider-vsphere | 1.37.0-r3 |
| Wolfi | cloudflared | no fix |
| Wolfi | dapr-daprd-1.16 | 1.16.19-r9 |
| Wolfi | dapr-daprd-1.17 | 1.17.13-r7 |
| Wolfi | dapr-injector-1.16 | 1.16.19-r9 |
| Wolfi | dapr-injector-1.17 | 1.17.13-r7 |
| Wolfi | dapr-operator-1.16 | 1.16.19-r9 |
| Wolfi | dapr-operator-1.16 | no fix |
| Wolfi | dapr-operator-1.17 | 1.17.13-r7 |
| Wolfi | dapr-placement-1.16 | 1.16.19-r9 |
| Wolfi | dapr-placement-1.17 | 1.17.13-r7 |
| Wolfi | dapr-scheduler-1.16 | no fix |
| Wolfi | dapr-scheduler-1.16 | 1.16.19-r9 |
| Wolfi | dapr-scheduler-1.17 | 1.17.13-r7 |
| Wolfi | dapr-sentry-1.17 | 1.17.13-r7 |
| Wolfi | datadog-agent-7.76 | no fix |
| Wolfi | datadog-agent-7.76 | 7.76.3-r41 |
| Wolfi | datadog-agent-7.77 | 7.77.3-r25 |
| Wolfi | datadog-agent-7.77-full | 7.77.3-r25 |
| Wolfi | datadog-agent-7.78 | 7.78.4-r20 |
| Wolfi | datadog-agent-7.78-full | 7.78.4-r20 |
| Wolfi | datadog-agent-7.79 | 7.79.2-r18 |
| Wolfi | datadog-agent-7.79-full | 7.79.2-r18 |
| Wolfi | datadog-agent-7.80 | 7.80.4-r16 |
| Wolfi | datadog-agent-7.80-core-integrations | no fix |
| Wolfi | datadog-agent-7.80-fakeintake | 7.80.4-r16 |
| Wolfi | datadog-agent-7.80-full | 7.80.4-r16 |
| Wolfi | datadog-agent-7.80-oci-compat | 7.80.4-r16 |
| Wolfi | datadog-agent-7.80-s6-overlay | 7.80.4-r16 |
| Wolfi | datadog-agent-7.81 | 7.81.3-r5 |
| Wolfi | datadog-agent-7.81-fakeintake | 7.81.3-r5 |
| Wolfi | datadog-agent-7.81-full | 7.81.3-r5 |
| Wolfi | datadog-cluster-agent-7.76 | 7.76.3-r41 |
| Wolfi | datadog-cluster-agent-7.77 | 7.77.3-r25 |
| Wolfi | datadog-cluster-agent-7.78 | 7.78.4-r20 |
| Wolfi | datadog-cluster-agent-7.79 | 7.79.2-r18 |
| Wolfi | datadog-cluster-agent-7.80 | 7.80.4-r16 |
| Wolfi | datadog-cluster-agent-7.81 | 7.81.3-r5 |
| Wolfi | dockerd-28 | 28.5.2-r39 |
| Wolfi | dogstatsd-7.76 | 7.76.3-r41 |
| Wolfi | dogstatsd-7.77 | 7.77.3-r25 |
| Wolfi | dogstatsd-7.78 | 7.78.4-r20 |
| Wolfi | dogstatsd-7.79 | 7.79.2-r18 |
| Wolfi | dogstatsd-7.80 | 7.80.4-r16 |
| Wolfi | dogstatsd-7.81 | 7.81.3-r5 |
| Wolfi | external-secrets-operator-2.2 | 2.2.0-r26 |
| Wolfi | falco-exporter | no fix |
| Wolfi | flyte | 1.16.9-r0 |
| Wolfi | gcp-compute-persistent-disk-csi-driver-1.23 | 1.23.4-r2 |
| Wolfi | gcp-compute-persistent-disk-csi-driver-1.25 | 1.25.2-r17 |
| Wolfi | gcp-compute-persistent-disk-csi-driver-1.25-compat | no fix |
| Wolfi | gitlab-pages-19.1 | no fix |
| Wolfi | gitlab-runner-helper-19.1 | 19.1.5-r0 |
| Wolfi | grafana-12.3 | no fix |
| Wolfi | grafana-mimir-3.0 | 3.0.9-r4 |
| Wolfi | grafana-mimir-3.1-query-tee-3.1 | 3.1.6-r0 |
| Wolfi | grpc-1.66 | no fix |
| Wolfi | grpc-1.67 | no fix |
| Wolfi | grpc-1.68 | no fix |
| Wolfi | grpc-1.69 | no fix |
| Wolfi | grpc-1.70 | no fix |
| Wolfi | grpc-1.71 | no fix |
| Wolfi | grpc-1.72 | no fix |
| Wolfi | grpc-1.73 | no fix |
| Wolfi | grpc-1.74 | no fix |
| Wolfi | grpc-1.75 | no fix |
| Wolfi | grpc-1.76 | no fix |
| Wolfi | grpc-1.78 | no fix |
| Wolfi | grpc-1.80 | no fix |
| Wolfi | grpc-1.81 | no fix |
| Wolfi | helm-3 | 3.22.0-r0 |
| Wolfi | hydra | 26.2.0-r26 |
| Wolfi | ipfs-cluster | 1.1.6-r18 |
| Wolfi | istioctl-1.29 | 1.29.7-r3 |
| Wolfi | k3s-1.32 | no fix |
| Wolfi | k3s-1.33 | no fix |
| Wolfi | k3s-multicall-1.33 | no fix |
| Wolfi | k3s-static-1.32 | no fix |
| Wolfi | k3s-static-1.33 | no fix |
| Wolfi | k8sgpt | 0.4.38-r3 |
