CVE-2022-41717

Medium

Advisory

Published 8 Dec 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.056; 93rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,425; of 17,787 indexed, latest versions
Container images: 1,580; deployed by those charts
Fix available: 2 of 2; affected packages

golang.org/x/net/http2 vulnerable to possible excessive memory growth

Carried by container images the latest versions of 1,425 of 17,787 indexed charts deploy, on 1,580 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+172 more	0.4.0	1,132
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+85 more	1.18.9	1,485

OSV records: GHSA-xrjj-mj9h-534m GO-2022-1144
Also known as: BIT-golang-2022-41717

Charts affected

1,425 by stars

Chart

Latest

Affected images

Radar Score

vcloud-csiclastix

1.6.0

4 of 5 See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.4.0 1.18.9
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.4.0 1.18.9
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.4.0 1.18.9
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.4.0 1.18.9

Open the chart page →

7,386

kube-acp-stackcloudentity

2.28.0

2 of 7 See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	stdlib@go1.18.1	1.18.9
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.13.14	0.4.0 1.18.9

Open the chart page →

20,936

openbankingcloudentity

0.1.9

6 of 6 See more

openbanking cloudentity 0.1.9

6 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
cloudentity/openbanking-quickstart-bank :1.11.1	9402ec4b5016	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.14	0.4.0 1.18.9
cloudentity/openbanking-quickstart-configuration :1.11.1	8a1890eb8265	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.14	0.4.0 1.18.9
cloudentity/openbanking-quickstart-consent-admin-portal :1.11.1	ee83cdd45b7b	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.2	0.4.0 1.18.9
cloudentity/openbanking-quickstart-consent-page :1.11.1	5728654cecb7	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.16.6	0.4.0 1.18.9
cloudentity/openbanking-quickstart-consent-self-service-portal :1.11.1	8ca94ae6acf4	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.2	0.4.0 1.18.9
cloudentity/openbanking-quickstart-financroo-tpp :1.11.1	c04eb10c77b7	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.2	0.4.0 1.18.9

Open the chart page →

18,040

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.16.3	0.4.0 1.18.9

Open the chart page →

25,152

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.17.5	0.4.0 1.18.9

Open the chart page →

6,696

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d stdlib@go1.18.1	0.4.0 1.18.9

Open the chart page →

6,921

pact-brokercloud-native-toolkit

0.3.0

1 of 1 See more

pact-broker cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
pactfoundation/pact-broker :2.101.0.0	a3021fc42834	stdlib@go1.14.4	1.18.9

Open the chart page →

2,814

robot-shopcloud-native-toolkit

1.1.1

2 of 12 See more

robot-shop cloud-native-toolkit 1.1.1

2 of the 12 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
robotshop/rs-dispatch :latest	de81f1d07b02	stdlib@go1.17	1.18.9
robotshop/rs-mongodb :latest	119b545823cd	stdlib@go1.16.3	1.18.9

Open the chart page →

29,594

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.1	0.4.0 1.18.9

Open the chart page →

18,256

ctrox-csi-s3cloudve

0.1.0

1 of 4 See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.16.13	0.4.0 1.18.9

Open the chart page →

3,136

galaxy-depscloudve

1.1.1

2 of 7 See more

galaxy-deps cloudve 1.1.1

2 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq-cluster-operator :1.14.0-scratch-r5	67ac64a9623a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17	0.4.0 1.18.9
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	golang.org/x/net@v0.0.0-20220614195744-fb05da6f9022 stdlib@go1.17	0.4.0 1.18.9

Open the chart page →

10,543

galaxykubemancloudve

2.10.1

2 of 7 See more

galaxykubeman cloudve 2.10.1

2 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.13	0.4.0 1.18.9
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.4.0 1.18.9

Open the chart page →

16,117

janisterminalcloudve

0.1.0

1 of 2 See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.1	0.4.0 1.18.9

Open the chart page →

14,285

openstack-cinder-csicloudve

1.2.0

1 of 5 See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
k8scloudprovider/cinder-csi-plugin :latest	a30c7a2a594a	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.10	0.4.0 1.18.9

