CVE-2022-41717

Medium

Advisory

Published 8 Dec 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.056; 93rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,413; of 17,781 indexed, latest versions
Container images: 1,560; deployed by those charts
Fix available: 2 of 2; affected packages

golang.org/x/net/http2 vulnerable to possible excessive memory growth

Carried by container images the latest versions of 1,413 of 17,781 indexed charts deploy, on 1,560 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+171 more	0.4.0	1,116
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+85 more	1.18.9	1,467

OSV records: GHSA-xrjj-mj9h-534m GO-2022-1144
Also known as: BIT-golang-2022-41717

Charts affected

1,413 by stars

Chart

Latest

Affected images

Radar Score

kubedb-oneappscode

2023.12.28

2 of 10 See more

kubedb-one appscode 2023.12.28

2 of the 10 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.4.0 1.18.9
ghcr.io/stashed/stash-enterprise :v0.32.0	e9bde36e34b7	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.18	0.4.0 1.18.9

Open the chart page →

15,200

kubedb-provider-azureappscode

2026.7.10

1 of 1 See more

kubedb-provider-azure appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/provider-azure :v0.27.0	aa0c8526ae5e	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.3	0.4.0 1.18.9

Open the chart page →

2,705

kubedb-provider-gcpappscode

2026.7.10

1 of 2 See more

kubedb-provider-gcp appscode 2026.7.10

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/provider-gcp :v0.27.0	a1d4cf8b8fe1	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.1	0.4.0 1.18.9

Open the chart page →

3,033

kubedb-ui-serverappscode

2021.12.21

1 of 1 See more

kubedb-ui-server appscode 2021.12.21

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
kubedb/kubedb-ui-server :v0.0.1_linux_amd64	7d27865514ee	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.8	0.4.0 1.18.9

Open the chart page →

2,047

kubeform-provider-awsappscode

2023.11.1

1 of 1 See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/kubeform/provider-aws :v0.0.1	e3d1f1302e49	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.1	0.4.0 1.18.9

Open the chart page →

2,796

kubeform-provider-azureappscode

2023.11.1

1 of 1 See more

kubeform-provider-azure appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/kubeform/provider-azure :v0.0.1	ac8459f70f85	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.1	0.4.0 1.18.9

Open the chart page →

2,716

kubeform-provider-gcpappscode

2023.11.1

1 of 1 See more

kubeform-provider-gcp appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/kubeform/provider-gcp :v0.0.1	af77073c184f	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.1	0.4.0 1.18.9

Open the chart page →

2,743

service-gatewayappscode

2026.9.11

1 of 3 See more

service-gateway appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/echoserver :v20221109	fa56a9251de6	stdlib@go1.19	1.18.9

Open the chart page →

2,076

service-presetsappscode

2024.2.11

1 of 1 See more

service-presets appscode 2024.2.11

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/echoserver :v20221109-7ee2f3e	fa56a9251de6	stdlib@go1.19	1.18.9

Open the chart page →

823

stash-communityappscode

0.42.0

1 of 4 See more

stash-community appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.4.0 1.18.9

Open the chart page →

3,661

statefulsetappscode

0.0.1

1 of 3 See more

statefulset appscode 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kube-rbac-proxy :v0.11.0	0df4ae70e3bd	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.4.0 1.18.9

Open the chart page →

2,732

appwriteappwrite-helm

1.3.2

2 of 8 See more

appwrite appwrite-helm 1.3.2

2 of the 8 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :10.6.12-debian-11-r13	15edb5643b73	stdlib@go1.18.2	1.18.9
bitnamilegacy/redis :7.0.10-debian-11-r0	59293f5206b7	stdlib@go1.18.2	1.18.9

Open the chart page →

9,847

harbor-scanner-trivyaqua-helm

0.17.0

1 of 1 See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.16.4	0.4.0 1.18.9

