CVE-2021-31525

Medium

Advisory

Published 24 May 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.037; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 644; of 17,781 indexed, latest versions
Container images: 666; deployed by those charts
Fix available: 2 of 2; affected packages

golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion

Carried by container images the latest versions of 644 of 17,781 indexed charts deploy, on 666 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+77 more	0.0.0-20210428140749-89ef3d95e781	536
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+41 more	1.15.12	519

OSV records: GHSA-h86h-8ppg-mxmh GO-2022-0236
Also known as: BIT-golang-2021-31525

Charts affected

644 by stars

Chart

Latest

Affected images

Radar Score

archerydouban

0.4.3

1 of 6 See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

5,853

karmadouban

1.9.2

1 of 1 See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.85	d06892218680	stdlib@go1.16.3	1.15.12

Open the chart page →

2,017

enbuildenbuild

0.0.50

1 of 6 See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	stdlib@go1.15.8	1.15.12

Open the chart page →

31,510

nexus-operatorepmdedp-dev

2.11.0-MDTU-DDM-SNAPSHOT.1

1 of 1 See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,266

httpbingoestahn

0.1.1

1 of 1 See more

httpbingo estahn 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
mccutchen/go-httpbin :v2.2.2	5994403ef75b	stdlib@go1.16.2	1.15.12

Open the chart page →

1,359

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	stdlib@go1.16.3	1.15.12

Open the chart page →

11,458

vidcheckfactly

0.5.2

1 of 2 See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
factly/vidcheck-server :0.12.0	87064eb0463c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.14.2	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,617

openldapfluktuid

0.1.1

1 of 2 See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,313

dexgabibbo97

4.0.4

1 of 1 See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.16.2	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,391

alertmanager-botgeek-cookbook

6.4.2

1 of 1 See more

alertmanager-bot geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
metalmatze/alertmanager-bot :0.4.3	426bc2ca7586	golang.org/x/net@v0.0.0-20181213202711-891ebc4b82d6 stdlib@go1.13.15	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,586

filebrowsergeek-cookbook

1.4.2

1 of 1 See more

filebrowser geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.18.0	4fcd47af573c	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

3,474

focalboardgeek-cookbook

4.4.2

1 of 1 See more

focalboard geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
mattermost/focalboard :0.9.0	31078df7a3c8	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

3,631

owncastgeek-cookbook

3.4.2

1 of 1 See more

owncast geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
gabekangas/owncast :0.0.7	97461aedb580	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.15.2	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,167

protonmail-bridgegeek-cookbook

5.4.2

1 of 1 See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

8,029

sabnzbdgeek-cookbook

9.4.2

1 of 1 See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sabnzbd :v3.3.1	c2d6e775db5a	stdlib@go1.15	1.15.12

Open the chart page →

10,231

stashgeek-cookbook

3.4.2

1 of 1 See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
stashapp/stash :latest	24dbd7607174	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.13.15	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

15,856

wireguardgeek-cookbook

1.4.2

1 of 1 See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/wireguard :v1.0.20210424	448045c4270b	stdlib@go1.15	1.15.12

Open the chart page →

7,660

helm-operatorhelm-operator

0.0.2

1 of 1 See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

6,977

cratedb-adapter-v2hmdmph

0.2.1

1 of 1 See more

cratedb-adapter-v2 hmdmph 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6 stdlib@go1.16.3	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

2,913

cniistio

1.10.3

1 of 1 See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
istio/install-cni :1.10.3	2232f365aed6	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,400

discoveryistio

1.10.3

1 of 1 See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.3	e7e110a421c2	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,475

egressistio

1.10.3

1 of 1 See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.3	a78b7a165744	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,421

ingressistio

1.10.3

1 of 1 See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.3	a78b7a165744	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,421

operatoristio

1.10.3

1 of 1 See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
istio/operator :1.10.3	655eefa11c84	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,701

istio-ratelimitistio-ratelimit

0.0.5

1 of 2 See more

istio-ratelimit istio-ratelimit 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :4d2efd61	ede09a75a84c	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.15	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

