CVE-2021-31525

Medium

Advisory

Published 24 May 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.037; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 644; of 17,781 indexed, latest versions
Container images: 666; deployed by those charts
Fix available: 2 of 2; affected packages

golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion

Carried by container images the latest versions of 644 of 17,781 indexed charts deploy, on 666 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+77 more	0.0.0-20210428140749-89ef3d95e781	536
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+41 more	1.15.12	519

OSV records: GHSA-h86h-8ppg-mxmh GO-2022-0236
Also known as: BIT-golang-2021-31525

Charts affected

644 by stars

Chart

Latest

Affected images

Radar Score

archerydouban

0.4.3

1 of 6 See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

5,853

karmadouban

1.9.2

1 of 1 See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.85	d06892218680	stdlib@go1.16.3	1.15.12

Open the chart page →

2,017

enbuildenbuild

0.0.50

1 of 6 See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	stdlib@go1.15.8	1.15.12

Open the chart page →

31,510

nexus-operatorepmdedp-dev

2.11.0-MDTU-DDM-SNAPSHOT.1

1 of 1 See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,266

httpbingoestahn

0.1.1

1 of 1 See more

httpbingo estahn 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
mccutchen/go-httpbin :v2.2.2	5994403ef75b	stdlib@go1.16.2	1.15.12

Open the chart page →

1,359

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	stdlib@go1.16.3	1.15.12

Open the chart page →

11,458

vidcheckfactly

0.5.2

1 of 2 See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
factly/vidcheck-server :0.12.0	87064eb0463c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.14.2	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,617

openldapfluktuid

0.1.1

1 of 2 See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,313

dexgabibbo97

4.0.4

1 of 1 See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.16.2	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,391

alertmanager-botgeek-cookbook

6.4.2

1 of 1 See more

alertmanager-bot geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
metalmatze/alertmanager-bot :0.4.3	426bc2ca7586	golang.org/x/net@v0.0.0-20181213202711-891ebc4b82d6 stdlib@go1.13.15	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,586

filebrowsergeek-cookbook

1.4.2

1 of 1 See more

filebrowser geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.18.0	4fcd47af573c	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

3,474

focalboardgeek-cookbook

4.4.2

1 of 1 See more

focalboard geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
mattermost/focalboard :0.9.0	31078df7a3c8	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

3,631

owncastgeek-cookbook

3.4.2

1 of 1 See more

owncast geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
gabekangas/owncast :0.0.7	97461aedb580	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.15.2	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,167

protonmail-bridgegeek-cookbook

5.4.2

1 of 1 See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

8,029

sabnzbdgeek-cookbook

9.4.2

1 of 1 See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sabnzbd :v3.3.1	c2d6e775db5a	stdlib@go1.15	1.15.12

Open the chart page →

10,231

stashgeek-cookbook

3.4.2

1 of 1 See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
stashapp/stash :latest	24dbd7607174	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.13.15	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

15,856

wireguardgeek-cookbook

1.4.2

1 of 1 See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/wireguard :v1.0.20210424	448045c4270b	stdlib@go1.15	1.15.12

Open the chart page →

7,660

helm-operatorhelm-operator

0.0.2

1 of 1 See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

6,977

cratedb-adapter-v2hmdmph

0.2.1

1 of 1 See more

cratedb-adapter-v2 hmdmph 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6 stdlib@go1.16.3	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

2,913

cniistio

1.10.3

1 of 1 See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
istio/install-cni :1.10.3	2232f365aed6	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,400

discoveryistio

1.10.3

1 of 1 See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.3	e7e110a421c2	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,475

egressistio

1.10.3

1 of 1 See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.3	a78b7a165744	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,421

ingressistio

1.10.3

1 of 1 See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.3	a78b7a165744	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,421

operatoristio

1.10.3

1 of 1 See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
istio/operator :1.10.3	655eefa11c84	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,701

istio-ratelimitistio-ratelimit

0.0.5

1 of 2 See more

istio-ratelimit istio-ratelimit 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :4d2efd61	ede09a75a84c	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.15	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

