CVE-2022-27664

High

Advisory

Published 7 Sept 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.033; 88th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,336; of 17,787 indexed, latest versions
Container images: 1,465; deployed by those charts
Fix available: 2 of 2; affected packages

golang.org/x/net/http2 Denial of Service vulnerability

Carried by container images the latest versions of 1,336 of 17,787 indexed charts deploy, on 1,465 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+156 more	0.0.0-20220906165146-f3363e06e74c	1,043
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+78 more	1.18.6	1,362

OSV records: GHSA-69cg-p879-7622 GO-2022-0969
Also known as: BIT-golang-2022-27664

Charts affected

1,336 by stars

Chart

Latest

Affected images

Radar Score

rekorsigstore

1.8.5

2 of 9 See more

rekor sigstore 1.8.5

2 of the 9 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.18.6
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.18.6

Open the chart page →

5,416

filebrowserutkuozdemir

1.0.0

1 of 1 See more

filebrowser utkuozdemir 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

3,073

wazuhwazuh-helm

0.0.8

1 of 4 See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

6,168

mysql-operatorbitpoke

0.6.3

2 of 2 See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	stdlib@go1.17.13	1.18.6
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	stdlib@go1.17.13	1.18.6

Open the chart page →

3,354

cert-manager-webhook-hetznercert-manager-webhook-hetzner

0.2.1

1 of 1 See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.7	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

3,080

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.5	0.0.0-20220906165146-f3363e06e74c 1.18.6
library/traefik :2.5.4	7d0228d19042	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.3	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

53,012

csi-wekafsplugincsi-wekafs

0.6.2-0

1 of 6 See more

csi-wekafsplugin csi-wekafs 0.6.2-0

1 of the 6 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

2,824

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
datamate/seafile-professional :11.0.20	2dd66b722464	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.0.0-20220906165146-f3363e06e74c

Open the chart page →

27,358

drone-runner-dockerdrone

0.7.0

1 of 3 See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
drone/drone-runner-docker :1.8.1	137e79c5e23c	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.16.15	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

5,674

loadtesterflagger

0.39.0

1 of 1 See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/net@v0.0.0-20181017193950-04a2e542c03f	0.0.0-20220906165146-f3363e06e74c

Open the chart page →

1,760

flyteflyte

1.16.8

1 of 11 See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.1	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

3,282

lndfold

0.3.15

2 of 4 See more

lnd fold 0.3.15

2 of the 4 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
thesisrobot/loop :v0.11.1-beta	89ae07e787ca	golang.org/x/net@v0.0.0-20191002035440-2ec189313ef0 stdlib@go1.13.12	0.0.0-20220906165146-f3363e06e74c 1.18.6
thesisrobot/pool :v0.3.3-alpha	2d1c388a4bda	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.14.12	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

8,834

intel-gpu-plugingeek-cookbook

4.4.2

1 of 1 See more

intel-gpu-plugin geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
intel/intel-gpu-plugin :0.20.0	143f0a45e174	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.10	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

1,738

kamu-api-serverkamu

0.89.0

1 of 1 See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
ghcr.io/kamu-data/kamu-api-server :0.89.0	4ed7a896dd2b	stdlib@go1.15.2	1.18.6

Open the chart page →

6,354

permission-managerkfirfer

1.0.7

1 of 1 See more

permission-manager kfirfer 1.0.7

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.8	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

