StackRadar

CVE-2021-31525

Medium

Advisory

Published 24 May 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.037
89th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
644
of 17,781 indexed, latest versions
Container images
666
deployed by those charts
Fix available
2 of 2
affected packages

golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion

Carried by container images the latest versions of 644 of 17,781 indexed charts deploy, on 666 images.

Affected packageAffected versionsFixed inImages
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+77 more0.0.0-20210428140749-89ef3d95e781536
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+41 more1.15.12519
OSV records
GHSA-h86h-8ppg-mxmhGO-2022-0236
Also known as
BIT-golang-2021-31525

Charts affected

644 by stars
ChartLatestAffected imagesRadar Score
nfs-subdir-external-provisionernfs-subdir-external-provisioner4.0.181 of 1See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.15
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

2,743
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
stdlib@go1.16.2
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

2,315
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
golang.org/x/net@v0.0.0-20201224014010-6772e930b67b
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,453
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
nacos/nacos-peer-finder-plugin:latesta9c769301fa6
stdlib@go1.13.5
1.15.12

Open the chart page →

4,983
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.15
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

4,086
oncallgrafana1.16.54 of 12See more

oncall grafana 1.16.5

4 of the 12 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.0.0-20210428140749-89ef3d95e781
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.0.0-20210428140749-89ef3d95e781
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.0.0-20210428140749-89ef3d95e781
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

16,251
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.12
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

11,384
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

33,725
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.15
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

4,918
hostpath-provisionerrimusz0.2.131 of 1See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
quay.io/rimusz/hostpath-provisioner:v0.2.587f0398ec7ff
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,039
openldaphelm-openldapVerified publisher2.0.41 of 3See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
osixia/openldap:1.4.0ccd95cc6e61e
golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3
stdlib@go1.13.4
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

6,219
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

6,854
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
golang.org/x/net@v0.0.0-20210119194325-5f4716e94777
stdlib@go1.15
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

5,173
kube-prometheuschoerodon9.3.14 of 7See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.3
0.0.0-20210428140749-89ef3d95e781
1.15.12
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e
stdlib@go1.13.11
0.0.0-20210428140749-89ef3d95e781
1.15.12
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/net@v0.0.0-20191003171128-d98b1b443823
stdlib@go1.13.4
0.0.0-20210428140749-89ef3d95e781
1.15.12
quay.io/prometheus/node-exporter:v1.0.08a3a33cad0bd
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
stdlib@go1.14.3
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

12,237
purelbpurelb0.0.0-106-ipv6-lbip-052cedab1 of 2See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

4,413
dex-k8s-authenticatorsagikazarmarkVerified publisher0.0.31 of 1See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/net@v0.0.0-20190522155817-f3200d17e092
stdlib@go1.13.11
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

2,791
code-serverdeploy-code-server1.0.31 of 2See more

code-server deploy-code-server 1.0.3

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
codercom/code-server:3.10.247605610ad8d
stdlib@go1.14.4
1.15.12

Open the chart page →

4,577
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb
stdlib@go1.15.7
0.0.0-20210428140749-89ef3d95e781
1.15.12
quay.io/devtron/kubectl:latest2ad610626658
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

32,902
temporallemontechVerified publisher0.37.02 of 13See more

temporal lemontech 0.37.0

2 of the 13 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
stdlib@go1.13.4
0.0.0-20210428140749-89ef3d95e781
1.15.12
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.15.12

Open the chart page →

14,893
netris-controllernetrisai2.8.23 of 14See more

netris-controller netrisai 2.8.2

3 of the 14 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
stdlib@go1.13.11
0.0.0-20210428140749-89ef3d95e781
1.15.12
netrisai/controller-web-session-generator:0.2.0a030a31289f4
stdlib@go1.14.15
1.15.12
netrisai/mongodb:4.4.4-debian-10-r095abfb776bb4
stdlib@go1.15.1
1.15.12

Open the chart page →

30,326
nfs-server-provisionernfs-ganesha-server-and-external-provisioner1.8.01 of 1See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
stdlib@go1.16.2
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

2,315
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
stdlib@go1.15.11
1.15.12
platform9community/api-gateway:latest40a4970de568
stdlib@go1.15.11
1.15.12
platform9community/customers-service:latest2089811e5cc6
stdlib@go1.15.11
1.15.12
platform9community/vets-service:latestd1165c94dfb3
stdlib@go1.15.11
1.15.12
platform9community/visits-service:latest8d11b50368c6
stdlib@go1.15.11
1.15.12

Open the chart page →

41,872
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271
stdlib@go1.13.6
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

4,154
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
stdlib@go1.14.4
1.15.12

Open the chart page →

3,543
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.16.2
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

2,409
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.14.12
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