1,812

giteakeyporttech

0.2.10

1 of 4 See more

gitea keyporttech 0.2.10

1 of the 4 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
gitea/gitea :1.12.4	85416d6f65fe	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.8	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

5,408

mesherykubesphere-stable

0.5.0

2 of 13 See more

meshery kubesphere-stable 0.5.0

2 of the 13 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
layer5/meshery-cpx :stable-latest	8c20a8a1d6a4	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297 stdlib@go1.13.1	0.0.0-20210428140749-89ef3d95e781 1.15.12
layer5/meshery-nsm :stable-latest	ebd6a8faf21f	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

24,690

aws-efs-csi-driverkubesphere-test

0.1.0

1 of 3 See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

2,603

kubemodkubmod

0.5.2

1 of 2 See more

kubemod kubmod 0.5.2

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.19.1	1f8154f7e80c	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

4,542

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210428140749-89ef3d95e781
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.0.0-20210428140749-89ef3d95e781
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.0.0-20210428140749-89ef3d95e781
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

15,547

landelijketabellencataloguslandelijketabellencatalogus

1.0.0

1 of 3 See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

7,510

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.13.8	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

4,418

logclilogcli

0.1.0

1 of 1 See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	stdlib@go1.16.2	1.15.12

Open the chart page →

2,947

voice-biometricslumenvox

2.0.1

5 of 26 See more

voice-biometrics lumenvox 2.0.1

5 of the 26 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.15.12
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.15.12
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.0.0-20210428140749-89ef3d95e781 1.15.12
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.0.0-20210428140749-89ef3d95e781 1.15.12
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

70,741

mattermost-enterprise-editionmattermost

2.6.103

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.10	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,600

traefik-forward-authmesosphere

0.3.10

2 of 2 See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.11	0.0.0-20210428140749-89ef3d95e781 1.15.12
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.15	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

5,308

subspacemglants

0.1.0

1 of 1 See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14.6	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,254

miniomilvus

8.0.17

1 of 1 See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

6,915

podsyncmy0n

1.5.4

1 of 2 See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
tdeutsch/podsync :v2.4.2	b67186f4c9a5	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,059

open5gs-webuiopen5gs-webui

2.3.1

1 of 2 See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.15.12

Open the chart page →

5,300

kubernetes-dashboard-proxyosc

0.7.2

1 of 4 See more

kubernetes-dashboard-proxy osc 0.7.2

1 of the 4 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.1.3	ecd26b74a01f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

6,005

hlf-caowkin

2.1.0

1 of 2 See more

hlf-ca owkin 2.1.0

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,424

hlf-ordowkin

3.1.0

1 of 1 See more

hlf-ord owkin 3.1.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,350

hlf-peerowkin

5.1.0

1 of 1 See more

hlf-peer owkin 5.1.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

3,688

prometheus-cachethqoxyno-zeta

1.1.1

1 of 1 See more

prometheus-cachethq oxyno-zeta 1.1.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
oxynozeta/prometheus-cachethq :1.1.1	31f11669d597	stdlib@go1.15.1	1.15.12

Open the chart page →

1,713

ngrok-operatorpaganuzzi

0.0.2

1 of 1 See more

ngrok-operator paganuzzi 0.0.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,811

patch-operatorpatch-operator

0.1.11

1 of 2 See more

patch-operator patch-operator 0.1.11

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

7,807

pipelinewise-operatorpipelinewise-operator

0.5.1

1 of 1 See more

pipelinewise-operator pipelinewise-operator 0.5.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
dirathea/pipelinewise-operator :v0.5.0	8d4c9f773ae1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.15.8	0.0.0-20210428140749-89ef3d95e781 1.15.12

Open the chart page →

2,121

secrets-store-csi-driver-provider-awsportefaix-hub

0.4.0

1 of 1 See more

secrets-store-csi-driver-provider-aws portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-2021.08.13.20.34-linux-amd64	02aed3370fce	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,206

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2021-31525.

