CVE-2022-41717

Medium

Advisory

Published 8 Dec 2022In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.056; 93rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,425; of 17,787 indexed, latest versions
Container images: 1,580; deployed by those charts
Fix available: 2 of 2; affected packages

golang.org/x/net/http2 vulnerable to possible excessive memory growth

Carried by container images the latest versions of 1,425 of 17,787 indexed charts deploy, on 1,580 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+172 more	0.4.0	1,132
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+85 more	1.18.9	1,485

OSV records: GHSA-xrjj-mj9h-534m GO-2022-1144
Also known as: BIT-golang-2022-41717

Charts affected

1,425 by stars

Chart

Latest

Affected images

Radar Score

npre-essentialsphntom

0.1.60

13 of 22 See more

npre-essentials phntom 0.1.60

13 of the 22 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.18.9
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.4.0 1.18.9
grafana/promtail :2.7.0	c16c710f7333	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9 stdlib@go1.19.2	0.4.0 1.18.9
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.18.5	0.4.0 1.18.9
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.5	0.4.0 1.18.9
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/net@v0.0.0-20221012135044-0b7e1fb9d458 stdlib@go1.19.2	0.4.0 1.18.9
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.4.0 1.18.9
quay.io/prometheus-operator/prometheus-operator :v0.61.1	cd7d1a82ef00	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.4.0 1.18.9
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.4.0 1.18.9
quay.io/prometheuscommunity/elasticsearch-exporter :v1.5.0	13a41e8ac836	stdlib@go1.18.4	1.18.9
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.4.0 1.18.9
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.4.0 1.18.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b stdlib@go1.19.3	0.4.0 1.18.9

Open the chart page →

26,840

prometheus-elasticsearch-exporterphntom

4.5.1

1 of 2 See more

prometheus-elasticsearch-exporter phntom 4.5.1

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.18.9

Open the chart page →

2,029

seafilephybros-helm-charts

4.0.1

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	stdlib@go1.19	1.18.9

Open the chart page →

22,146

firehose-corepinax

0.1.1

1 of 2 See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.4.0 1.18.9

Open the chart page →

3,527

firehose-ethereumpinax

0.3.2

1 of 2 See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.4.0 1.18.9

Open the chart page →

7,149

substreams-tier-2pinax

0.0.8

1 of 1 See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/net@v0.0.0-20220812174116-3211cb980234 stdlib@go1.18.5	0.4.0 1.18.9

Open the chart page →

4,938

planectlplanectl

0.7.0

1 of 10 See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine	02419de7eddf	stdlib@go1.18.2	1.18.9

Open the chart page →

25,626

gitlab-runner-operatorpnnl-miscscripts

0.1.6

1 of 1 See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.12	0.4.0 1.18.9

Open the chart page →

11,153

tenant-namespacepnnl-miscscripts

0.6.23

1 of 1 See more

tenant-namespace pnnl-miscscripts 0.6.23

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.4.0 1.18.9

Open the chart page →

2,578

libretimepodzone-charts

0.4.1

1 of 9 See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.18.9

Open the chart page →

11,181

podtato-headportefaix-hub

0.3.0

6 of 6 See more

podtato-head portefaix-hub 0.3.0

6 of the 6 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/podtato-head/entry :latest	c3d9d9c98be7	stdlib@go1.19	1.18.9
ghcr.io/podtato-head/hat :latest	de37ff39a4c0	stdlib@go1.19	1.18.9
ghcr.io/podtato-head/left-arm :latest	97596c95276a	stdlib@go1.19	1.18.9
ghcr.io/podtato-head/left-leg :latest	00bb31622b1e	stdlib@go1.19	1.18.9
ghcr.io/podtato-head/right-arm :latest	5f8f97a60558	stdlib@go1.19	1.18.9
ghcr.io/podtato-head/right-leg :latest	03e125b9279e	stdlib@go1.19	1.18.9

Open the chart page →

5,279

prometheus-bbox-exporterportefaix-hub

0.4.1

1 of 1 See more

prometheus-bbox-exporter portefaix-hub 0.4.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/nlamirault/bbox_exporter :1.0.0	f5dd1f7794c6	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.18.3	0.4.0 1.18.9

Open the chart page →

2,013

prometheus-freebox-exporterportefaix-hub

0.1.1

1 of 1 See more

prometheus-freebox-exporter portefaix-hub 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/nlamirault/freebox-exporter :1.0.0	2d522b664e12	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.4.0 1.18.9

