CVE-2022-41723

High

Advisory

Published 16 Feb 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.046; 91st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,517; of 17,790 indexed, latest versions
Container images: 1,698; deployed by those charts
Fix available: 2 of 2; affected packages

golang.org/x/net vulnerable to Uncontrolled Resource Consumption

Carried by container images the latest versions of 1,517 of 17,790 indexed charts deploy, on 1,698 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+175 more	0.7.0	1,206
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+90 more	1.19.6	1,634

OSV records: GHSA-vvpx-j8f3-3w6h GO-2023-1571
Also known as: BIT-golang-2022-41723

Charts affected

1,517 by stars

Chart

Latest

Affected images

Radar Score

cranekubesphere-stable

0.5.2

3 of 3 See more

crane kubesphere-stable 0.5.2

3 of the 3 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.2	0.7.0 1.19.6
gocrane/crane-scheduler-controller :0.1.23	a2d7e60576f9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.2	0.7.0 1.19.6
gocrane/craned :v0.5.1	a1400909118c	stdlib@go1.17.2	1.19.6

Open the chart page →

8,902

csi-qingcloudkubesphere-stable

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

6 of the 6 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.7.0 1.19.6
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.7.0 1.19.6
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.7.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.7.0 1.19.6
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.7.0 1.19.6
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.7.0 1.19.6

Open the chart page →

12,444

curvefs-csikubesphere-stable

0.1.0

1 of 3 See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.7.0 1.19.6

Open the chart page →

2,831

deepflowkubesphere-stable

6.2.606

4 of 8 See more

deepflow kubesphere-stable 6.2.606

4 of the 8 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	stdlib@go1.18.3	1.19.6
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	stdlib@go1.18.10	1.19.6
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.1	0.7.0 1.19.6
deepflowce/mysql :8.0.31	3d7ae561cf60	stdlib@go1.16.7	1.19.6

Open the chart page →

18,420

edgemeshkubesphere-stable

0.1.0

1 of 2 See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.11	0.7.0 1.19.6

Open the chart page →

4,108

iomeshkubesphere-stable

1.1.0

13 of 25 See more

iomesh kubesphere-stable 1.1.0

13 of the 25 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.7.0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.7.0
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.7	0.7.0 1.19.6
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.7.0 1.19.6
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.2	0.7.0 1.19.6
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	stdlib@go1.19	1.19.6
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.1	0.7.0 1.19.6
iomesh/livenessprobe :v2.8.0	560f01510f99	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.7.0 1.19.6
iomesh/localpv-manager :v0.2.0	f13deacac3f4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.7.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.7.0 1.19.6
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.7.0 1.19.6
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.7.0 1.19.6
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	stdlib@go1.19	1.19.6

Open the chart page →

48,954

IOMeshkubesphere-stable

1.2.0

12 of 25 See more

IOMesh kubesphere-stable 1.2.0

12 of the 25 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.7.0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.7.0
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.7.0 1.19.6
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.2	0.7.0 1.19.6
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	stdlib@go1.19	1.19.6
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.1	0.7.0 1.19.6
iomesh/livenessprobe :v2.8.0	560f01510f99	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.7.0 1.19.6
iomesh/localpv-manager :v0.2.0	f13deacac3f4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.7.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.7.0 1.19.6
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.7.0 1.19.6
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.7.0 1.19.6
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	stdlib@go1.19	1.19.6

Open the chart page →

46,639

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.13.10	0.7.0 1.19.6
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.6	0.7.0 1.19.6

Open the chart page →

14,401

aws-fsx-csi-driverkubesphere-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.8	0.7.0 1.19.6

Open the chart page →

1,594

ccm-qingcloudkubesphere-test

0.1.0

1 of 1 See more

ccm-qingcloud kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.19.6

Open the chart page →

1,540

cni-hostnickubesphere-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.3	0.7.0 1.19.6

Open the chart page →

2,443

csi-neonsankubesphere-test

1.3.0

6 of 6 See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.7.0 1.19.6
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.14.4	0.7.0 1.19.6
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.7.0 1.19.6
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.7.0 1.19.6
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.7.0 1.19.6
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.7.0 1.19.6

Open the chart page →

18,526

csi-qingcloudkubesphere-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.7.0 1.19.6
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.7.0 1.19.6
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.7.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.7.0 1.19.6
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.7.0 1.19.6
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.7.0 1.19.6

Open the chart page →

12,444

curvefs-csikubesphere-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.7.0 1.19.6

Open the chart page →

2,831

mongodbkubesphere-test

0.3.2

1 of 2 See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
mikefarah/yq :2.4.1	6fc625c402de	stdlib@go1.13.3	1.19.6

Open the chart page →

9,631

online-boutiquekubesphere-test

0.1.0

8 of 11 See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.7.0 1.19.6
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.10	0.7.0 1.19.6
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.7.0 1.19.6
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7 stdlib@go1.15.10	0.7.0 1.19.6
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.7.0 1.19.6
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7 stdlib@go1.15.10	0.7.0 1.19.6
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.7.0 1.19.6
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.7.0 1.19.6

