CVE-2022-41717

Medium

Advisory

Published 8 Dec 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.056; 93rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,425; of 17,790 indexed, latest versions
Container images: 1,580; deployed by those charts
Fix available: 2 of 2; affected packages

golang.org/x/net/http2 vulnerable to possible excessive memory growth

Carried by container images the latest versions of 1,425 of 17,790 indexed charts deploy, on 1,580 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+172 more	0.4.0	1,132
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+85 more	1.18.9	1,485

OSV records: GHSA-xrjj-mj9h-534m GO-2022-1144
Also known as: BIT-golang-2022-41717

Charts affected

1,425 by stars

Chart

Latest

Affected images

Radar Score

npre-essentialsphntom

0.1.60

13 of 22 See more

npre-essentials phntom 0.1.60

13 of the 22 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.18.9
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.4.0 1.18.9
grafana/promtail :2.7.0	c16c710f7333	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9 stdlib@go1.19.2	0.4.0 1.18.9
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.18.5	0.4.0 1.18.9
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.5	0.4.0 1.18.9
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/net@v0.0.0-20221012135044-0b7e1fb9d458 stdlib@go1.19.2	0.4.0 1.18.9
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.4.0 1.18.9
quay.io/prometheus-operator/prometheus-operator :v0.61.1	cd7d1a82ef00	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.4.0 1.18.9
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.4.0 1.18.9
quay.io/prometheuscommunity/elasticsearch-exporter :v1.5.0	13a41e8ac836	stdlib@go1.18.4	1.18.9
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.4.0 1.18.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.4.0 1.18.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b stdlib@go1.19.3	0.4.0 1.18.9

Open the chart page →

26,883

prometheus-elasticsearch-exporterphntom

4.5.1

1 of 2 See more

prometheus-elasticsearch-exporter phntom 4.5.1

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.18.9

Open the chart page →

2,029

seafilephybros-helm-charts

4.0.1

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	stdlib@go1.19	1.18.9

Open the chart page →

22,156

firehose-corepinax

0.1.1

1 of 2 See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.4.0 1.18.9

Open the chart page →

3,536

firehose-ethereumpinax

0.3.2

1 of 2 See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.4.0 1.18.9

Open the chart page →

7,165

substreams-tier-2pinax

0.0.8

1 of 1 See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.4.0 1.18.9

Open the chart page →

4,950

planectlplanectl

0.7.0

1 of 10 See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine	02419de7eddf	stdlib@go1.18.2	1.18.9

Open the chart page →

26,118

gitlab-runner-operatorpnnl-miscscripts

0.1.6

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.12	0.4.0 1.18.9

Open the chart page →

11,162

tenant-namespacepnnl-miscscripts

0.6.23

1 of 1 See more

tenant-namespace pnnl-miscscripts 0.6.23

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.4.0 1.18.9

Open the chart page →

2,578

libretimepodzone-charts

0.4.1

1 of 9 See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.18.9

Open the chart page →

11,213

podtato-headportefaix-hub

0.3.0

6 of 6 See more

podtato-head portefaix-hub 0.3.0

6 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/podtato-head/entry :latest	c3d9d9c98be7	stdlib@go1.19	1.18.9
ghcr.io/podtato-head/hat :latest	de37ff39a4c0	stdlib@go1.19	1.18.9
ghcr.io/podtato-head/left-arm :latest	97596c95276a	stdlib@go1.19	1.18.9
ghcr.io/podtato-head/left-leg :latest	00bb31622b1e	stdlib@go1.19	1.18.9
ghcr.io/podtato-head/right-arm :latest	5f8f97a60558	stdlib@go1.19	1.18.9
ghcr.io/podtato-head/right-leg :latest	03e125b9279e	stdlib@go1.19	1.18.9

Open the chart page →

5,279

prometheus-bbox-exporterportefaix-hub

0.4.1

1 of 1 See more

prometheus-bbox-exporter portefaix-hub 0.4.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/nlamirault/bbox_exporter :1.0.0	f5dd1f7794c6	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.18.3	0.4.0 1.18.9

Open the chart page →

2,013

prometheus-freebox-exporterportefaix-hub

0.1.1

1 of 1 See more

prometheus-freebox-exporter portefaix-hub 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/nlamirault/freebox-exporter :1.0.0	2d522b664e12	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.4.0 1.18.9