| Wolfi | k8ssandra-client | 0.9.1-r2 |
| Wolfi | knative-eventing-1.21-jobsink | no fix |
| Wolfi | knative-eventing-1.21-webhook | no fix |
| Wolfi | knative-eventing-1.22-jobsink | 1.22.2-r8 |
| Wolfi | knative-serving-1.21-activator | 1.21.3-r7 |
| Wolfi | kserve-localmodel | 0.20.0-r7 |
| Wolfi | kubeflow-pipelines-apiserver | 2.17.2-r4 |
| Wolfi | kubeflow-profile-controller | 1.10.0-r36 |
| Wolfi | kubernetes-csi-external-provisioner | 6.3.0-r11 |
| Wolfi | kubernetes-csi-external-resizer | 2.2.1-r12 |
| Wolfi | kubescape-operator | 0.2.172-r2 |
| Wolfi | kuma-dp-2.13 | 2.13.11-r0 |
| Wolfi | kyverno-1.17 | no fix |
| Wolfi | kyverno-1.17 | 1.17.2-r35 |
| Wolfi | kyverno-cli-1.17 | 1.17.2-r35 |
| Wolfi | kyverno-init-container-1.18 | 1.18.2-r15 |
| Wolfi | litestream | no fix |
| Wolfi | lvm-driver | 1.10.1-r1 |
| Wolfi | mcp-grafana | 1.6.2-r0 |
| Wolfi | mps-control-daemon | 0.20.0-r4 |
| Wolfi | opentofu-1.11 | no fix |
| Wolfi | opentofu-1.12 | 1.12.6-r6 |
| Wolfi | podman-6.0 | no fix |
| Wolfi | rancher-agent-2.13 | 2.13.9-r4 |
| Wolfi | rpk-26.1.9 | no fix |
| Wolfi | secrets-store-csi-driver-provider-azure | 1.8.2-r9 |
| Wolfi | smarter-device-manager | 1.20.11-r42 |
| Wolfi | spicedb-operator | 1.27.0-r0 |
| Wolfi | tekton-pipelines-controller-1.10 | 1.10.3-r12 |
| Wolfi | tekton-pipelines-resolvers-1.11 | no fix |
| Wolfi | tekton-pipelines-webhook-1.10 | no fix |
| Wolfi | tekton-pipelines-webhook-1.11 | 1.11.1-r20 |
| Wolfi | telegraf-1.36 | no fix |
| Wolfi | tempo-3.0 | no fix |
| Wolfi | tempo-3.0-vulture | 3.0.3-r6 |
| Wolfi | trillian-logsigner | no fix |
| Wolfi | vcluster | 0.37.1-r0 |
| openSUSE Leap 16.0 | amazon-ecs-init | 1.107.0-160000.1.1 |
| openSUSE Leap 16.0 | apptainer | 1.5.3-bp160.4.1 |
| openSUSE Leap 16.0 | cadvisor | 0.60.5-bp160.2.1 |
| openSUSE Leap 16.0 | containerized-data-importer1.65 | 1.65.0-160000.3.1 |
| openSUSE Leap 16.0 | distribution | 3.1.1-160000.3.1 |
| openSUSE Leap 16.0 | gh | 2.102.0-bp160.1.1 |
| openSUSE Leap 16.0 | google-cloud-sap-agent | 3.15-160000.4.1 |
| openSUSE Leap 16.0 | google-guest-agent | 20260903.01-160000.1.1 |
| openSUSE Leap 16.0 | google-osconfig-agent | 20260911.00-160000.1.1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260916T180043-160000.1.1 |
| openSUSE Leap 16.0 | hauler | 2.1.0-bp160.3.1 |
| openSUSE Leap 16.0 | helm | 3.21.3-160000.2.1 |
| openSUSE Leap 16.0 | mcphost | 0.34.0-160000.5.1 |
| openSUSE Leap 16.0 | trivy | 0.74.0-160000.2.1 |
| openSUSE Leap 16.0 | v2ray-core | 5.54.2-bp160.1.1 |
| openSUSE Tumbleweed | alloy | 1.20.1-1.1 |
| openSUSE Tumbleweed | apptainer | 1.5.3-4.1 |
| openSUSE Tumbleweed | cadvisor | 0.60.5-3.1 |
| openSUSE Tumbleweed | containerized-data-importer1.65 | 1.65.0-3.1 |
| openSUSE Tumbleweed | containerized-data-importer1.66 | 1.66.1-1.1 |
| openSUSE Tumbleweed | distribution | 3.1.1-6.1 |
| openSUSE Tumbleweed | google-osconfig-agent | 20260908.00-1.1 |
| openSUSE Tumbleweed | grafana | 12.4.11-1.1 |
| openSUSE Tumbleweed | hauler | 2.1.0-3.1 |
| openSUSE Tumbleweed | helm | 4.2.4-3.1 |
| openSUSE Tumbleweed | helm3 | 3.21.3-8.1 |
| openSUSE Tumbleweed | kubevirt1.8 | 1.8.4-7.1 |
| openSUSE Tumbleweed | kubevirt1.9 | 1.9.0-3.1 |
| openSUSE Tumbleweed | mcphost | 0.34.0-11.1 |
| openSUSE Tumbleweed | trivy | 0.74.0-4.1 |
| openSUSE Tumbleweed | v2ray-core | 5.54.2-1.1 |