Open the chart page →

5,202

argocdargo-helm-charts

1.0.0

1 of 3 See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.18.9

Open the chart page →

7,300

arma-reforgerarma-reforger

0.5.3

2 of 8 See more

arma-reforger arma-reforger 0.5.3

2 of the 8 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.5.1	28fe26c8b8b1	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.4.0 1.18.9
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.4.0 1.18.9

Open the chart page →

23,353

cluster-autoscalerarzu

9.19.1

1 of 1 See more

cluster-autoscaler arzu 9.19.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
breton/cool :dev	41b1bb483aa2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.4.0 1.18.9

Open the chart page →

1,773

itera-lmaarzu

1.34.60

4 of 6 See more

itera-lma arzu 1.34.60

4 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
grafana/grafana :9.0.1	a738d0744784	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.11	0.4.0 1.18.9
quay.io/prometheus-operator/prometheus-operator :v0.57.0	a2d502c204f9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.10	0.4.0 1.18.9
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.4.0 1.18.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.4.0 1.18.9

Open the chart page →

8,608

authorizationassist-iot-authorisation

0.1.0

1 of 2 See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
assistiot/authorization_db :latest	c3adbab6a3e7	stdlib@go1.18.2	1.18.9

Open the chart page →

5,537

dltkvassist-iot-data-integrity-verification

0.2.0

4 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

4 of the 9 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.4.0 1.18.9
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.4.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.4.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.4.0

Open the chart page →

77,706

dltflassist-iot-dlt-based-fl

0.2.0

4 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

4 of the 9 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.4.0 1.18.9
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.4.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.4.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.4.0

Open the chart page →

77,706

fllocaloperationsassist-iot-fl-local-operations

1.1.0

1 of 3 See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	stdlib@go1.17.10	1.18.9

Open the chart page →

3,786

fl-orchestrator-guiassist-iot-fl-orchestrator

0.1.0

1 of 3 See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	stdlib@go1.17.10	1.18.9

Open the chart page →

9,369

flrepositorydbassist-iot-fl-repository

1.1.0

1 of 2 See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	stdlib@go1.17.10	1.18.9

Open the chart page →

4,367

idmassist-iot-identity-manager

0.1.0

1 of 2 See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
assistiot/identity-manager_db :latest	0d3e6d35f168	stdlib@go1.18.2	1.18.9

Open the chart page →

13,352

locationprocessingassist-iot-location-processing

1.0.0

1 of 3 See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.18.9

Open the chart page →

10,061

openapiassist-iot-open-api-management

0.2.2

2 of 6 See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
assistiot/open_api_backend :1.1.2	30812ba93555	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.6	0.4.0 1.18.9
kong/kubernetes-ingress-controller :2.3	5e66021b64a8	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.18	0.4.0 1.18.9

Open the chart page →

18,277

performanceandusagediagnosisassist-iot-pud

1.0.0

4 of 7 See more

performanceandusagediagnosis assist-iot-pud 1.0.0

4 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
grafana/grafana :9.1.1	9746858c20e6	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de stdlib@go1.17.12	0.4.0 1.18.9
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.18.9
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.4.0 1.18.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.5	0.4.0 1.18.9

Open the chart page →

8,556

resource-provisioningassist-iot-resource-provisioning

1.0.0

1 of 7 See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.18.9

Open the chart page →

8,032

smartorchestratorassist-iot-smart-orchestrator

4.0.0

3 of 14 See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
assistiot/smart-orchestrator_helm :latest	9bb46ea14e8e	stdlib@go1.13	1.18.9
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.18.9
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.18.9

Open the chart page →

45,363

astrotrekastria

0.0.2

1 of 4 See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	stdlib@go1.19.1	1.18.9

Open the chart page →

32,501

evm-faucetastria

0.1.5

1 of 1 See more

evm-faucet astria 0.1.5

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/ria-faucet :0.0.1	a06c8ebef427	stdlib@go1.17.13	1.18.9

Open the chart page →

1,764

graph-nodeastria

0.2.2

1 of 3 See more

graph-node astria 0.2.2

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.17.0	803fac58ba15	golang.org/x/net@v0.1.0 stdlib@go1.19.1	0.4.0 1.18.9