6,168
cert-manager-webhook-hetznercert-manager-webhook-hetznerVerified publisher0.2.11 of 1See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
deyaeddin/cert-manager-webhook-hetzner:latest797b0d06210a
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

3,080
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
golang.org/x/net@v0.0.0-20201022231255-08b38378de70
stdlib@go1.15.5
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

52,919
csi-wekafsplugincsi-wekafsOfficialVerified publisher0.6.2-01 of 6See more

csi-wekafsplugin csi-wekafs 0.6.2-0

1 of the 6 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/net@v0.0.0-20180301190904-22ae77b79946
stdlib@go1.13.3
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

2,822
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

5,674
loadtesterflagger0.39.01 of 1See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
golang.org/x/net@v0.0.0-20181017193950-04a2e542c03f
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

1,760
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
golang.org/x/net@v0.0.0-20201224014010-6772e930b67b
stdlib@go1.15.1
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

3,281
lndfold0.3.152 of 4See more

lnd fold 0.3.15

2 of the 4 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/net@v0.0.0-20191002035440-2ec189313ef0
stdlib@go1.13.12
0.0.0-20210428140749-89ef3d95e781
1.15.12
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/net@v0.0.0-20191112182307-2180aed22343
stdlib@go1.14.12
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

8,835
intel-gpu-plugingeek-cookbookVerified publisher4.4.21 of 1See more

intel-gpu-plugin geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
intel/intel-gpu-plugin:0.20.0143f0a45e174
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.10
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

1,738
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
stdlib@go1.15.2
1.15.12

Open the chart page →

6,307
permission-managerkfirfer1.0.71 of 1See more

permission-manager kfirfer 1.0.7

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

2,266
kubeflowkubeflow1.6.23 of 45See more

kubeflow kubeflow 1.6.2

3 of the 45 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
golang.org/x/net@v0.0.0-20201224014010-6772e930b67b
0.0.0-20210428140749-89ef3d95e781
kubeflownotebookswg/kfam:v1.6.1f226fb44db57
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
0.0.0-20210428140749-89ef3d95e781
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7
stdlib@go1.13.10
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

96,941
openelbkubesphere-stable0.5.01 of 2See more

openelb kubesphere-stable 0.5.0

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.5.0b5b665c4672c
golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

4,329
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
stdlib@go1.15.1
1.15.12

Open the chart page →

9,261
rke2-multusrke2-charts3.7.1-build20210416011 of 2See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

4,519
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7
stdlib@go1.13.10
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

13,562
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
stdlib@go1.16.3
1.15.12

Open the chart page →

4,019
aperture-controlleraperture2.34.01 of 5See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.15.12

Open the chart page →

4,663
aws-calicoaws0.3.111 of 1See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.20.1379efe0c2541
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.15.2
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

2,250
cert-managerchoerodon1.8.24 of 4See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.0.0-20210428140749-89ef3d95e781
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.0.0-20210428140749-89ef3d95e781
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.0.0-20210428140749-89ef3d95e781
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

7,775
prometheus-locust-exporterdeliveryheroVerified publisher1.2.31 of 1See more

prometheus-locust-exporter deliveryhero 1.2.3

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
containersol/locust_exporter:v0.4.1a914972d19ad
stdlib@go1.15.8
1.15.12

Open the chart page →

1,276
imagepullsecret-patcherempathyco1.0.01 of 1See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
quay.io/titansoft/imagepullsecret-patcher:v0.1421e6d6a155dc
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.13.15
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

2,271
multusgeek-cookbookVerified publisher3.5.22 of 3See more

multus geek-cookbook 3.5.2

2 of the 3 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/cni-plugins:v0.9.1241592d93640
stdlib@go1.15.8
1.15.12
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
stdlib@go1.13.10
0.0.0-20210428140749-89ef3d95e781
1.15.12

Open the chart page →

4,906
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
stdlib@go1.15
1.15.12

Open the chart page →

13,950
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-31525.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
golang.org/x/net@v0.0.0-20200625001655-4c5254603344
0.0.0-20210428140749-89ef3d95e781