Open the chart page →

1,755

speedtest-exporterportefaix-hub

0.5.0

1 of 1 See more

speedtest-exporter portefaix-hub 0.5.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/danopstech/speedtest_exporter :v0.0.5	99efbe55412b	stdlib@go1.16.6	1.18.9

Open the chart page →

1,209

postgrespostgres

0.1.1

1 of 1 See more

postgres postgres 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/postgres :13.12	ced3ba927f4c	stdlib@go1.18.2	1.18.9

Open the chart page →

4,363

liftbridgepozetron

0.1.1

1 of 1 See more

liftbridge pozetron 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
pozetroninc/liftbridge :v1.1.0	79fd6b9d93e6	golang.org/x/net@v0.0.0-20191021144547-ec77196f6094 stdlib@go1.13.12	0.4.0 1.18.9

Open the chart page →

3,167

Practica_4_helmpr04helm

0.1.0

2 of 7 See more

Practica_4_helm pr04helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.18.9
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.18.9

Open the chart page →

27,649

practica-helmpractica-helm

0.1.0

3 of 7 See more

practica-helm practica-helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mongo :4.4-bionic	3d0e6df9fd5b	stdlib@go1.16.3	1.18.9
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.18.9
slagattollas/weatherservice-practica :latest	68e7f56393fc	stdlib@go1.15.6	1.18.9

Open the chart page →

28,495

cloudwatch-exporterpresto-loadbalancer

0.0.6

1 of 1 See more

cloudwatch-exporter presto-loadbalancer 0.0.6

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
garugaru/aws-cloudwatch-exporter :latest	541852cafda5	stdlib@go1.16.15	1.18.9

Open the chart page →

1,086

hive-metastorepresto-loadbalancer

0.2.3

1 of 1 See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
datappeal/hive-metastore :latest	e38c085a3567	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.4	0.4.0 1.18.9

Open the chart page →

9,605

oauth2-proxypresto-loadbalancer

4.3.18

1 of 2 See more

oauth2-proxy presto-loadbalancer 4.3.18

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v6.1.1	791aef35b8d1	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.4	0.4.0 1.18.9

Open the chart page →

3,958

presto-exporterpresto-loadbalancer

0.0.9

1 of 1 See more

presto-exporter presto-loadbalancer 0.0.9

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
garugaru/presto-exporter :cb666560e9e82d5ae36aef1e663c3d7f51cca9fc	5201314c28f3	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.14.13	0.4.0 1.18.9

Open the chart page →

2,190

presto-loadbalancerpresto-loadbalancer

0.1.16

1 of 1 See more

presto-loadbalancer presto-loadbalancer 0.1.16

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
garugaru/presto-loadbalancer :v0.1.5	89d66d117029	stdlib@go1.15.2	1.18.9

Open the chart page →

2,526

rds-exporterpresto-loadbalancer

0.0.2

1 of 1 See more

rds-exporter presto-loadbalancer 0.0.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
garugaru/aws-cloudwatch-exporter :latest	541852cafda5	stdlib@go1.16.15	1.18.9

Open the chart page →

1,086

trino-exporterpresto-loadbalancer

0.0.12

1 of 1 See more

trino-exporter presto-loadbalancer 0.0.12

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
datappeal/trino-exporter :latest	325b91c2b09e	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.15	0.4.0 1.18.9

Open the chart page →

1,969

trino-loadbalancerpresto-loadbalancer

0.3.1

1 of 1 See more

trino-loadbalancer presto-loadbalancer 0.3.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
datappeal/trino-loadbalancer :sha-950abbae	6b5b9fdb2e6d	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.17.13	0.4.0 1.18.9

Open the chart page →

2,357

procestypecatalogusprocestypecatalogus

1.1.0

1 of 4 See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,429

productenendienstencatalogusproductenendienstencatalogus

1.0.0

1 of 3 See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,510

wp-chartprojet-devops

0.1.0

1 of 2 See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.18.9

Open the chart page →

5,234

alertmanagerprometheus-worawutchan

0.3.0

1 of 1 See more

alertmanager prometheus-worawutchan 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.4.0 1.18.9