Open the chart page →

5,495

sequencerastria

4.0.0

1 of 3 See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
rclone/rclone :1.56.0	f2fc45c8bc57	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d stdlib@go1.16.6	0.4.0 1.18.9

Open the chart page →

6,298

phonebook-chartasumankamberoglu

0.1.5

1 of 3 See more

phonebook-chart asumankamberoglu 0.1.5

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.18.9

Open the chart page →

3,176

asya-playgroundasya

1.1.3

1 of 1 See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
localstack/localstack :3.1	9d278167f2b7	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.4.0

Open the chart page →

9,412

hcloud-csi-driveratem18

1.5.1

2 of 6 See more

hcloud-csi-driver atem18 1.5.1

2 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-csi-driver :1.5.1	41dce5b33644	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.3	0.4.0 1.18.9
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.4.0 1.18.9

Open the chart page →

6,491

attestkeepattestkeep

1.1.0

1 of 2 See more

attestkeep attestkeep 1.1.0

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/postgres :16.4-alpine	5660c2cbfea5	stdlib@go1.18.2	1.18.9

Open the chart page →

1,588

authorization-componentauthorization-component

1.0.0

1 of 3 See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/authorization-component-php :latest	94a749392fcf	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,561

okd-webhookav1o-charts

0.1.0

1 of 1 See more

okd-webhook av1o-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
registry.gitlab.com/av1o/okd-webhook :v0.1.0	28c3e5eb2650	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16	0.4.0 1.18.9

Open the chart page →

1,727

istio-discoveryavesha

1.16.0

1 of 1 See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
istio/pilot :1.16.0	ac0284d75ec9	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9 stdlib@go1.19.3	0.4.0 1.18.9

Open the chart page →

6,908

amazon-ec2-metadata-mockaws

1.11.2

1 of 1 See more

amazon-ec2-metadata-mock aws 1.11.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/amazon-ec2-metadata-mock :v1.11.2	dd02d3569da0	stdlib@go1.17.13	1.18.9

Open the chart page →

860

appmesh-jaegeraws

1.0.3

1 of 1 See more

appmesh-jaeger aws 1.0.3

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.29	42822be7888b	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.17.3	0.4.0 1.18.9

Open the chart page →

2,480

appmesh-prometheusaws

1.0.3

1 of 2 See more

appmesh-prometheus aws 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.4.0 1.18.9

Open the chart page →

2,939

aws-node-termination-handler-2aws

0.2.0

2 of 2 See more

aws-node-termination-handler-2 aws 0.2.0

2 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller :v2.0.0-beta	9637c80dd23f	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.3	0.4.0 1.18.9
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook :v2.0.0-beta	86b0f7243250	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.3	0.4.0 1.18.9

Open the chart page →

2,952

aws-sigv4-proxy-admission-controlleraws

0.1.2

1 of 1 See more

aws-sigv4-proxy-admission-controller aws 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller :1.0	67b89ae52240	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.3	0.4.0 1.18.9

Open the chart page →

2,139

azure-advanced-backupazure-advanced-backup

0.4.1

1 of 1 See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/dodevops/azure-advanced-backup :0.4.0	1041d4449e49	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.9	0.4.0 1.18.9

Open the chart page →

4,568

ambassadorazureorkestra

6.7.9

1 of 2 See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
datawire/aes :1.13.6	2beb65062c8b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.4.0 1.18.9

Open the chart page →

5,521

helm-controllerazureorkestra

0.1.1

2 of 2 See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
fluxcd/helm-controller :v0.9.0	92b891e495d8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.10	0.4.0 1.18.9
fluxcd/source-controller :v0.10.0	31a8c79a6803	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.10	0.4.0 1.18.9

