CVE-2023-39325

High

Advisory

Published 11 Oct 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.038; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,886; of 17,787 indexed, latest versions
Container images: 2,183; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP/2 rapid reset can cause excessive work in net/http

Carried by container images the latest versions of 1,886 of 17,787 indexed charts deploy, on 2,183 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+183 more	0.17.0	1,571
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+109 more	1.20.10	2,132

OSV records: DEBIAN-CVE-2023-39325 GHSA-4374-p667-p6c8 GO-2023-2102
Also known as: BIT-golang-2023-39325

Charts affected

1,886 by stars

Chart

Latest

Affected images

Radar Score

capsule-rancher-addonclastix

0.1.1

5 of 5 See more

capsule-rancher-addon clastix 0.1.1

5 of the 5 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
clastix/capsule-rancher-addon :v0.1.1	43d301afbca8	golang.org/x/net@v0.4.0 stdlib@go1.19.2	0.17.0 1.20.10
quay.io/jetstack/cert-manager-cainjector :v1.11.0	5c3eb25b0854	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.17.0 1.20.10
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.17.0 1.20.10
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.17.0 1.20.10
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.17.0 1.20.10

Open the chart page →

7,104

kamajiclastix

0.0.0+latest

1 of 4 See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.17.0 1.20.10

Open the chart page →

4,630

kamaji-etcdclastix

0.17.0

1 of 4 See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.17.0 1.20.10

Open the chart page →

12,021

vcloud-csiclastix

1.6.0

4 of 5 See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.17.0 1.20.10
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.17.0 1.20.10
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.17.0 1.20.10
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.17.0 1.20.10

Open the chart page →

7,386

kube-acp-stackcloudentity

2.28.0

2 of 7 See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	stdlib@go1.18.1	1.20.10
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.13.14	0.17.0 1.20.10

Open the chart page →

20,936

openbankingcloudentity

0.1.9

6 of 6 See more

openbanking cloudentity 0.1.9

6 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
cloudentity/openbanking-quickstart-bank :1.11.1	9402ec4b5016	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.14	0.17.0 1.20.10
cloudentity/openbanking-quickstart-configuration :1.11.1	8a1890eb8265	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.14	0.17.0 1.20.10
cloudentity/openbanking-quickstart-consent-admin-portal :1.11.1	ee83cdd45b7b	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.2	0.17.0 1.20.10
cloudentity/openbanking-quickstart-consent-page :1.11.1	5728654cecb7	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.16.6	0.17.0 1.20.10
cloudentity/openbanking-quickstart-consent-self-service-portal :1.11.1	8ca94ae6acf4	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.2	0.17.0 1.20.10
cloudentity/openbanking-quickstart-financroo-tpp :1.11.1	c04eb10c77b7	golang.org/x/net@v0.0.0-20201207224615-747e23833adb stdlib@go1.15.2	0.17.0 1.20.10

Open the chart page →

18,040

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	golang.org/x/net@v0.14.0 stdlib@go1.19.10	0.17.0 1.20.10

Open the chart page →

25,152

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.17.5	0.17.0 1.20.10

Open the chart page →

6,696

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d stdlib@go1.18.1	0.17.0 1.20.10

Open the chart page →

6,921

pact-brokercloud-native-toolkit

0.3.0

1 of 1 See more

pact-broker cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
pactfoundation/pact-broker :2.101.0.0	a3021fc42834	stdlib@go1.14.4	1.20.10

Open the chart page →

2,814

robot-shopcloud-native-toolkit

1.1.1

2 of 12 See more

robot-shop cloud-native-toolkit 1.1.1

2 of the 12 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
robotshop/rs-dispatch :latest	de81f1d07b02	stdlib@go1.17	1.20.10
robotshop/rs-mongodb :latest	119b545823cd	stdlib@go1.16.3	1.20.10

Open the chart page →

29,594

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/console :console-on.v1.1.1	a4d32c2f68b3	stdlib@go1.20	1.20.10
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.1	0.17.0 1.20.10

Open the chart page →

18,256

ctrox-csi-s3cloudve

0.1.0

1 of 4 See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.16.13	0.17.0 1.20.10

Open the chart page →

3,136

galaxycloudve

6.8.6

1 of 3 See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
tusproject/tusd :v1.13.0	f8088058b80f	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.17.0 1.20.10

Open the chart page →

5,552

galaxy-depscloudve

1.1.1

4 of 7 See more

galaxy-deps cloudve 1.1.1

4 of the 7 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq-cluster-operator :1.14.0-scratch-r5	67ac64a9623a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17	0.17.0 1.20.10
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	golang.org/x/net@v0.0.0-20220614195744-fb05da6f9022 stdlib@go1.17	0.17.0 1.20.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10

Open the chart page →

10,543

galaxykubemancloudve

2.10.1

4 of 7 See more

galaxykubeman cloudve 2.10.1

4 of the 7 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.13	0.17.0 1.20.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.17.0 1.20.10

Open the chart page →

16,117

janisterminalcloudve

0.1.0

1 of 2 See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.1	0.17.0 1.20.10

Open the chart page →

14,285

openstack-cinder-csicloudve

1.2.0

1 of 5 See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
k8scloudprovider/cinder-csi-plugin :latest	a30c7a2a594a	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.10	0.17.0 1.20.10