1,812

giteakeyporttech

0.2.10

1 of 4 See more

gitea keyporttech 0.2.10

1 of the 4 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
gitea/gitea :1.12.4	85416d6f65fe	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.8	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

5,408

mesherykubesphere-stable

0.5.0

2 of 13 See more

meshery kubesphere-stable 0.5.0

2 of the 13 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
layer5/meshery-cpx :stable-latest	8c20a8a1d6a4	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297 stdlib@go1.13.1	0.0.0-20210428140749-89ef3d95e781 1.15.12
layer5/meshery-nsm :stable-latest	ebd6a8faf21f	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

24,690

aws-efs-csi-driverkubesphere-test

0.1.0

1 of 3 See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

2,603

kubemodkubmod

0.5.2

1 of 2 See more

kubemod kubmod 0.5.2

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.19.1	1f8154f7e80c	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

4,542

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210428140749-89ef3d95e781
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.0.0-20210428140749-89ef3d95e781
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.0.0-20210428140749-89ef3d95e781
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

15,547

landelijketabellencataloguslandelijketabellencatalogus

1.0.0

1 of 3 See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

7,510

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.13.8	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

4,418

logclilogcli

0.1.0

1 of 1 See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	stdlib@go1.16.2	1.15.12

Open the chart page →

2,947

voice-biometricslumenvox

2.0.1

5 of 26 See more

voice-biometrics lumenvox 2.0.1

5 of the 26 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.15.12
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.15.12
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.0.0-20210428140749-89ef3d95e781 1.15.12
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.0.0-20210428140749-89ef3d95e781 1.15.12
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

70,741

mattermost-enterprise-editionmattermost

2.6.103

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.10	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,600

traefik-forward-authmesosphere

0.3.10

2 of 2 See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.11	0.0.0-20210428140749-89ef3d95e781 1.15.12
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.15	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

5,308

subspacemglants

0.1.0

1 of 1 See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14.6	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,254

miniomilvus

8.0.17

1 of 1 See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

6,915

podsyncmy0n

1.5.4

1 of 2 See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
tdeutsch/podsync :v2.4.2	b67186f4c9a5	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,059

open5gs-webuiopen5gs-webui

2.3.1

1 of 2 See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.15.12

Open the chart page →

5,300

kubernetes-dashboard-proxyosc

0.7.2

1 of 4 See more

kubernetes-dashboard-proxy osc 0.7.2

1 of the 4 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.1.3	ecd26b74a01f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

6,005

hlf-caowkin

2.1.0

1 of 2 See more

hlf-ca owkin 2.1.0

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,424

hlf-ordowkin

3.1.0

1 of 1 See more

hlf-ord owkin 3.1.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,350

hlf-peerowkin

5.1.0

1 of 1 See more

hlf-peer owkin 5.1.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,688

prometheus-cachethqoxyno-zeta

1.1.1

1 of 1 See more

prometheus-cachethq oxyno-zeta 1.1.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
oxynozeta/prometheus-cachethq :1.1.1	31f11669d597	stdlib@go1.15.1	1.15.12

Open the chart page →

1,713

ngrok-operatorpaganuzzi

0.0.2

1 of 1 See more

ngrok-operator paganuzzi 0.0.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,811

patch-operatorpatch-operator

0.1.11

1 of 2 See more

patch-operator patch-operator 0.1.11

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

7,807

pipelinewise-operatorpipelinewise-operator

0.5.1

1 of 1 See more

pipelinewise-operator pipelinewise-operator 0.5.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
dirathea/pipelinewise-operator :v0.5.0	8d4c9f773ae1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.15.8	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

2,121

secrets-store-csi-driver-provider-awsportefaix-hub

0.4.0

1 of 1 See more

secrets-store-csi-driver-provider-aws portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-2021.08.13.20.34-linux-amd64	02aed3370fce	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,206