Open the chart page →

2,061

proxyinjectorcloudve

0.0.23

1 of 1 See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.1	0.4.0 1.18.9

Open the chart page →

2,853

d2-prometheus-exportercmacrae

0.1.0

1 of 1 See more

d2-prometheus-exporter cmacrae 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
cmacrae/d2-prometheus-exporter :v0.1.0	fc5fecba436e	stdlib@go1.15	1.18.9

Open the chart page →

1,299

kovecmacrae

0.2.0

1 of 1 See more

kove cmacrae 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.2.0	185bfaae750c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.17	0.4.0 1.18.9

Open the chart page →

2,089

kove-deprecationscmacrae

0.1.2

1 of 1 See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.1.0	db1244edefc8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16	0.4.0 1.18.9

Open the chart page →

2,203

lgtmcmacrae

0.1.0

1 of 1 See more

lgtm cmacrae 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
cmacrae/lgtm :0.1.0	dec8d490fe40	golang.org/x/net@v0.0.0-20181108082009-03003ca0c849 stdlib@go1.14.1	0.4.0 1.18.9

Open the chart page →

1,909

door-agentcno

3.0.15

2 of 15 See more

door-agent cno 3.0.15

2 of the 15 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :6f5de117	b6cb6e16f8c9	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.13	0.4.0 1.18.9
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.1	0.4.0 1.18.9

Open the chart page →

19,380

traefik-forward-authcolearendt

0.0.15

1 of 1 See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.4.0 1.18.9

Open the chart page →

2,234

mysqlcomet-mysql-helm

1.0.7

1 of 1 See more

mysql comet-mysql-helm 1.0.7

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mysql :8.4.2	ac80b6e09e5b	stdlib@go1.18.2	1.18.9

Open the chart page →

1,055

cgrccommongroundregistratiecomponent

0.1.0

1 of 3 See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
conduction/cgrc-php :dev	25415534d245	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,572

community-operator-v2community-operator-v2

1.0.0

1 of 2 See more

community-operator-v2 community-operator-v2 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/community-operator-v2 :v1.0.0	7f1bbbe114eb	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.12	0.4.0 1.18.9

Open the chart page →

1,544

conduction-uiconduction-ui

0.1.0

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-php :dev	2744565516e8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

12,906

consentbbconsentbb

2023.12.4

1 of 5 See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
igrantio/bb-consent-api :2023.12.2	2d2ea6546ffe	stdlib@go1.18.8	1.18.9

Open the chart page →

3,181

betaalservicecontacten-catalog

1.0.0

1 of 3 See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
conduction/betaalservice-php :latest	ece1ab544c57	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,209

contactmoment-componentcontactmoment-component

0.1.0

1 of 4 See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

8,408

containers-security-chartscontainers-security

0.1.0

3 of 7 See more

containers-security-charts containers-security 0.1.0

3 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.18.9
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.18.9
falcosecurity/falcosidekick :2.27.0	828ee36cb13a	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.18.1	0.4.0 1.18.9

Open the chart page →

9,146

falcocontainers-security

2.4.6

2 of 2 See more

falco containers-security 2.4.6

2 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.18.9
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.18.9

Open the chart page →

2,540

katibcowboysysop

2.4.2

3 of 4 See more

katib cowboysysop 2.4.2

3 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
kubeflowkatib/katib-controller :v0.12.0	12a28c8a0b41	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.1	0.4.0 1.18.9
kubeflowkatib/katib-db-manager :v0.12.0	db88bf09d88e	golang.org/x/net@v0.0.0-20191021144547-ec77196f6094 stdlib@go1.13.3	0.4.0 1.18.9
kubeflowkatib/katib-ui :v0.12.0	129f0aaba976	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.1	0.4.0 1.18.9

Open the chart page →

6,542

kfservingcowboysysop

1.3.1

1 of 3 See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
kfserving/kfserving-controller :v0.6.1	63d79d04c2e3	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.14	0.4.0 1.18.9