2,266

kubeflowkubeflow

1.6.2

26 of 45 See more

kubeflow kubeflow 1.6.2

26 of the 45 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.9.6	87a9db561d2e	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.13	0.0.0-20220906165146-f3363e06e74c 1.18.6
istio/proxyv2 :1.14.1	df69c1a7af7c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.0.0-20220906165146-f3363e06e74c 1.18.6
kserve/kserve-controller :v0.8.0	f0692a9ea09f	golang.org/x/net@v0.0.0-20211205041911-012df41ee64c stdlib@go1.17.7	0.0.0-20220906165146-f3363e06e74c 1.18.6
kubeflow/training-operator :v1-e1434f6	ff847e2b6af0	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.17.11	0.0.0-20220906165146-f3363e06e74c 1.18.6
kubeflownotebookswg/kfam :v1.6.1	f226fb44db57	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.17.13	0.0.0-20220906165146-f3363e06e74c 1.18.6
kubeflownotebookswg/notebook-controller :v1.6.1	85e2e685abd6	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.13	0.0.0-20220906165146-f3363e06e74c 1.18.6
kubeflownotebookswg/poddefaults-webhook :v1.6.1	7d42600e1524	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.13	0.0.0-20220906165146-f3363e06e74c 1.18.6
kubeflownotebookswg/profile-controller :v1.6.1	9f01767a460f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.13	0.0.0-20220906165146-f3363e06e74c 1.18.6
kubeflownotebookswg/tensorboard-controller :v1.6.1	82ffdd2da285	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.13	0.0.0-20220906165146-f3363e06e74c 1.18.6
metacontrollerio/metacontroller :v2.0.4	897c9601d2cc	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.7	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.2.0	f253b82941c2	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.2.0	a705c1ea8e9e	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.2.5	93ff6e693577	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.2.5	007820fdb75b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.2.5	23baa1932232	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.2.5	847bb97e3844	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.2.5	9084ea8498ea	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/ml-pipeline/mysql :5.7-debian	df28187b5455	stdlib@go1.16.7	1.18.6
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/ml-pipeline/viewer-crd-controller :2.0.0-alpha.5	34403f9f94be	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.0.0-20220906165146-f3363e06e74c 1.18.6
gcr.io/ml-pipeline/workflow-controller :v3.3.8-license-compliance	6c8e4e2a6443	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.11	0.0.0-20220906165146-f3363e06e74c 1.18.6
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.10	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

97,040

openelbkubesphere-stable

0.5.0

2 of 2 See more

openelb kubesphere-stable 0.5.0

2 of the 2 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.5.0	b5b665c4672c	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.0.0-20220906165146-f3363e06e74c 1.18.6
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

4,329

vclustermain

0.17.0

3 of 10 See more

vcluster main 0.17.0

3 of the 10 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.0.0-20220906165146-f3363e06e74c 1.18.6
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.0.0-20220906165146-f3363e06e74c 1.18.6
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

11,556

netris-operatornetrisai

3.0.2

1 of 2 See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.0.0-20220906165146-f3363e06e74c

Open the chart page →

1,588

open5gsopen5gs

2.3.4

2 of 5 See more

open5gs open5gs 2.3.4

2 of the 5 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.18.6
gradiant/open5gs-dbctl :0.10.3	332031245fce	stdlib@go1.18.2	1.18.6

Open the chart page →

9,300

rke2-multusrke2-charts

3.7.1-build2021041601

1 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.0.0-20220906165146-f3363e06e74c

Open the chart page →

4,519

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.10	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

13,567

eshoponabpabp-charts

1.0.0

2 of 15 See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.18.6
library/postgres :14.1	3162a6ead070	stdlib@go1.16.7	1.18.6

Open the chart page →

19,805

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :15.2.0-debian-11-r11	3e65a6b89e38	stdlib@go1.18.2	1.18.6

Open the chart page →

3,569

ansible-semaphoreansible-semaphore

0.1.0

1 of 1 See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	stdlib@go1.16.3	1.18.6

Open the chart page →

4,019

aperture-controlleraperture

2.34.0

2 of 5 See more

aperture-controller aperture 2.34.0

2 of the 5 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.18.6
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.8	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

4,663

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

3,300

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

9,052

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.2	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

2,250

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	stdlib@go1.18.2	1.18.6

Open the chart page →

8,007

cert-managerchoerodon

1.8.2

4 of 4 See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.0.0-20220906165146-f3363e06e74c 1.18.6
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.0.0-20220906165146-f3363e06e74c 1.18.6
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.0.0-20220906165146-f3363e06e74c 1.18.6
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

7,775

hellocloudecho

0.1.2

1 of 1 See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
cloudecho/hello :0.1.0	f76ede067ab9	stdlib@go1.16.6	1.18.6

Open the chart page →

1,817

ghostcloudpirates-ghost

0.20.22

1 of 3 See more

ghost cloudpirates-ghost 0.20.22

1 of the 3 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.18.6

Open the chart page →

7,182

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	stdlib@go1.18	1.18.6

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

1 of 21 See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.0.0-20220906165146-f3363e06e74c