Open the chart page →

10,154

Container images carrying it

666 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
mesosphere/kubefed:proxyurl4fd8889195fe
golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0
stdlib@go1.15.3
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
mesosphere/traefik-forward-auth:3.1.05456581d7b76
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.14.15
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
metalmatze/alertmanager-bot:0.4.3426bc2ca7586
golang.org/x/net@v0.0.0-20181213202711-891ebc4b82d6
stdlib@go1.13.15
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
metalmatze/transmission-exporter:0.3.090d6acb6d47d
stdlib@go1.13
1.15.12
1
mikefarah/yq:2.4.16fc625c402de
stdlib@go1.13.3
1.15.12
1
minio/mc:RELEASE.2020-04-25T00-43-23Z1806872732e1
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
stdlib@go1.13.10
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
golang.org/x/net@v0.0.0-20201216054612-986b41b23924
stdlib@go1.15.7
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
stdlib@go1.13.8
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
golang.org/x/net@v0.0.0-20200904194848-62affa334b73
stdlib@go1.15.5
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
golang.org/x/net@v0.0.0-20200904194848-62affa334b73
stdlib@go1.14.9
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
stdlib@go1.13.5
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
minio/operator:v4.1.02adc5be088f5
golang.org/x/net@v0.0.0-20210421230115-4e50805a0758
stdlib@go1.16.3
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
mintel/gcp-quota-exporter:v0.3.20e0707b7732b
golang.org/x/net@v0.0.0-20190311183353-d8887717615a
stdlib@go1.13.12
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa
stdlib@go1.13.9
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582
stdlib@go1.13.9
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa
stdlib@go1.13.9
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b
stdlib@go1.13.9
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
mirrorgitlabcontainers/kubectl:1.13.1299931bd06b41
stdlib@go1.13.3
1.15.12
1
moby/buildkit:v0.10.0c2aeafaed434
golang.org/x/net@v0.0.0-20201224014010-6772e930b67b
0.0.0-20210428140749-89ef3d95e781
1
moikot/basic-git-server:0.0.20d941bd30ffa
stdlib@go1.14.9
1.15.12
1
moikot/smartthings-metrics:0.1.08625f53aa9b7
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
stdlib@go1.14.13
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
moikot/smartthings-metrics:feat-log-detailsfb8565140106
golang.org/x/net@v0.0.0-20200602114024-627f9648deb9
stdlib@go1.14.15
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
monitoror/monitoror:44b88edcf51ff
golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553
stdlib@go1.14.6
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
mpioperator/mpi-operator:0.3.03ccfa8d8b7bf
golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b
0.0.0-20210428140749-89ef3d95e781
1
mzinc/configmapsecret-controller:v0.5.1eebbcbf2d1f7
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
stdlib@go1.16.1
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
nacos/nacos-peer-finder-plugin:latesta9c769301fa6
stdlib@go1.13.5
1.15.12
1
nerzhul/mc-arm64:2020.10.034215df511f31
golang.org/x/net@v0.0.0-20200904194848-62affa334b73
stdlib@go1.15.2
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
netrisai/controller-web-session-generator:0.2.0a030a31289f4
stdlib@go1.14.15
1.15.12
1
netrisai/mongodb:4.4.4-debian-10-r095abfb776bb4
stdlib@go1.15.1
1.15.12
1
nginx/nginx-ingress:1.11.1eb5b4fd73325
golang.org/x/net@v0.0.0-20201216054612-986b41b23924
stdlib@go1.15.11
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
nmalhotr/webserver:v1.0.03419361fb0dd
stdlib@go1.13.10
1.15.12
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
stdlib@go1.14.2
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
okgolove/asprom:1.10.1974d2e5eb150
stdlib@go1.14.11
1.15.12
1
oliver006/redis_exporter:v1.11.104d958d209ab
stdlib@go1.15
1.15.12
1
oliver006/redis_exporter:v1.14.0d55e056987af
stdlib@go1.15.6
1.15.12
1
olliai/exposecontroller:1.0.5a470d96525e4
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
stdlib@go1.16.3
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
olliai/k8s-replicator:1.3.05716f2a8bd4c
golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9
0.0.0-20210428140749-89ef3d95e781
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7
stdlib@go1.16.2
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
golang.org/x/net@v0.0.0-20200520182314-0ba52f642ac2
stdlib@go1.14.7
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
oxynozeta/prometheus-cachethq:1.1.131f11669d597
stdlib@go1.15.1
1.15.12
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
stdlib@go1.14.4
1.15.12
1
pactfoundation/pact-broker:2.101.0.0a3021fc42834
stdlib@go1.14.4
1.15.12
1
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
stdlib@go1.14.4
1.15.12
1
phntom/codimd:2.4.31b9aafbb62e6
stdlib@go1.16
1.15.12
1
phntom/mindav:0.1.7-kix35695f546abbb
golang.org/x/net@v0.0.0-20201224014010-6772e930b67b
stdlib@go1.16.2
0.0.0-20210428140749-89ef3d95e781
1.15.12
1
photoprism/photoprism:220629-jammy2954334adbda
golang.org/x/net@v0.0.0-20200513185701-a91f0712d120
0.0.0-20210428140749-89ef3d95e781
1
platform9community/admin-server:latestde3fa9b70df1
stdlib@go1.15.11
1.15.12
1
platform9community/api-gateway:latest40a4970de568
stdlib@go1.15.11
1.15.12
1
platform9community/customers-service:latest2089811e5cc6
stdlib@go1.15.11
1.15.12
1
platform9community/vets-service:latestd1165c94dfb3
stdlib@go1.15.11
1.15.12
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.