Open the chart page →

2,305

prometheus-blackbox-exporterprometheus-worawutchan

4.10.1

1 of 1 See more

prometheus-blackbox-exporter prometheus-worawutchan 4.10.1

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.15.2	0.4.0 1.18.9

Open the chart page →

2,250

prometheus-druid-exporterprometheus-worawutchan

0.9.0

1 of 1 See more

prometheus-druid-exporter prometheus-worawutchan 0.9.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/opstree/druid-exporter :v0.8	3f6d9885cfe2	stdlib@go1.14.6	1.18.9

Open the chart page →

2,090

prometheus-node-exporterprometheus-worawutchan

1.12.0

1 of 1 See more

prometheus-node-exporter prometheus-worawutchan 1.12.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.4.0 1.18.9

Open the chart page →

2,188

prometheus-pushgatewayprometheus-worawutchan

1.5.0

1 of 1 See more

prometheus-pushgateway prometheus-worawutchan 1.5.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.3.0	c0d39b8d4cfe	stdlib@go1.15.2	1.18.9

Open the chart page →

1,285

prometheus-redis-exporterprometheus-worawutchan

4.0.0

1 of 1 See more

prometheus-redis-exporter prometheus-worawutchan 4.0.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.11.1	04d958d209ab	stdlib@go1.15	1.18.9

Open the chart page →

1,315

prometheus-statsd-exporterprometheus-worawutchan

0.1.0

1 of 1 See more

prometheus-statsd-exporter prometheus-worawutchan 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.18.0	d23aca343b86	stdlib@go1.14.7	1.18.9

Open the chart page →

1,315

panproto-application-nldesign

0.1.0

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

8,724

proto-component-commongroundproto-component-commonground

1.0.0

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.4.0 1.18.9

Open the chart page →

7,510

kspanpuckpuck

0.2.4

1 of 1 See more

kspan puckpuck 0.2.4

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/honeycombio/kspan/kspan :0.2	c966a4f8a4b7	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.4.0

Open the chart page →

1,681

seashellpuckpuck

1.2.0

1 of 1 See more

seashell puckpuck 1.2.0

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.4.0

Open the chart page →

4,214

pumperlypumperly

0.1.2

1 of 3 See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
postgis/postgis :17-3.4-alpine	5a1dbedac34e	stdlib@go1.18.2	1.18.9

Open the chart page →

2,853

cdmswebapppyalive-cdmswebapp

0.1.0

2 of 3 See more

cdmswebapp pyalive-cdmswebapp 0.1.0

2 of the 3 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.18.9
sarwansharma/minio :v3	59d1da9385d1	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.3	0.4.0 1.18.9

Open the chart page →

6,667

loki-stackpyalive-cdmswebapp

2.6.5

2 of 4 See more

loki-stack pyalive-cdmswebapp 2.6.5

2 of the 4 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
grafana/loki :2.5.0	f9ef133793af	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.4.0 1.18.9
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.4.0 1.18.9

Open the chart page →

6,526

cf-operatorquarks

2.3.0+0.g27a91cdf

2 of 2 See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.3	0.4.0 1.18.9
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.4	0.4.0 1.18.9

Open the chart page →

11,942

quarksquarks

7.0.1+0.g5396b11

4 of 5 See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.4.0 1.18.9
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.13.15	0.4.0 1.18.9
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.4.0 1.18.9
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.4.0 1.18.9

Open the chart page →

18,197

quarks-statefulsetquarks

0.0.1304-g4b4f2ac5

1 of 1 See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.14.7	0.4.0 1.18.9

Open the chart page →

4,010

ingress-controllerqumine

0.8.500

1 of 1 See more

ingress-controller qumine 0.8.500

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
qumine/ingress-controller :v0.8.5	f2c8a2148381	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.4.0 1.18.9

Open the chart page →

1,533

saleorrc-helm-charts

0.1.1

1 of 5 See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.22.0	ca6b73330616	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15.8	0.4.0 1.18.9

Open the chart page →

3,738

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.4.0 1.18.9

Open the chart page →

15,290

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-41717.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.4.0 1.18.9

