CVE-2022-41717

Medium

Advisory

Published 8 Dec 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.056; 93rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,413; of 17,781 indexed, latest versions
Container images: 1,560; deployed by those charts
Fix available: 2 of 2; affected packages

golang.org/x/net/http2 vulnerable to possible excessive memory growth

Carried by container images the latest versions of 1,413 of 17,781 indexed charts deploy, on 1,560 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+171 more	0.4.0	1,116
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+85 more	1.18.9	1,467

OSV records: GHSA-xrjj-mj9h-534m GO-2022-1144
Also known as: BIT-golang-2022-41717

Charts affected

1,413 by stars

Chart

Latest

Affected images

Radar Score

kube-acp-stackcloudentity

2.28.0

2 of 7 See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	stdlib@go1.18.1	1.18.9
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.13.14	0.4.0 1.18.9

Open the chart page →

20,900

openbankingcloudentity

0.1.9

6 of 6 See more

openbanking cloudentity 0.1.9

6 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
cloudentity/openbanking-quickstart-bank :1.11.1	9402ec4b5016	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.14	0.4.0 1.18.9
cloudentity/openbanking-quickstart-configuration :1.11.1	8a1890eb8265	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.14	0.4.0 1.18.9
cloudentity/openbanking-quickstart-consent-admin-portal :1.11.1	ee83cdd45b7b	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.2	0.4.0 1.18.9
cloudentity/openbanking-quickstart-consent-page :1.11.1	5728654cecb7	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.16.6	0.4.0 1.18.9
cloudentity/openbanking-quickstart-consent-self-service-portal :1.11.1	8ca94ae6acf4	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.2	0.4.0 1.18.9
cloudentity/openbanking-quickstart-financroo-tpp :1.11.1	c04eb10c77b7	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.2	0.4.0 1.18.9

Open the chart page →

18,040

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.16.3	0.4.0 1.18.9

Open the chart page →

25,151

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.17.5	0.4.0 1.18.9

Open the chart page →

6,695

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d stdlib@go1.18.1	0.4.0 1.18.9

Open the chart page →

6,921

pact-brokercloud-native-toolkit

0.3.0

1 of 1 See more

pact-broker cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
pactfoundation/pact-broker :2.101.0.0	a3021fc42834	stdlib@go1.14.4	1.18.9

Open the chart page →

2,814

robot-shopcloud-native-toolkit

1.1.1

2 of 12 See more

robot-shop cloud-native-toolkit 1.1.1

2 of the 12 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
robotshop/rs-dispatch :latest	de81f1d07b02	stdlib@go1.17	1.18.9
robotshop/rs-mongodb :latest	119b545823cd	stdlib@go1.16.3	1.18.9

Open the chart page →

29,555

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.1	0.4.0 1.18.9

Open the chart page →

18,293

ctrox-csi-s3cloudve

0.1.0

1 of 4 See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.16.13	0.4.0 1.18.9

Open the chart page →

3,136

galaxy-depscloudve

1.1.1

2 of 7 See more

galaxy-deps cloudve 1.1.1

2 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq-cluster-operator :1.14.0-scratch-r5	67ac64a9623a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17	0.4.0 1.18.9
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	golang.org/x/net@v0.0.0-20220614195744-fb05da6f9022 stdlib@go1.17	0.4.0 1.18.9

Open the chart page →

10,531

galaxykubemancloudve

2.10.1

2 of 7 See more

galaxykubeman cloudve 2.10.1

2 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.13	0.4.0 1.18.9
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.4.0 1.18.9

Open the chart page →

16,069

janisterminalcloudve

0.1.0

1 of 2 See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.1	0.4.0 1.18.9

Open the chart page →

14,270

openstack-cinder-csicloudve

1.2.0

1 of 5 See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
k8scloudprovider/cinder-csi-plugin :latest	a30c7a2a594a	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.10	0.4.0 1.18.9

Open the chart page →

2,061

proxyinjectorcloudve

0.0.23

1 of 1 See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.1	0.4.0 1.18.9

Open the chart page →

2,853

d2-prometheus-exportercmacrae

0.1.0

1 of 1 See more

d2-prometheus-exporter cmacrae 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
cmacrae/d2-prometheus-exporter :v0.1.0	fc5fecba436e	stdlib@go1.15	1.18.9

Open the chart page →

1,299

kovecmacrae

0.2.0

1 of 1 See more

kove cmacrae 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.2.0	185bfaae750c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.17	0.4.0 1.18.9

Open the chart page →

2,089

kove-deprecationscmacrae

0.1.2

1 of 1 See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.1.0	db1244edefc8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16	0.4.0 1.18.9

Open the chart page →

2,203

lgtmcmacrae

0.1.0

1 of 1 See more

lgtm cmacrae 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
cmacrae/lgtm :0.1.0	dec8d490fe40	golang.org/x/net@v0.0.0-20181108082009-03003ca0c849 stdlib@go1.14.1	0.4.0 1.18.9