Container image	Digest	Package	Fixed in
codercom/code-server :4.11.0-debian	1e2cc688008e	stdlib@go1.14.4	1.15.12

Open the chart page →

31,844

Container images carrying it

666 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
kubeflownotebookswg/kfam :v1.6.1	f226fb44db57	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.0.0-20210428140749-89ef3d95e781	1
kubemod/kubemod :v0.19.1	1f8154f7e80c	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.0.0-20210428140749-89ef3d95e781	1
kubemod/kubemod :v0.13.0	cadca39288ad	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
kubesphere/fluentbit-operator :v0.9.0	b87db3c57cb3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
kubesphere/openelb :v0.5.0	b5b665c4672c	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.0.0-20210428140749-89ef3d95e781	1
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.0.0-20210428140749-89ef3d95e781	1
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.0.0-20210428140749-89ef3d95e781	1
kudobuilder/controller :v0.9.0	69072d979708	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
kvalitetsit/metadoc-web :main	f57e7553f5bd	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
kvalitetsit/nsp-prometheus-exporter :1.0.19	0b397ff954ec	stdlib@go1.15.3	1.15.12	1
kvalitetsit/stakit-frontend :0.2.5	fd5c4f60ef80	golang.org/x/net@v0.0.0-20180906233101-161cd47e91fd	0.0.0-20210428140749-89ef3d95e781	1
layer5/meshery-cpx :stable-latest	8c20a8a1d6a4	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297 stdlib@go1.13.1	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
layer5/meshery-nsm :stable-latest	ebd6a8faf21f	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.0.0-20210428140749-89ef3d95e781	1
library/caddy :2.2.0-alpine	7367adca165f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
library/influxdb :2.0.8	ba10ac9ba17a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210428140749-89ef3d95e781	1
library/kapacitor :1.6.3	7232f6388a4d	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.0.0-20210428140749-89ef3d95e781	1
library/mongo :4.4-bionic	3d0e6df9fd5b	stdlib@go1.16.3	1.15.12	1
library/telegraf :1.19.0-alpine	794079a7f241	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210428140749-89ef3d95e781	1
library/telegraf :1.19-alpine	addb86c0c520	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.0.0-20210428140749-89ef3d95e781	1
library/traefik :2.4.8	eda951fd29a8	golang.org/x/net@v0.0.0-20210220033124-5f55cee0dc0d stdlib@go1.16.2	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
library/traefik :2.2.8	f5af5a5ce17f	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.14.6	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
linuxserver/cloud9 :latest	45c5fe102ff3	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.0.0-20210428140749-89ef3d95e781	1
linuxserver/smokeping :2.8.2	b7f906899cd3	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.0.0-20210428140749-89ef3d95e781	1
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	stdlib@go1.16.2	1.15.12	1
lmierzwa/karma :v0.50	3751e5eed656	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
lmierzwa/karma :v0.70	d417abe7ddb5	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.11	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
logiqai/flash-discovery :v2.0.3	f5b551bca98e	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20210428140749-89ef3d95e781	1
logiqai/logiqctl :2.0.4	798306811f2d	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.7	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.1	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.14.1	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
macropower/wakatime-exporter :0.1.0	dbb05debb785	stdlib@go1.14.6	1.15.12	1
maldridge/alertmanager-irc-relay :v0.4.1	391de2b76128	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210428140749-89ef3d95e781	1
matrixdb/sig-storage_csi-node-driver-registrar :v2.2.0	ba763bb01ddc	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
matrixdb/sig-storage_livenessprobe :v2.3.0	7ab06fe3d8a7	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
mattermost/focalboard :0.9.0	31078df7a3c8	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.0.0-20210428140749-89ef3d95e781	1
mattermost/focalboard :0.6.7	f2f987dada52	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210428140749-89ef3d95e781	1
mattermost/mattermost-app-chaosengine :c153e43	6268954edd67	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.0.0-20210428140749-89ef3d95e781	1
mccutchen/go-httpbin :v2.2.2	5994403ef75b	stdlib@go1.16.2	1.15.12	1
mesosphere/karma :v0.55-d2iq-proxy	4693bb4e0814	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.7	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.14.5	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.14.5	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.14.5	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.14.5	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.14.5	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.14.5	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.11	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.13.7	0.0.0-20210428140749-89ef3d95e781 1.15.12	1
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.13.8	0.0.0-20210428140749-89ef3d95e781 1.15.12	1