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
codercom/code-server :4.11.0-debian	1e2cc688008e	stdlib@go1.14.4	1.15.12

Open the chart page →

31,844

Container images carrying it

666 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.15	0.0.0-20210428140749-89ef3d95e781 1.15.12	2
ghcr.io/appscode/kube-rbac-proxy :v0.11.0	0df4ae70e3bd	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.0.0-20210428140749-89ef3d95e781	2
ghcr.io/cubed-it/inlets :4.0.0	f02325f099bc	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.13.15	0.0.0-20210428140749-89ef3d95e781 1.15.12	2
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.16.2	0.0.0-20210428140749-89ef3d95e781 1.15.12	2
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.10	0.0.0-20210428140749-89ef3d95e781 1.15.12	2
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.0.0-20210428140749-89ef3d95e781 1.15.12	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210428140749-89ef3d95e781	2
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.3	0.0.0-20210428140749-89ef3d95e781 1.15.12	2
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.12	0.0.0-20210428140749-89ef3d95e781 1.15.12	2
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.3	0.0.0-20210428140749-89ef3d95e781 1.15.12	2
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15	0.0.0-20210428140749-89ef3d95e781 1.15.12	2
absaoss/terraform-controller :v0.0.20	ad538a1285a0	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.14.8	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
adrianberger/fluxcd-webui :latest	76848c0d2780	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.2	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
alex6021710/ai-scale-provider :latest	5837d9b30cc7	stdlib@go1.15.8	1.15.12	1
almir/webhook :2.8.0	1698346f6077	stdlib@go1.14.7	1.15.12	1
almorgv/gitlab-code-review-notifier :0.1.2	5f2a7d2b44d8	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.14.15	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
alpine/k8s :1.22.6	00ac10bcb759	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.0.0-20210428140749-89ef3d95e781	1
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.2	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
altinity/clickhouse-operator :0.16.1	db7dde971407	stdlib@go1.13.15	1.15.12	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	stdlib@go1.13.15	1.15.12	1
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.0.0-20210428140749-89ef3d95e781	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.16.3	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
ansgroup/cert-manager-webhook-safedns :v1.0.1	cd6b0ef2b309	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	stdlib@go1.16.3	1.15.12	1
apache/apisix-dashboard :2.9.0	c010ea7d1694	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.14.15	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
apache/apisix-ingress-controller :1.3.0	412f92cde0b3	stdlib@go1.13.8	1.15.12	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20210428140749-89ef3d95e781	1
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20210428140749-89ef3d95e781	1
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.14.15	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210428140749-89ef3d95e781	1
assistiot/distributed_broker :1.0.0	33e02dad168f	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210428140749-89ef3d95e781	1
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210428140749-89ef3d95e781	1
assistiot/smart-orchestrator_helm :latest	9bb46ea14e8e	stdlib@go1.13	1.15.12	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.0.0-20210428140749-89ef3d95e781	1
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.15.12	1
bitnamilegacy/mongodb :3.6.21	3e51da56fc54	stdlib@go1.15.1	1.15.12	1
bitnamilegacy/mongodb :4.4.5	e3c9d6b4bc92	stdlib@go1.15.8	1.15.12	1
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.0.0-20210428140749-89ef3d95e781	1
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.0.0-20210428140749-89ef3d95e781	1
buildkite/agent :3.25.0	aec38cfaae0e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.7	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d	0.0.0-20210428140749-89ef3d95e781	1
cbeneke/hcloud-fip-controller :v0.4.1	dc658078d7ba	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.15.3	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.3	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.4	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
chandanteekinavar/findery-market-payment-service :1.0	c96f759b6ce4	stdlib@go1.13	1.15.12	1
chaosnative/cle-auth-server :2.7.0	72ee352bc333	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210428140749-89ef3d95e781	1