CVE-2021-33194

High

Advisory

Published 17 Feb 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.075; 94th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 534; of 17,781 indexed, latest versions
Container images: 573; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/net/html Infinite Loop vulnerability

Carried by container images the latest versions of 534 of 17,781 indexed charts deploy, on 573 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+82 more	0.0.0-20210520170846-37e1c6afe023	573

OSV records: GHSA-83g2-8m93-v3w7
Also known as: BIT-golang-2021-33194, GO-2021-0238

Charts affected

534 by stars

Chart

Latest

Affected images

Radar Score

oesopsmx

4.0.32

3 of 25 See more

oes opsmx 4.0.32

3 of the 25 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.0.0-20210520170846-37e1c6afe023
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.0.0-20210520170846-37e1c6afe023
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

107,811

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc	0.0.0-20210520170846-37e1c6afe023
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.0.0-20210520170846-37e1c6afe023
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.0.0-20210520170846-37e1c6afe023
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

12,125

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

2,730

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20210520170846-37e1c6afe023
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20210520170846-37e1c6afe023
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20210520170846-37e1c6afe023
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20210520170846-37e1c6afe023
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

12,502

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

4,136

traefik-meshtraefik

4.1.1

1 of 7 See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

9,257

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

6,085

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

4,714

cert-exporterarzu

3.0.1

1 of 1 See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
joeelliott/cert-exporter :v2.7.0	b4acd14642d0	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

2,819

siemassist-iot-cybersecurity-monitroting-siem

0.1.0

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

10,730

dltbrokerassist-iot-distributed-broker

0.2.0

4 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

4 of the 9 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
assistiot/distributed_broker :1.0.0	33e02dad168f	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210520170846-37e1c6afe023
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210520170846-37e1c6afe023
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210520170846-37e1c6afe023
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

0.2.0

4 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

4 of the 9 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
assistiot/logging_auditing :1.0.0	790dbb198e86	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.0.0-20210520170846-37e1c6afe023
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210520170846-37e1c6afe023
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210520170846-37e1c6afe023
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

77,687

dex-k8sav1o-charts

0.2.1

1 of 1 See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

3,391

db-backupballe-petersen

0.1.4

1 of 1 See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/net@v0.0.0-20191109021931-daa7c04131f5	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

4,814

chirpstackbeeinventor

0.1.10

3 of 5 See more

chirpstack beeinventor 0.1.10

3 of the 5 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3.17.6	e0b23dfd24d6	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.0.0-20210520170846-37e1c6afe023
chirpstack/chirpstack-gateway-bridge :3.13.2	ce3f2cdca8a9	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.0.0-20210520170846-37e1c6afe023
chirpstack/chirpstack-network-server :3.16.1	c98d7fe06bce	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

7,807

brpservicebrpservice

1.1.0

1 of 4 See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/brpservice-php :latest	c17f1ba17d36	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

7,830

agentbuildkite

0.6.4

1 of 1 See more

agent buildkite 0.6.4

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
buildkite/agent :3.25.0	aec38cfaae0e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

2,663

fluxcd-webuiccowley

0.0.2

1 of 2 See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
adrianberger/fluxcd-webui :latest	76848c0d2780	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

3,509

cloudbees-sidecar-injectorcloudbees

2.3.3

2 of 2 See more

cloudbees-sidecar-injector cloudbees 2.3.3

2 of the 2 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
cloudbees/cert-requester :2.3.3	1d44fb4f799b	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728	0.0.0-20210520170846-37e1c6afe023
cloudbees/sidecar-injector :2.3.3	8f102ef0383a	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

3,268

cloudflow-enterprise-componentscloudflow-helm-charts

0.0.0-NIGHTLY01122020

1 of 9 See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 9 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

4,256

contactcataloguscontact-catalogus

1.0.0

1 of 3 See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/contactcatalogus-php :latest	eeb625bd660c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

7,303

sops-operatorcraftypath

0.8.0

1 of 1 See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
craftypath/sops-operator :v0.8.0	402a0024c732	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

6,473

cubefscubefs

3.2.0

2 of 10 See more

cubefs cubefs 3.2.0

2 of the 10 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.0.0-20210520170846-37e1c6afe023
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

15,891

extendeddaemonsetdatadog

0.3.3

1 of 1 See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
datadog/extendeddaemonset :v0.8.0	513a4377aed5	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