Open the chart page →

26,075

openelbkubesphere-test

0.2.4

2 of 2 See more

openelb kubesphere-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.7.0 1.19.6
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.7.0 1.19.6

Open the chart page →

4,336

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.7.0 1.19.6

Open the chart page →

2,791

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.7.0 1.19.6

Open the chart page →

2,220

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
library/redis :7.0-alpine	c9d92d840fd0	stdlib@go1.18.2	1.19.6

Open the chart page →

4,773

kube-wordpress-mysqlkube-wordpress-mysql

0.1.0

1 of 2 See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.19.6

Open the chart page →

8,767

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.14.1	0.7.0 1.19.6

Open the chart page →

16,539

metadockvalitetsit

0.0.7

2 of 2 See more

metadoc kvalitetsit 0.0.7

2 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-app :main	e89e351733ad	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.19.5	0.7.0 1.19.6
kvalitetsit/metadoc-web :main	f57e7553f5bd	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.7.0 1.19.6

Open the chart page →

4,033

nsp-prometheus-exporterkvalitetsit

1.0.19

1 of 2 See more

nsp-prometheus-exporter kvalitetsit 1.0.19

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
kvalitetsit/nsp-prometheus-exporter :1.0.19	0b397ff954ec	stdlib@go1.15.3	1.19.6

Open the chart page →

2,063

stakitkvalitetsit

0.3.11

1 of 3 See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
kvalitetsit/stakit-frontend :0.2.5	fd5c4f60ef80	golang.org/x/net@v0.0.0-20180906233101-161cd47e91fd stdlib@go1.19.3	0.7.0 1.19.6

Open the chart page →

7,848

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.7.0 1.19.6

Open the chart page →

8,543

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14	0.7.0 1.19.6

Open the chart page →

26,377

metallblectures-k8sinfra

0.10.2

2 of 2 See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.10.2	21164241c045	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.5	0.7.0 1.19.6
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.5	0.7.0 1.19.6

Open the chart page →

5,406

prometheuslectures-k8sinfra

15.8.5

5 of 6 See more

prometheus lectures-k8sinfra 15.8.5

5 of the 6 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.19.6
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.7.0 1.19.6
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.7.0 1.19.6
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.7.0 1.19.6
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.4	0.7.0 1.19.6

Open the chart page →

9,100

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.7.0 1.19.6

Open the chart page →

3,198

prometheusleechistest

11.6.0

4 of 6 See more

prometheus leechistest 11.6.0

4 of the 6 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.7.0 1.19.6
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.7.0 1.19.6
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.19.6
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.7.0 1.19.6

Open the chart page →

8,491

kube-benchlemontech

0.1.0

1 of 1 See more

kube-bench lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.9	c329d73fea58	stdlib@go1.19	1.19.6

Open the chart page →

1,632

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.7.0 1.19.6

Open the chart page →

4,280

kube-iptables-tailerlifen

0.2.3

1 of 1 See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.13.8	0.7.0 1.19.6

Open the chart page →

4,459

op-scim-bridgelifen

1.0.3

1 of 2 See more

op-scim-bridge lifen 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.16.8	0.7.0 1.19.6

Open the chart page →

2,777

op-scim-bridgelifen-charts

1.0.3

1 of 2 See more

op-scim-bridge lifen-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.16.8	0.7.0 1.19.6

Open the chart page →

2,777

komgalinkding

0.2.3

1 of 1 See more

komga linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
gotson/komga :1.22.0	ba892ab3e082	stdlib@go1.17.8	1.19.6

Open the chart page →

3,133

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	golang.org/x/net@v0.0.0-20211004195052-b30845b58a23 stdlib@go1.16.2	0.7.0 1.19.6

Open the chart page →

2,135

patch-operatorloafoe

0.11.3

1 of 2 See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.7.0 1.19.6

Open the chart page →

4,911

ocatiecataloguslocatiecatalogus

1.0.0

1 of 3 See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.7.0 1.19.6

Open the chart page →

7,519

locust-pluginslocust-plugins

0.0.4

1 of 3 See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
sky5367/locust-plugins-timescale :latest	d3150f201471	stdlib@go1.18.7	1.19.6

Open the chart page →

7,534

devspace-cloudloft

0.3.3

2 of 8 See more

devspace-cloud loft 0.3.3

2 of the 8 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.8	0.7.0 1.19.6
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.19.6

Open the chart page →

9,888

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.15.7	0.7.0 1.19.6

Open the chart page →

3,094

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/net@v0.6.0 stdlib@go1.18.10	0.7.0 1.19.6

Open the chart page →

2,453

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.6	0.7.0 1.19.6

Open the chart page →

3,119

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80 stdlib@go1.19.4	0.7.0 1.19.6
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.7.0 1.19.6

Open the chart page →

5,101

vcluster-pro-eksloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.7.0 1.19.6
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.7.0 1.19.6
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.19.6
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.19.6

Open the chart page →

5,951

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.7.0 1.19.6
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.7.0 1.19.6