Open the chart page →

1,755

speedtest-exporterportefaix-hub

0.5.0

1 of 1 See more

speedtest-exporter portefaix-hub 0.5.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/danopstech/speedtest_exporter :v0.0.5	99efbe55412b	stdlib@go1.16.6	1.18.9

Open the chart page →

1,209

postgrespostgres

0.1.1

1 of 1 See more

postgres postgres 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/postgres :13.12	ced3ba927f4c	stdlib@go1.18.2	1.18.9

Open the chart page →

4,933

liftbridgepozetron

0.1.1

1 of 1 See more

liftbridge pozetron 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
pozetroninc/liftbridge :v1.1.0	79fd6b9d93e6	golang.org/x/net@v0.0.0-20191021144547-ec77196f6094 stdlib@go1.13.12	0.4.0 1.18.9

Open the chart page →

3,174

Practica_4_helmpr04helm

0.1.0

2 of 7 See more

Practica_4_helm pr04helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.18.9
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.18.9

Open the chart page →

27,659

practica-helmpractica-helm

0.1.0

3 of 7 See more

practica-helm practica-helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mongo :4.4-bionic	3d0e6df9fd5b	stdlib@go1.16.3	1.18.9
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.18.9
slagattollas/weatherservice-practica :latest	68e7f56393fc	stdlib@go1.15.6	1.18.9

Open the chart page →

28,503

cloudwatch-exporterpresto-loadbalancer

0.0.6

1 of 1 See more

cloudwatch-exporter presto-loadbalancer 0.0.6

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
garugaru/aws-cloudwatch-exporter :latest	541852cafda5	stdlib@go1.16.15	1.18.9

Open the chart page →

1,086

hive-metastorepresto-loadbalancer

0.2.3

1 of 1 See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
datappeal/hive-metastore :latest	e38c085a3567	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.4	0.4.0 1.18.9

Open the chart page →

9,613

oauth2-proxypresto-loadbalancer

4.3.18

1 of 2 See more

oauth2-proxy presto-loadbalancer 4.3.18

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v6.1.1	791aef35b8d1	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.4	0.4.0 1.18.9

Open the chart page →

3,964

presto-exporterpresto-loadbalancer

0.0.9

1 of 1 See more

presto-exporter presto-loadbalancer 0.0.9

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
garugaru/presto-exporter :cb666560e9e82d5ae36aef1e663c3d7f51cca9fc	5201314c28f3	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.14.13	0.4.0 1.18.9

Open the chart page →

2,190

presto-loadbalancerpresto-loadbalancer

0.1.16

1 of 1 See more

presto-loadbalancer presto-loadbalancer 0.1.16

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
garugaru/presto-loadbalancer :v0.1.5	89d66d117029	stdlib@go1.15.2	1.18.9

Open the chart page →

2,526

rds-exporterpresto-loadbalancer

0.0.2

1 of 1 See more

rds-exporter presto-loadbalancer 0.0.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
garugaru/aws-cloudwatch-exporter :latest	541852cafda5	stdlib@go1.16.15	1.18.9

Open the chart page →

1,086

trino-exporterpresto-loadbalancer

0.0.12

1 of 1 See more

trino-exporter presto-loadbalancer 0.0.12

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
datappeal/trino-exporter :latest	325b91c2b09e	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.15	0.4.0 1.18.9

Open the chart page →

1,969

trino-loadbalancerpresto-loadbalancer

0.3.1

1 of 1 See more

trino-loadbalancer presto-loadbalancer 0.3.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
datappeal/trino-loadbalancer :sha-950abbae	6b5b9fdb2e6d	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.17.13	0.4.0 1.18.9

Open the chart page →

2,357

procestypecatalogusprocestypecatalogus

1.1.0

1 of 4 See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,438

productenendienstencatalogusproductenendienstencatalogus

1.0.0

1 of 3 See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,519

wp-chartprojet-devops

0.1.0

1 of 2 See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.18.9

Open the chart page →

5,270

alertmanagerprometheus-worawutchan

0.3.0

1 of 1 See more

alertmanager prometheus-worawutchan 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.4.0 1.18.9

Open the chart page →

2,305

prometheus-blackbox-exporterprometheus-worawutchan

4.10.1

1 of 1 See more

prometheus-blackbox-exporter prometheus-worawutchan 4.10.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.15.2	0.4.0 1.18.9