4,759

datadogdatadog-test

2.4.23

1 of 2 See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
datadog/agent :7.22.0	8f20e56b5311	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

4,568

dregsydeliveryhero

0.1.5

1 of 1 See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

2,969

labelsmanager-controllerdeliveryhero

1.0.4

1 of 1 See more

labelsmanager-controller deliveryhero 1.0.4

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

2,305

weblatedeliveryhero

0.3.2

1 of 3 See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

7,984

permission-managerdevopstales

1.8.0

1 of 1 See more

permission-manager devopstales 1.8.0

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

2,266

calicodevtron

0.1.1

3 of 4 See more

calico devtron 0.1.1

3 of the 4 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20210520170846-37e1c6afe023
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20210520170846-37e1c6afe023
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

10,071

digispoof-interfacedigispoof-interface

1.0.0

1 of 3 See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/digispoof-interface-php :latest	03aba499950f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

7,779

dnation-pingdnationcloud

0.1.9

3 of 5 See more

dnation-ping dnationcloud 0.1.9

3 of the 5 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.0.0-20210520170846-37e1c6afe023
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.0.0-20210520170846-37e1c6afe023
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

10,454

archerydouban

0.4.3

1 of 6 See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

5,853

karmadouban

1.9.2

1 of 1 See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.85	d06892218680	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

2,017

nexus-operatorepmdedp-dev

2.11.0-MDTU-DDM-SNAPSHOT.1

1 of 1 See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

2,266

vidcheckfactly

0.5.2

1 of 2 See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
factly/vidcheck-server :0.12.0	87064eb0463c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

3,617

openldapfluktuid

0.1.1

1 of 2 See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

3,313

dexgabibbo97

4.0.4

1 of 1 See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

3,391

alertmanager-botgeek-cookbook

6.4.2

1 of 1 See more

alertmanager-bot geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
metalmatze/alertmanager-bot :0.4.3	426bc2ca7586	golang.org/x/net@v0.0.0-20181213202711-891ebc4b82d6	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

3,586

filebrowsergeek-cookbook

1.4.2

1 of 1 See more

filebrowser geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.18.0	4fcd47af573c	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

3,474

focalboardgeek-cookbook

4.4.2

1 of 1 See more

focalboard geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
mattermost/focalboard :0.9.0	31078df7a3c8	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

3,631

owncastgeek-cookbook

3.4.2

1 of 1 See more

owncast geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
gabekangas/owncast :0.0.7	97461aedb580	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

3,167

protonmail-bridgegeek-cookbook

5.4.2

1 of 1 See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

8,029

stashgeek-cookbook

3.4.2

1 of 1 See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
stashapp/stash :latest	24dbd7607174	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

15,856

helm-operatorhelm-operator

0.0.2

1 of 1 See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

6,977

cratedb-adapter-v2hmdmph

0.2.1

1 of 1 See more

cratedb-adapter-v2 hmdmph 0.2.1

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

2,913

cniistio

1.10.3

1 of 1 See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
istio/install-cni :1.10.3	2232f365aed6	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

10,400

discoveryistio

1.10.3

1 of 1 See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.3	e7e110a421c2	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

10,475

egressistio

1.10.3

1 of 1 See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.3	a78b7a165744	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

10,421

ingressistio

1.10.3

1 of 1 See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2021-33194.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.3	a78b7a165744	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.0.0-20210520170846-37e1c6afe023