Open the chart page →

15,290

Container images carrying it

1,580 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
apache/skywalking-oap-server :9.2.0	133d35d2c263	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.9	0.4.0 1.18.9	1
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.4.0 1.18.9	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.9	0.4.0 1.18.9	1
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.3	0.4.0 1.18.9	1
apecloud/kubeblocks-csi-driver :0.1.3	c93655ccb2d7	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.4.0	1
apecloud/pyroscope :0.37.2	dbca95a15bc1	golang.org/x/net@v0.1.0	0.4.0	1
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.16.4	0.4.0 1.18.9	1
aquasec/kube-bench :v0.6.9	c329d73fea58	stdlib@go1.19	1.18.9	1
aquasec/starboard-operator :0.15.4	be34f709e1ce	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.4.0 1.18.9	1
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.4.0 1.18.9	1
assistiot/authorization_db :latest	c3adbab6a3e7	stdlib@go1.18.2	1.18.9	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.4.0 1.18.9	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	stdlib@go1.18.2	1.18.9	1
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.4.0 1.18.9	1
assistiot/distributed_broker :1.0.0	33e02dad168f	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.4.0 1.18.9	1
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.4.0 1.18.9	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	stdlib@go1.17.10	1.18.9	1
assistiot/identity-manager_db :latest	0d3e6d35f168	stdlib@go1.18.2	1.18.9	1
assistiot/logging_auditing :1.0.0	790dbb198e86	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.17.13	0.4.0 1.18.9	1
assistiot/open_api_backend :1.1.2	30812ba93555	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.6	0.4.0 1.18.9	1
assistiot/smart-orchestrator_helm :latest	9bb46ea14e8e	stdlib@go1.13	1.18.9	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.4.0 1.18.9	1
beanbag/reviewboard :latest	6b840f546e1c	stdlib@go1.18.1	1.18.9	1
bedag/goblackhole :0.2.0	447a88598f4c	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.6	0.4.0 1.18.9	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.17.6	0.4.0 1.18.9	1
bicarus/mx-notifier :1.1.8	bed688d16762	golang.org/x/net@v0.2.0 stdlib@go1.17.6	0.4.0 1.18.9	1
bicarus/wg-access-server :v0.8.2	06cab48e9334	golang.org/x/net@v0.0.0-20220418201149-a630d4f3e7a2 stdlib@go1.19.3	0.4.0 1.18.9	1
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.18.9	1
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	stdlib@go1.18.2	1.18.9	1
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	stdlib@go1.18.2	1.18.9	1
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.4.0 1.18.9	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	stdlib@go1.18.2	1.18.9	1
bitnamilegacy/mariadb :10.6.12-debian-11-r13	15edb5643b73	stdlib@go1.18.2	1.18.9	1
bitnamilegacy/mariadb :10.6.12-debian-11-r16	78847062532a	stdlib@go1.18.2	1.18.9	1
bitnamilegacy/mariadb-galera :10.6.12-debian-11-r16	43a70df0e7c6	stdlib@go1.18.2	1.18.9	1
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	golang.org/x/net@v0.2.0 stdlib@go1.18.2	0.4.0 1.18.9	1
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.4	0.4.0 1.18.9	1
bitnamilegacy/mongodb :3.6.21	3e51da56fc54	stdlib@go1.15.1	1.18.9	1
bitnamilegacy/mongodb :4.4.5	e3c9d6b4bc92	stdlib@go1.15.8	1.18.9	1
bitnamilegacy/mysqld-exporter :0.14.0-debian-11-r103	04768b637c94	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.8	0.4.0 1.18.9	1
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.4	0.4.0 1.18.9	1
bitnamilegacy/postgresql :15.2.0-debian-11-r11	3e65a6b89e38	stdlib@go1.18.2	1.18.9	1
bitnamilegacy/rabbitmq :3.10.8	8f7161d8ce19	stdlib@go1.16.7	1.18.9	1
bitnamilegacy/rabbitmq :3.10.7-debian-11-r4	cf93e2772250	stdlib@go1.16.7	1.18.9	1
bitnamilegacy/rabbitmq-cluster-operator :1.14.0-scratch-r5	67ac64a9623a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17	0.4.0 1.18.9	1
bitnamilegacy/redis :7.0.10-debian-11-r0	59293f5206b7	stdlib@go1.18.2	1.18.9	1
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	stdlib@go1.18.2	1.18.9	1
bitnamilegacy/redis :7.0.8-debian-11-r0	bf01d031ba8c	stdlib@go1.18.2	1.18.9	1
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	golang.org/x/net@v0.0.0-20220614195744-fb05da6f9022 stdlib@go1.17	0.4.0 1.18.9	1
bitnamilegacy/zookeeper :3.8.1-debian-11-r6	dba59d740e13	stdlib@go1.18.2	1.18.9	1