Open the chart page →

3,830

metacontrollercowboysysop

1.2.2

1 of 1 See more

metacontroller cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
metacontrollerio/metacontroller :v2.1.1	0336993b88e4	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.6	0.4.0 1.18.9

Open the chart page →

2,092

mpi-operatorcowboysysop

1.2.2

1 of 1 See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.13	0.4.0 1.18.9

Open the chart page →

2,577

notebook-controllercowboysysop

1.1.2

1 of 1 See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.15.15	0.4.0 1.18.9

Open the chart page →

2,582

quickchartcowboysysop

5.0.0

1 of 1 See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ianw/quickchart :v1.7.1	dc49dd460c37	stdlib@go1.13.1	1.18.9

Open the chart page →

5,489

training-operatorcowboysysop

1.2.2

1 of 1 See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.14.9	0.4.0 1.18.9

Open the chart page →

2,275

crossplane-controllerscrossplane

0.12.0

1 of 1 See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
crossplane/crossplane :v0.12.0	66666e6963af	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.4	0.4.0 1.18.9

Open the chart page →

2,312

oam-kubernetes-runtimecrossplane

0.0.3-71.g0f23590

1 of 2 See more

oam-kubernetes-runtime crossplane 0.0.3-71.g0f23590

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.14	0.4.0 1.18.9

Open the chart page →

2,248

oam-kubernetes-runtime-legacycrossplane

0.3.1-5.g11e1894

1 of 1 See more

oam-kubernetes-runtime-legacy crossplane 0.3.1-5.g11e1894

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.4.0 1.18.9

Open the chart page →

2,231

external-service-operatorcrowdfox

0.1.0

1 of 1 See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.2	0.4.0 1.18.9

Open the chart page →

4,625

electric-mailcryptexlabs

0.0.1

2 of 5 See more

electric-mail cryptexlabs 0.0.1

2 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.7	0.4.0 1.18.9
hashicorp/vault-k8s :0.13.1	bebb03e8e800	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.4.0 1.18.9

Open the chart page →

5,973

purple-piecryptexlabs

0.0.1

2 of 4 See more

purple-pie cryptexlabs 0.0.1

2 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.7	0.4.0 1.18.9
hashicorp/vault-k8s :0.13.1	bebb03e8e800	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.4.0 1.18.9

Open the chart page →

5,973

openldapcsic-charts

0.1.1

1 of 2 See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.4.0 1.18.9

Open the chart page →

5,293

rtcsic-charts

0.1.1

1 of 5 See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/postgres :13.11-bullseye	5c265bf1fd30	stdlib@go1.18.2	1.18.9

Open the chart page →

14,206

wazuhcsic-charts

0.1.0

1 of 4 See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.4.1	21994f40e0da	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.4.0 1.18.9

Open the chart page →

13,937

secrets-store-csi-driver-provider-awscustom

0.2.0

1 of 1 See more

secrets-store-csi-driver-provider-aws custom 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-35-g41dc61e-2022.12.16.20.38	363bd65cd707	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.4.0 1.18.9

Open the chart page →

1,232

irods-csi-drivercyverse

0.12.0

1 of 4 See more

irods-csi-driver cyverse 0.12.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.4.0 1.18.9

Open the chart page →

5,257

domain-exporterd0main-exp0rter

0.1.0

1 of 1 See more

domain-exporter d0main-exp0rter 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.2	0.4.0 1.18.9

Open the chart page →

1,832

home-assistantdamoun

1.1.0

1 of 1 See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	stdlib@go1.17.1	1.18.9