Open the chart page →

7,705

keptn-addonsazureorkestra

0.1.0

4 of 4 See more

keptn-addons azureorkestra 0.1.0

4 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
keptn/distributor :0.8.3	6bc3df9e0d6a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.2	0.4.0 1.18.9
keptn/distributor :0.8.4	72e17527a4f9	stdlib@go1.16.2	1.18.9
keptncontrib/prometheus-service :0.6.0	29969dd547de	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.13.7	0.4.0 1.18.9
keptnsandbox/job-executor-service :0.1.3	6e6d323dd7ae	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.2	0.4.0 1.18.9

Open the chart page →

10,621

prometheusazureorkestra

14.8.0

5 of 6 See more

prometheus azureorkestra 14.8.0

5 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.18.9
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.18.9
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.4.0 1.18.9
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.4.0 1.18.9
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.4.0 1.18.9

Open the chart page →

9,661

Container images carrying it

1,560 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.1	0.4.0 1.18.9	2
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.4.0 1.18.9	2
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.4.0 1.18.9	2
library/cassandra :4.1.3	7cbcec0086ac	stdlib@go1.18.2	1.18.9	2
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9	0.4.0	2
library/influxdb :2.7	b8d940ca9376	stdlib@go1.18.2	1.18.9	2
library/mariadb :10.8.3	0abf60f81588	stdlib@go1.16.7	1.18.9	2
library/mariadb :10.10	334b315c10e5	stdlib@go1.18.2	1.18.9	2
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.18.9	2
library/mysql :8.2.0	212fe73edca5	stdlib@go1.18.2	1.18.9	2
library/mysql :8.4.2	ac80b6e09e5b	stdlib@go1.18.2	1.18.9	2
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.18.9	2
library/postgres :16.1	09f23e02d766	stdlib@go1.18.2	1.18.9	2
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.18.9	2
library/postgres :9.6	caddd35b05cd	stdlib@go1.16.7	1.18.9	2
library/postgres :16.4	e62fbf9d3e2b	stdlib@go1.18.2	1.18.9	2
library/redis	148bb5411c18	stdlib@go1.18.2	1.18.9	2
library/redis :7.2.3	a7cee7c8178f	stdlib@go1.18.2	1.18.9	2
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.4.0 1.18.9	2
library/zookeeper :3.9.5	f258365d4882	stdlib@go1.18.1	1.18.9	2
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.4.0 1.18.9	2
maxrocketinternet/soti-mobicontrol-exporter :0.6	1a281b76efa3	stdlib@go1.14	1.18.9	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.4.0 1.18.9	2
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.15.5	0.4.0 1.18.9	2
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.17.4	0.4.0 1.18.9	2
natsio/nats-account-server :1.0.0	a3381560aab6	stdlib@go1.16.6	1.18.9	2
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.1	0.4.0 1.18.9	2
natsio/nats-server-config-reloader :0.7.2	911ce7ed2f55	stdlib@go1.19	1.18.9	2
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	stdlib@go1.19	1.18.9	2
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.18.9	2
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.4.0 1.18.9	2
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.4.0 1.18.9	2
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.2	0.4.0 1.18.9	2
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.13.4	0.4.0 1.18.9	2
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	stdlib@go1.14.4	1.18.9	2
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.5	0.4.0 1.18.9	2
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.13.8	0.4.0 1.18.9	2
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.18.9	2
pottava/s3-proxy :2.0	20a0bcb15f76	stdlib@go1.13.7	1.18.9	2
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.15.2	0.4.0 1.18.9	2
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.13.10	0.4.0 1.18.9	2
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.15.2	0.4.0 1.18.9	2
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.18.9	2
prom/pushgateway :v1.3.0	c0d39b8d4cfe	stdlib@go1.15.2	1.18.9	2
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.18.9	2
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.4.0 1.18.9	2
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80	0.4.0	2
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.3	0.4.0 1.18.9	2
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.4.0 1.18.9	2
squareup/ghostunnel :v1.5.2	70f4cf270425	golang.org/x/net@v0.0.0-20191003171128-d98b1b443823 stdlib@go1.13.4	0.4.0 1.18.9	2