Open the chart page →

2,250

prometheus-druid-exporterprometheus-worawutchan

0.9.0

1 of 1 See more

prometheus-druid-exporter prometheus-worawutchan 0.9.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/opstree/druid-exporter :v0.8	3f6d9885cfe2	stdlib@go1.14.6	1.18.9

Open the chart page →

2,090

prometheus-node-exporterprometheus-worawutchan

1.12.0

1 of 1 See more

prometheus-node-exporter prometheus-worawutchan 1.12.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.4.0 1.18.9

Open the chart page →

2,188

prometheus-pushgatewayprometheus-worawutchan

1.5.0

1 of 1 See more

prometheus-pushgateway prometheus-worawutchan 1.5.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.3.0	c0d39b8d4cfe	stdlib@go1.15.2	1.18.9

Open the chart page →

1,286

prometheus-redis-exporterprometheus-worawutchan

4.0.0

1 of 1 See more

prometheus-redis-exporter prometheus-worawutchan 4.0.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.11.1	04d958d209ab	stdlib@go1.15	1.18.9

Open the chart page →

1,315

prometheus-statsd-exporterprometheus-worawutchan

0.1.0

1 of 1 See more

prometheus-statsd-exporter prometheus-worawutchan 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.18.0	d23aca343b86	stdlib@go1.14.7	1.18.9

Open the chart page →

1,315

panproto-application-nldesign

0.1.0

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

8,733

proto-component-commongroundproto-component-commonground

1.0.0

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,519

kspanpuckpuck

0.2.4

1 of 1 See more

kspan puckpuck 0.2.4

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/honeycombio/kspan/kspan :0.2	c966a4f8a4b7	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.4.0

Open the chart page →

1,688

seashellpuckpuck

1.2.0

1 of 1 See more

seashell puckpuck 1.2.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.4.0

Open the chart page →

4,221

pumperlypumperly

0.1.2

1 of 3 See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
postgis/postgis :17-3.4-alpine	5a1dbedac34e	stdlib@go1.18.2	1.18.9

Open the chart page →

2,854

cdmswebapppyalive-cdmswebapp

0.1.0

2 of 3 See more

cdmswebapp pyalive-cdmswebapp 0.1.0

2 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.18.9
sarwansharma/minio :v3	59d1da9385d1	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.3	0.4.0 1.18.9

Open the chart page →

6,674

loki-stackpyalive-cdmswebapp

2.6.5

2 of 4 See more

loki-stack pyalive-cdmswebapp 2.6.5

2 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
grafana/loki :2.5.0	f9ef133793af	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.4.0 1.18.9
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.4.0 1.18.9

Open the chart page →

6,556

cf-operatorquarks

2.3.0+0.g27a91cdf

2 of 2 See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.3	0.4.0 1.18.9
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.4	0.4.0 1.18.9

Open the chart page →

11,942

quarksquarks

7.0.1+0.g5396b11

4 of 5 See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.4.0 1.18.9
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.13.15	0.4.0 1.18.9
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.4.0 1.18.9
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.4.0 1.18.9

Open the chart page →

18,197

quarks-statefulsetquarks

0.0.1304-g4b4f2ac5

1 of 1 See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.4.0 1.18.9

Open the chart page →

4,011

ingress-controllerqumine

0.8.500

1 of 1 See more

ingress-controller qumine 0.8.500

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
qumine/ingress-controller :v0.8.5	f2c8a2148381	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.4.0 1.18.9

Open the chart page →

1,533

saleorrc-helm-charts

0.1.1

1 of 5 See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.22.0	ca6b73330616	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15.8	0.4.0 1.18.9