Open the chart page →

6,178

Container images carrying it

1,580 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
linuxserver/calibre-web :version-0.6.12	938810eca3d3	stdlib@go1.16.7	1.18.9	1
linuxserver/cloud9 :latest	45c5fe102ff3	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.17.11	0.4.0 1.18.9	1
linuxserver/smokeping :2.8.2	b7f906899cd3	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.4.0	1
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	golang.org/x/net@v0.0.0-20211004195052-b30845b58a23 stdlib@go1.16.2	0.4.0 1.18.9	1
livekit/livekit-server :v1.0.0	8391fd1b834f	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.10	0.4.0 1.18.9	1
lmierzwa/karma :v0.50	3751e5eed656	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.4.0 1.18.9	1
lmierzwa/karma :v0.70	d417abe7ddb5	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.4.0 1.18.9	1
localstack/localstack :3.1	9d278167f2b7	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.4.0	1
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.6	0.4.0 1.18.9	1
loftsh/jspolicy :0.2.2	25deb9bd2683	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.13	0.4.0 1.18.9	1
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.11	0.4.0 1.18.9	1
logiqai/flash-discovery :v2.0.3	f5b551bca98e	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.4.0	1
logiqai/logiqctl :2.0.4	798306811f2d	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.7	0.4.0 1.18.9	1
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.4.0 1.18.9	1
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.4.0 1.18.9	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.1	0.4.0 1.18.9	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.14.1	0.4.0 1.18.9	1
longhornio/upgrade-responder :v0.2.0	5875cef29348	stdlib@go1.17.13	1.18.9	1
louislam/uptime-kuma :1.22.1	0b55bcb83a1c	stdlib@go1.18.1	1.18.9	1
louislam/uptime-kuma :1.17.1	a4eab252e5a2	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.5	0.4.0 1.18.9	1
louislam/uptime-kuma :1.18.5	a84767d7934f	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.4.0 1.18.9	1
lumenvox/cloud-init-tools :2.0.0	7ff037a71c50	stdlib@go1.17.3	1.18.9	1
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.3	0.4.0 1.18.9	1
macropower/twitch_predictions_recorder :v0.2	1e9c4fb89787	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.4.0 1.18.9	1
macropower/wakatime-exporter :0.1.0	dbb05debb785	stdlib@go1.14.6	1.18.9	1
maldridge/alertmanager-irc-relay :v0.4.1	391de2b76128	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.4	0.4.0 1.18.9	1
mantlenetworkio/l2geth :v0.4.3	6bf383d14291	stdlib@go1.19	1.18.9	1
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	stdlib@go1.17	1.18.9	1
masipcat/wireguard-go :latest	696206e5954d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.4.0	1
masipcat/wireguard-go :0.0.20230223	769f7bb64694	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.4.0	1
matrixdb/custom-external-provisioner :4622a07d7-20220424	7e9ffe249a51	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.8	0.4.0 1.18.9	1
matrixdb/kubebuilder_kube-rbac-proxy :v0.12.0	ed3c7e6291e8	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.18.1	0.4.0 1.18.9	1
matrixdb/rawfile-csi :v0.2.1	95b2e38e913d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.9	0.4.0 1.18.9	1
matrixdb/sig-storage_csi-node-driver-registrar :v2.2.0	ba763bb01ddc	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.4.0 1.18.9	1
matrixdb/sig-storage_livenessprobe :v2.3.0	7ab06fe3d8a7	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.4.0 1.18.9	1
mattermost/focalboard :0.9.0	31078df7a3c8	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.5	0.4.0 1.18.9	1
mattermost/focalboard :0.6.7	f2f987dada52	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.4	0.4.0 1.18.9	1
mattermost/mattermost-app-chaosengine :c153e43	6268954edd67	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.8	0.4.0 1.18.9	1
mbround18/valheim :3.1.0	70bd4da591cd	stdlib@go1.18.1	1.18.9	1
mccutchen/go-httpbin :v2.2.2	5994403ef75b	stdlib@go1.16.2	1.18.9	1
mesosphere/karma :v0.55-d2iq-proxy	4693bb4e0814	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.7	0.4.0 1.18.9	1
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.14.5	0.4.0 1.18.9	1
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.14.5	0.4.0 1.18.9	1
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.14.5	0.4.0 1.18.9	1
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.14.5	0.4.0 1.18.9	1
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.14.5	0.4.0 1.18.9	1
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.14.5	0.4.0 1.18.9	1
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.11	0.4.0 1.18.9	1
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.13.7	0.4.0 1.18.9	1
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.13.8	0.4.0 1.18.9	1