Open the chart page →

10,421

Container images carrying it

573 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/apisix-ingress-controller :1.3.0	412f92cde0b3	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.0.0-20210520170846-37e1c6afe023	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20210520170846-37e1c6afe023	1
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.0.0-20210520170846-37e1c6afe023	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.0.0-20210520170846-37e1c6afe023	1
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.0.0-20210520170846-37e1c6afe023	1
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980	0.0.0-20210520170846-37e1c6afe023	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.0.0-20210520170846-37e1c6afe023	1
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210520170846-37e1c6afe023	1
assistiot/distributed_broker :1.0.0	33e02dad168f	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210520170846-37e1c6afe023	1
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.0.0-20210520170846-37e1c6afe023	1
assistiot/logging_auditing :1.0.0	790dbb198e86	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.0.0-20210520170846-37e1c6afe023	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.0.0-20210520170846-37e1c6afe023	1
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.0.0-20210520170846-37e1c6afe023	1
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.0.0-20210520170846-37e1c6afe023	1
buildkite/agent :3.25.0	aec38cfaae0e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.0.0-20210520170846-37e1c6afe023	1
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d	0.0.0-20210520170846-37e1c6afe023	1
cbeneke/hcloud-fip-controller :v0.4.1	dc658078d7ba	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa	0.0.0-20210520170846-37e1c6afe023	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.0.0-20210520170846-37e1c6afe023	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.0.0-20210520170846-37e1c6afe023	1
chaosnative/cle-auth-server :2.7.0	72ee352bc333	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210520170846-37e1c6afe023	1
chirpstack/chirpstack-application-server :3.17.6	e0b23dfd24d6	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.0.0-20210520170846-37e1c6afe023	1
chirpstack/chirpstack-gateway-bridge :3.13.2	ce3f2cdca8a9	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.0.0-20210520170846-37e1c6afe023	1
chirpstack/chirpstack-network-server :3.16.1	c98d7fe06bce	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.0.0-20210520170846-37e1c6afe023	1
cloudbees/cert-requester :2.3.3	1d44fb4f799b	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728	0.0.0-20210520170846-37e1c6afe023	1
cloudbees/sidecar-injector :2.3.3	8f102ef0383a	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728	0.0.0-20210520170846-37e1c6afe023	1
cloudentity/openbanking-quickstart-bank :1.11.1	9402ec4b5016	golang.org/x/net@v0.0.0-20201207224615-747e23833adb	0.0.0-20210520170846-37e1c6afe023	1
cloudentity/openbanking-quickstart-configuration :1.11.1	8a1890eb8265	golang.org/x/net@v0.0.0-20201207224615-747e23833adb	0.0.0-20210520170846-37e1c6afe023	1
cloudentity/openbanking-quickstart-consent-admin-portal :1.11.1	ee83cdd45b7b	golang.org/x/net@v0.0.0-20201207224615-747e23833adb	0.0.0-20210520170846-37e1c6afe023	1
cloudentity/openbanking-quickstart-consent-page :1.11.1	5728654cecb7	golang.org/x/net@v0.0.0-20201207224615-747e23833adb	0.0.0-20210520170846-37e1c6afe023	1
cloudentity/openbanking-quickstart-consent-self-service-portal :1.11.1	8ca94ae6acf4	golang.org/x/net@v0.0.0-20201207224615-747e23833adb	0.0.0-20210520170846-37e1c6afe023	1
cloudentity/openbanking-quickstart-financroo-tpp :1.11.1	c04eb10c77b7	golang.org/x/net@v0.0.0-20201207224615-747e23833adb	0.0.0-20210520170846-37e1c6afe023	1
cmacrae/lgtm :0.1.0	dec8d490fe40	golang.org/x/net@v0.0.0-20181108082009-03003ca0c849	0.0.0-20210520170846-37e1c6afe023	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.0.0-20210520170846-37e1c6afe023	1
codeskyblue/gohttpserver :latest	caa862590e34	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.0.0-20210520170846-37e1c6afe023	1
conduction/agendaservice-php :latest	9cfeeb6c7c20	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023	1
conduction/balance-registration-php :dev	c36094a41369	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023	1
conduction/betaalservice-php :latest	ece1ab544c57	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023	1
conduction/cgrc-php :dev	25415534d245	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023	1
conduction/checkin-component-php :dev	3423845692c1	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023	1
conduction/conduction-ui-php :dev	2744565516e8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023	1
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023	1
conduction/docparser-php :dev	b6f95c8ead7d	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023	1
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023	1
conduction/pan-php :dev	24f03c57568f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.0.0-20210520170846-37e1c6afe023	1
containous/maesh :v1.3.2	587162516502	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.0.0-20210520170846-37e1c6afe023	1
coredns/coredns :1.7.0	73ca82b4ce82	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.0.0-20210520170846-37e1c6afe023	1
craftypath/sops-operator :v0.8.0	402a0024c732	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.0.0-20210520170846-37e1c6afe023	1
crossplane/crossplane :v0.12.0	66666e6963af	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.0.0-20210520170846-37e1c6afe023	1
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.0.0-20210520170846-37e1c6afe023	1
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.0.0-20210520170846-37e1c6afe023	1