Open the chart page →

3,745

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.4.0 1.18.9

Open the chart page →

15,299

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.4.0 1.18.9

Open the chart page →

15,299

Container images carrying it

1,580 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mongo :6.0.12	646902910d6a	stdlib@go1.18.2	1.18.9	1
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.18.9	1
library/mongo :6.0.2	71a63fc2438e	stdlib@go1.17.10	1.18.9	1
library/mongo :5.0.21	7c81758cb295	stdlib@go1.18.2	1.18.9	1
library/mongo :7.0.12	ae1cf99fa7bf	stdlib@go1.18.2	1.18.9	1
library/mongo :4.4.18	d23ec07162ca	stdlib@go1.17.10	1.18.9	1
library/mongo :8.0.11	dca8d11fe467	stdlib@go1.18.2	1.18.9	1
library/mysql :8.4.3	106d5197fd8e	stdlib@go1.18.2	1.18.9	1
library/mysql :8.0.30	3c1aab708f6e	stdlib@go1.16.7	1.18.9	1
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.18.9	1
library/mysql :8.0.41	bf577825b52a	stdlib@go1.18.2	1.18.9	1
library/mysql :8.0.39	ccb8f749bb5e	stdlib@go1.18.2	1.18.9	1
library/mysql :8.0.40	d58ac93387f6	stdlib@go1.18.2	1.18.9	1
library/nats :2.9.6-alpine3.16	f576cdc17cc3	stdlib@go1.19.3	1.18.9	1
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.18.9	1
library/postgres :14.3	2d1e636f0778	stdlib@go1.16.7	1.18.9	1
library/postgres :17.4	304ab8135187	stdlib@go1.18.2	1.18.9	1
library/postgres :16.6	557fea37a744	stdlib@go1.18.2	1.18.9	1
library/postgres :16.4-alpine	5660c2cbfea5	stdlib@go1.18.2	1.18.9	1
library/postgres :13.11-bullseye	5c265bf1fd30	stdlib@go1.18.2	1.18.9	1
library/postgres :17.5-alpine	6567bca8d7bc	stdlib@go1.18.2	1.18.9	1
library/postgres :17.4-alpine	7062a2109c4b	stdlib@go1.18.2	1.18.9	1
library/postgres :12-alpine	7c8f48705831	stdlib@go1.18.2	1.18.9	1
library/postgres :17.2-alpine	7e5df973a748	stdlib@go1.18.2	1.18.9	1
library/postgres :15.3	8775adb39f0d	stdlib@go1.18.2	1.18.9	1
library/postgres :17.5	aadf2c0696f5	stdlib@go1.18.2	1.18.9	1
library/postgres :13.12	ced3ba927f4c	stdlib@go1.18.2	1.18.9	1
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.18.9	1
library/postgres :17.5-bookworm	fbcea1bd13b6	stdlib@go1.18.2	1.18.9	1
library/redis :7.0.4	091a7b5de688	stdlib@go1.16.7	1.18.9	1
library/redis :7-bullseye	6a5130174e14	stdlib@go1.18.2	1.18.9	1
library/redis :7.2.5-alpine	6aaf3f5e6bc8	stdlib@go1.18.2	1.18.9	1
library/redis :6.2.20-alpine	77697a75da9f	stdlib@go1.18.2	1.18.9	1
library/redis	83edc2b8e9ff	stdlib@go1.18.2	1.18.9	1
library/redis :7.0.10	92b8b307ee28	stdlib@go1.18.2	1.18.9	1
library/redis :7.4.1	bb142a9c18ac	stdlib@go1.18.2	1.18.9	1
library/redis :7.4.1-alpine	c1e88455c852	stdlib@go1.18.2	1.18.9	1
library/redis :7.0-alpine	c9d92d840fd0	stdlib@go1.18.2	1.18.9	1
library/telegraf :1.20.4	28e98eece020	golang.org/x/net@v0.0.0-20211005215030-d2e5035098b3 stdlib@go1.17.3	0.4.0 1.18.9	1
library/telegraf :1.19.0-alpine	794079a7f241	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.5	0.4.0 1.18.9	1
library/telegraf :1.19-alpine	addb86c0c520	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.16.6	0.4.0 1.18.9	1
library/traefik :2.5.6	2f603f8d3abe	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.5	0.4.0 1.18.9	1
library/traefik :v1.7.34	5d47b7bb2546	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.16.12	0.4.0 1.18.9	1
library/traefik :2.5.4	7d0228d19042	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.3	0.4.0 1.18.9	1
library/traefik :2.4.8	eda951fd29a8	golang.org/x/net@v0.0.0-20210220033124-5f55cee0dc0d stdlib@go1.16.2	0.4.0 1.18.9	1
library/traefik :2.2.8	f5af5a5ce17f	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.14.6	0.4.0 1.18.9	1
library/zookeeper :3.9.5	cab8944a33a1	stdlib@go1.18.1	1.18.9	1
library/zookeeper :3.9.4	dfa9ba46d14b	stdlib@go1.18.1	1.18.9	1
librenms/librenms :22.4.1	4f1f3d667cc7	stdlib@go1.16.12	1.18.9	1
linuxserver/calibre-web :0.6.24	241009026e6f	stdlib@go1.17.8	1.18.9	1