Open the chart page →

1,909

door-agentcno

3.0.15

2 of 15 See more

door-agent cno 3.0.15

2 of the 15 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :6f5de117	b6cb6e16f8c9	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.13	0.4.0 1.18.9
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.1	0.4.0 1.18.9

Open the chart page →

19,338

traefik-forward-authcolearendt

0.0.15

1 of 1 See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.4.0 1.18.9

Open the chart page →

2,234

mysqlcomet-mysql-helm

1.0.7

1 of 1 See more

mysql comet-mysql-helm 1.0.7

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mysql :8.4.2	ac80b6e09e5b	stdlib@go1.18.2	1.18.9

Open the chart page →

1,055

cgrccommongroundregistratiecomponent

0.1.0

1 of 3 See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
conduction/cgrc-php :dev	25415534d245	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,572

community-operator-v2community-operator-v2

1.0.0

1 of 2 See more

community-operator-v2 community-operator-v2 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/community-operator-v2 :v1.0.0	7f1bbbe114eb	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.12	0.4.0 1.18.9

Open the chart page →

1,544

conduction-uiconduction-ui

0.1.0

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-php :dev	2744565516e8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

12,907

consentbbconsentbb

2023.12.4

1 of 5 See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
igrantio/bb-consent-api :2023.12.2	2d2ea6546ffe	stdlib@go1.18.8	1.18.9

Open the chart page →

3,181

betaalservicecontacten-catalog

1.0.0

1 of 3 See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
conduction/betaalservice-php :latest	ece1ab544c57	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,209

contactmoment-componentcontactmoment-component

0.1.0

1 of 4 See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

8,408

containers-security-chartscontainers-security

0.1.0

3 of 7 See more

containers-security-charts containers-security 0.1.0

3 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.18.9
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.18.9
falcosecurity/falcosidekick :2.27.0	828ee36cb13a	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.18.1	0.4.0 1.18.9

Open the chart page →

9,146

falcocontainers-security

2.4.6

2 of 2 See more

falco containers-security 2.4.6

2 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.18.9
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.18.9

Open the chart page →

2,540

katibcowboysysop

2.4.2

3 of 4 See more

katib cowboysysop 2.4.2

3 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
kubeflowkatib/katib-controller :v0.12.0	12a28c8a0b41	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.1	0.4.0 1.18.9
kubeflowkatib/katib-db-manager :v0.12.0	db88bf09d88e	golang.org/x/net@v0.0.0-20191021144547-ec77196f6094 stdlib@go1.13.3	0.4.0 1.18.9
kubeflowkatib/katib-ui :v0.12.0	129f0aaba976	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.1	0.4.0 1.18.9

Open the chart page →

6,542

kfservingcowboysysop

1.3.1

1 of 3 See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
kfserving/kfserving-controller :v0.6.1	63d79d04c2e3	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.14	0.4.0 1.18.9

Open the chart page →

3,830

metacontrollercowboysysop

1.2.2

1 of 1 See more

metacontroller cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
metacontrollerio/metacontroller :v2.1.1	0336993b88e4	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.6	0.4.0 1.18.9

Open the chart page →

2,092

mpi-operatorcowboysysop

1.2.2

1 of 1 See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.13	0.4.0 1.18.9

Open the chart page →

2,577

notebook-controllercowboysysop

1.1.2

1 of 1 See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.15.15	0.4.0 1.18.9

Open the chart page →

2,582

quickchartcowboysysop

5.0.0

1 of 1 See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ianw/quickchart :v1.7.1	dc49dd460c37	stdlib@go1.13.1	1.18.9

Open the chart page →

5,488

training-operatorcowboysysop

1.2.2

1 of 1 See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.14.9	0.4.0 1.18.9

Open the chart page →

2,275

crossplane-controllerscrossplane

0.12.0

1 of 1 See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
crossplane/crossplane :v0.12.0	66666e6963af	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.4	0.4.0 1.18.9

Open the chart page →

2,312

oam-kubernetes-runtimecrossplane

0.0.3-71.g0f23590

1 of 2 See more

oam-kubernetes-runtime crossplane 0.0.3-71.g0f23590

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.14	0.4.0 1.18.9

Open the chart page →

2,248

oam-kubernetes-runtime-legacycrossplane

0.3.1-5.g11e1894

1 of 1 See more

oam-kubernetes-runtime-legacy crossplane 0.3.1-5.g11e1894

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.4.0 1.18.9

Open the chart page →

2,231

external-service-operatorcrowdfox

0.1.0

1 of 1 See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.2	0.4.0 1.18.9

Open the chart page →

4,624

electric-mailcryptexlabs

0.0.1

2 of 5 See more

electric-mail cryptexlabs 0.0.1

2 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.7	0.4.0 1.18.9
hashicorp/vault-k8s :0.13.1	bebb03e8e800	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.4.0 1.18.9