Open the chart page →

5,786

vcluster-pro-k8sloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.7.0 1.19.6
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.7.0 1.19.6
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.7.0 1.19.6
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.7.0 1.19.6

Open the chart page →

8,235

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2022-41723.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.11	0.7.0 1.19.6

Open the chart page →

2,993

Container images carrying it

1,698 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/caddy :2.4.2-alpine	fbc51bcf1ab0	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.5	0.7.0 1.19.6	1
library/chronograf :1.9.4	96d8a3f65a4f	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.7.0 1.19.6	1
library/docker :20.10.21-dind	3153fa63f546	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.7	0.7.0 1.19.6	1
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.7.0 1.19.6	1
library/ghost :5.79.0	83f7bf209844	stdlib@go1.18.2	1.19.6	1
library/influxdb :2.0.8	ba10ac9ba17a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.5	0.7.0 1.19.6	1
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd stdlib@go1.18.3	0.7.0 1.19.6	1
library/kapacitor :1.6.3	7232f6388a4d	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.17.2	0.7.0 1.19.6	1
library/logstash :7.17.8	17a4f64e9cf5	stdlib@go1.19.3	1.19.6	1
library/mariadb :10.7.3	07e06f2e7ae9	stdlib@go1.16.7	1.19.6	1
library/mariadb :10.11.2	1c33370a599c	stdlib@go1.16.7	1.19.6	1
library/mariadb :10.4	22edfe1c7834	stdlib@go1.18.2	1.19.6	1
library/mariadb :10.8.2-focal	490f01279be1	stdlib@go1.16.7	1.19.6	1
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.19.6	1
library/mariadb :10.6.21	8a16204dc96c	stdlib@go1.18.2	1.19.6	1
library/mariadb :10.7	9a48ac9f196f	stdlib@go1.16.7	1.19.6	1
library/mariadb :10.10.2	bfc25a68e113	stdlib@go1.16.7	1.19.6	1
library/mariadb :10.6.15	e22328f4d714	stdlib@go1.16.7	1.19.6	1
library/mariadb :10.9.4	fbb8456ebdb1	stdlib@go1.16.7	1.19.6	1
library/mariadb :11.7.2	fcc7fcd7114a	stdlib@go1.18.2	1.19.6	1
library/mongo :7.0.14	0032d2ca20db	stdlib@go1.18.2	1.19.6	1
library/mongo :4.4.13	05678ae4e5e1	stdlib@go1.16.7	1.19.6	1
library/mongo :4.4-bionic	3d0e6df9fd5b	stdlib@go1.16.3	1.19.6	1
library/mongo :5.0.14-focal	50cae5081ab4	stdlib@go1.17.10	1.19.6	1
library/mongo :6.0.12	646902910d6a	stdlib@go1.18.2	1.19.6	1
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.19.6	1
library/mongo :6.0.2	71a63fc2438e	stdlib@go1.17.10	1.19.6	1
library/mongo :5.0.21	7c81758cb295	stdlib@go1.18.2	1.19.6	1
library/mongo :7.0.12	ae1cf99fa7bf	stdlib@go1.18.2	1.19.6	1
library/mongo :4.4.18	d23ec07162ca	stdlib@go1.17.10	1.19.6	1
library/mongo :8.0.11	dca8d11fe467	stdlib@go1.18.2	1.19.6	1
library/mysql :8.4.3	106d5197fd8e	stdlib@go1.18.2	1.19.6	1
library/mysql :8.0.30	3c1aab708f6e	stdlib@go1.16.7	1.19.6	1
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.19.6	1
library/mysql :8.0.41	bf577825b52a	stdlib@go1.18.2	1.19.6	1
library/mysql :8.0.39	ccb8f749bb5e	stdlib@go1.18.2	1.19.6	1
library/mysql :8.0.40	d58ac93387f6	stdlib@go1.18.2	1.19.6	1
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.19.6	1
library/nats :2.9.6-alpine3.16	f576cdc17cc3	stdlib@go1.19.3	1.19.6	1
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.19.6	1
library/postgres :14.3	2d1e636f0778	stdlib@go1.16.7	1.19.6	1
library/postgres :17.4	304ab8135187	stdlib@go1.18.2	1.19.6	1
library/postgres :16.6	557fea37a744	stdlib@go1.18.2	1.19.6	1
library/postgres :16.4-alpine	5660c2cbfea5	stdlib@go1.18.2	1.19.6	1
library/postgres :13.11-bullseye	5c265bf1fd30	stdlib@go1.18.2	1.19.6	1
library/postgres :17.5-alpine	6567bca8d7bc	stdlib@go1.18.2	1.19.6	1
library/postgres :17.4-alpine	7062a2109c4b	stdlib@go1.18.2	1.19.6	1
library/postgres :12-alpine	7c8f48705831	stdlib@go1.18.2	1.19.6	1
library/postgres :17.2-alpine	7e5df973a748	stdlib@go1.18.2	1.19.6	1
library/postgres :15.3	8775adb39f0d	stdlib@go1.18.2	1.19.6	1