Open the chart page →

24,698

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

3,081

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

2,537

prometheus-locust-exporterdeliveryhero

1.2.3

1 of 1 See more

prometheus-locust-exporter deliveryhero 1.2.3

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.18.6

Open the chart page →

1,276

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

2,271

keydbfinkinfridom

0.48.3

1 of 1 See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.18.6

Open the chart page →

5,302

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

3,030

error-pagesgeek-cookbook

1.2.2

1 of 1 See more

error-pages geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/error-pages :2.6.0	13e73da04ee4	stdlib@go1.17.6	1.18.6

Open the chart page →

1,110

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.10	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

7,579

multusgeek-cookbook

3.5.2

2 of 3 See more

multus geek-cookbook 3.5.2

2 of the 3 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/cni-plugins :v0.9.1	241592d93640	stdlib@go1.15.8	1.18.6
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.13.10	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

4,908

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	stdlib@go1.15	1.18.6

Open the chart page →

14,001

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	stdlib@go1.18.4	1.18.6

Open the chart page →

9,666

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

10,202

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.4	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

2,330

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

3,371

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2022-27664.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.17	0.0.0-20220906165146-f3363e06e74c 1.18.6

Open the chart page →

2,610

Container images carrying it

1,465 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/stefanprodan/podinfo :6.1.3	f25ebb9c6788	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.9	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
ghcr.io/storax/kubedoom :0.6.0	851ba8c80b93	stdlib@go1.17.6	1.18.6	1
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.0.0-20220906165146-f3363e06e74c	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.15.7	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
ghcr.io/tarampampam/error-pages :2.6.0	13e73da04ee4	stdlib@go1.17.6	1.18.6	1
ghcr.io/thetredev/steamcmd :srcds-20240309	dbb0f042cb31	stdlib@go1.18.2	1.18.6	1
ghcr.io/tikalk/resource-manager :latest	7f21d50e69cb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
ghcr.io/v6d-io/v6d/kube-rbac-proxy :v0.13.0	a2523c532c0c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.3	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
ghcr.io/wittdennis/calibre-web :1.1.1	aa7d5d5dd6be	stdlib@go1.17.8	1.18.6	1
ghcr.io/wolveix/satisfactory-server :v1.9.10	e0f2f8c97598	stdlib@go1.18.1	1.18.6	1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator :v1.0.8	31060be60bec	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.16.15	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b stdlib@go1.17.3	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.4	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar :v2.0.1	fc5d14e9f26f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.15.2	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.2	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe :v2.2.0	b7d82802cca8	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.6	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
public.ecr.aws/aws-ec2/amazon-ec2-metadata-mock :v1.11.2	dd02d3569da0	stdlib@go1.17.13	1.18.6	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller :v2.0.0-beta	9637c80dd23f	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.0.0-20220906165146-f3363e06e74c	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook :v2.0.0-beta	86b0f7243250	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.0.0-20220906165146-f3363e06e74c	1
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller :1.0	67b89ae52240	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.3	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-2021.08.13.20.34-linux-amd64	02aed3370fce	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-35-g41dc61e-2022.12.16.20.38	363bd65cd707	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.0.0-20220906165146-f3363e06e74c	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.8	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.13	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.15.15	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.14.9	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.5	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.1	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	golang.org/x/net@v0.0.0-20220621193019-9d032be2e588 stdlib@go1.16.5	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	stdlib@go1.18.1	1.18.6	1
quay.io/argoprojlabs/argocd-operator :v0.4.0	cf8faa986789	golang.org/x/net@v0.0.0-20220621193019-9d032be2e588 stdlib@go1.18.4	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.4	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.5	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/chriscowley/openldap_exporter :v2.1.1	6c308e9732e1	stdlib@go1.15.7	1.18.6	1
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de stdlib@go1.18.3	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/cilium/tetragon-operator :v0.8.3	4ab8e6604204	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de stdlib@go1.18.3	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d stdlib@go1.18.1	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.16.3	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.3	0.0.0-20220906165146-f3363e06e74c 1.18.6	1
quay.io/ddn/exascaler-csi-file-driver :v2.2.6	fe2e2e5a2751	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.0.0-20220906165146-f3363e06e74c	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.6	0.0.0-20220906165146-f3363e06e74c 1.18.6	1