Open the chart page →

5,973

purple-piecryptexlabs

0.0.1

2 of 4 See more

purple-pie cryptexlabs 0.0.1

2 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.7	0.4.0 1.18.9
hashicorp/vault-k8s :0.13.1	bebb03e8e800	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.4.0 1.18.9

Open the chart page →

5,973

openldapcsic-charts

0.1.1

1 of 2 See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.4.0 1.18.9

Open the chart page →

5,293

rtcsic-charts

0.1.1

1 of 5 See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/postgres :13.11-bullseye	5c265bf1fd30	stdlib@go1.18.2	1.18.9

Open the chart page →

15,380

wazuhcsic-charts

0.1.0

1 of 4 See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.4.1	21994f40e0da	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.4.0 1.18.9

Open the chart page →

13,852

secrets-store-csi-driver-provider-awscustom

0.2.0

1 of 1 See more

secrets-store-csi-driver-provider-aws custom 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-35-g41dc61e-2022.12.16.20.38	363bd65cd707	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.4.0 1.18.9

Open the chart page →

1,232

irods-csi-drivercyverse

0.12.0

1 of 4 See more

irods-csi-driver cyverse 0.12.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.4.0 1.18.9

Open the chart page →

5,218

domain-exporterd0main-exp0rter

0.1.0

1 of 1 See more

domain-exporter d0main-exp0rter 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.2	0.4.0 1.18.9

Open the chart page →

1,832

home-assistantdamoun

1.1.0

1 of 1 See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	stdlib@go1.17.1	1.18.9

Open the chart page →

6,179

speedtest-exporterdamoun

1.0.6

1 of 1 See more

speedtest-exporter damoun 1.0.6

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/danopstech/speedtest_exporter :v0.0.5	99efbe55412b	stdlib@go1.16.6	1.18.9

Open the chart page →

1,209

Container images carrying it

1,560 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.1	0.4.0 1.18.9	2
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.4.0 1.18.9	2
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.4.0 1.18.9	2
library/cassandra :4.1.3	7cbcec0086ac	stdlib@go1.18.2	1.18.9	2
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9	0.4.0	2
library/influxdb :2.7	b8d940ca9376	stdlib@go1.18.2	1.18.9	2
library/mariadb :10.8.3	0abf60f81588	stdlib@go1.16.7	1.18.9	2
library/mariadb :10.10	334b315c10e5	stdlib@go1.18.2	1.18.9	2
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.18.9	2
library/mysql :8.2.0	212fe73edca5	stdlib@go1.18.2	1.18.9	2
library/mysql :8.4.2	ac80b6e09e5b	stdlib@go1.18.2	1.18.9	2
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.18.9	2
library/postgres :16.1	09f23e02d766	stdlib@go1.18.2	1.18.9	2
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.18.9	2
library/postgres :9.6	caddd35b05cd	stdlib@go1.16.7	1.18.9	2
library/postgres :16.4	e62fbf9d3e2b	stdlib@go1.18.2	1.18.9	2
library/redis	148bb5411c18	stdlib@go1.18.2	1.18.9	2
library/redis :7.2.3	a7cee7c8178f	stdlib@go1.18.2	1.18.9	2
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.4.0 1.18.9	2
library/zookeeper :3.9.5	f258365d4882	stdlib@go1.18.1	1.18.9	2
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.4.0 1.18.9	2
maxrocketinternet/soti-mobicontrol-exporter :0.6	1a281b76efa3	stdlib@go1.14	1.18.9	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.4.0 1.18.9	2
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.15.5	0.4.0 1.18.9	2
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.17.4	0.4.0 1.18.9	2
natsio/nats-account-server :1.0.0	a3381560aab6	stdlib@go1.16.6	1.18.9	2
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.1	0.4.0 1.18.9	2
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.18.9	2
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.18.9	2
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.18.9	2
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.4.0 1.18.9	2
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.4.0 1.18.9	2
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.2	0.4.0 1.18.9	2
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.13.4	0.4.0 1.18.9	2
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	stdlib@go1.14.4	1.18.9	2
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.5	0.4.0 1.18.9	2
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.13.8	0.4.0 1.18.9	2
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.18.9	2
pottava/s3-proxy :2.0	20a0bcb15f76	stdlib@go1.13.7	1.18.9	2
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.15.2	0.4.0 1.18.9	2
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.13.10	0.4.0 1.18.9	2
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.15.2	0.4.0 1.18.9	2
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.18.9	2
prom/pushgateway :v1.3.0	c0d39b8d4cfe	stdlib@go1.15.2	1.18.9	2
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.18.9	2
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.4.0 1.18.9	2
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80	0.4.0	2
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.3	0.4.0 1.18.9	2
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.4.0 1.18.9	2
squareup/ghostunnel :v1.5.2	70f4cf270425	golang.org/x/net@v0.0.0-20191003171128-d98b1b443823 stdlib@go1.13.4	0.4.0 1.18.9	2