Open the chart page →

2,061

proxyinjectorcloudve

0.0.23

1 of 1 See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.1	0.17.0 1.20.10

Open the chart page →

2,853

metaflowcluster-deploy

0.2.2

1 of 1 See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	stdlib@go1.20.2	1.20.10

Open the chart page →

7,521

cluster-octopuscluster-octopus

1.0.0

1 of 1 See more

cluster-octopus cluster-octopus 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
cgtysylr/cluster-octopus :1.0.0	aec0f8a38a77	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.17.0 1.20.10

Open the chart page →

1,040

clusterpedia-coreclusterpedia

0.1.1

3 of 3 See more

clusterpedia-core clusterpedia 0.1.1

3 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/clusterpedia-io/clusterpedia/apiserver :v0.6.0	3d089d9078f8	stdlib@go1.19.4	1.20.10
ghcr.io/clusterpedia-io/clusterpedia/clustersynchro-manager :v0.6.0	82cc9a77f6d6	stdlib@go1.19.4	1.20.10
ghcr.io/clusterpedia-io/clusterpedia/controller-manager :v0.6.0	81669df338e0	stdlib@go1.19.4	1.20.10

Open the chart page →

3,132

d2-prometheus-exportercmacrae

0.1.0

1 of 1 See more

d2-prometheus-exporter cmacrae 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
cmacrae/d2-prometheus-exporter :v0.1.0	fc5fecba436e	stdlib@go1.15	1.20.10

Open the chart page →

1,299

kovecmacrae

0.2.0

1 of 1 See more

kove cmacrae 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.2.0	185bfaae750c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.17	0.17.0 1.20.10

Open the chart page →

2,089

kove-deprecationscmacrae

0.1.2

1 of 1 See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.1.0	db1244edefc8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16	0.17.0 1.20.10

Open the chart page →

2,203

lgtmcmacrae

0.1.0

1 of 1 See more

lgtm cmacrae 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
cmacrae/lgtm :0.1.0	dec8d490fe40	golang.org/x/net@v0.0.0-20181108082009-03003ca0c849 stdlib@go1.14.1	0.17.0 1.20.10

Open the chart page →

1,909

door-agentcno

3.0.15

4 of 15 See more

door-agent cno 3.0.15

4 of the 15 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
beopenit/door-helm :v3.0.1	b4d9f9bee224	golang.org/x/net@v0.15.0 stdlib@go1.19.13	0.17.0 1.20.10
beopenit/onboarding-operator-kubernetes :v3.0.2	75a48144e682	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.17.0 1.20.10
envoyproxy/ratelimit :6f5de117	b6cb6e16f8c9	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.13	0.17.0 1.20.10
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.1	0.17.0 1.20.10

Open the chart page →

19,380

coderstudio-strapi-devcoderstudio-strapi-dev

0.0.1

1 of 3 See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
rcdelacruz/my-strapi-app :js-amd64	38007f358355	stdlib@go1.19.4	1.20.10

Open the chart page →

5,142

docker-composecoderstudio-strapi-dev

0.0.1

1 of 3 See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
rcdelacruz/my-strapi-app :js-amd64	38007f358355	stdlib@go1.19.4	1.20.10

Open the chart page →

5,142

strapi-devcoderstudio-strapi-dev

0.0.1

1 of 3 See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
rcdelacruz/my-strapi-app :js-amd64	38007f358355	stdlib@go1.19.4	1.20.10

Open the chart page →

5,142

colecole

1.4.2

1 of 1 See more

cole cole 1.4.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ntakashi/cole :1.2.3	f7b68bee2a68	golang.org/x/net@v0.10.0	0.17.0

Open the chart page →

838

traefik-forward-authcolearendt

0.0.15

1 of 1 See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.17.0 1.20.10

Open the chart page →

2,234

mysqlcomet-mysql-helm

1.0.7

1 of 1 See more

mysql comet-mysql-helm 1.0.7

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mysql :8.4.2	ac80b6e09e5b	stdlib@go1.18.2	1.20.10

Open the chart page →

1,055

cgrccommongroundregistratiecomponent

0.1.0

1 of 3 See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
conduction/cgrc-php :dev	25415534d245	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10

Open the chart page →

7,572

community-operator-v2community-operator-v2

1.0.0

1 of 2 See more

community-operator-v2 community-operator-v2 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/community-operator-v2 :v1.0.0	7f1bbbe114eb	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.12	0.17.0 1.20.10

Open the chart page →

1,544

conduction-uiconduction-ui

0.1.0

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-php :dev	2744565516e8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10

Open the chart page →

12,906

consentbbconsentbb

2023.12.4

1 of 5 See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
igrantio/bb-consent-api :2023.12.2	2d2ea6546ffe	stdlib@go1.18.8	1.20.10

Open the chart page →

3,181

betaalservicecontacten-catalog

1.0.0

1 of 3 See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
conduction/betaalservice-php :latest	ece1ab544c57	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10

Open the chart page →

7,209

contactmoment-componentcontactmoment-component

0.1.0

1 of 4 See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10

Open the chart page →

8,408

containers-security-chartscontainers-security

0.1.0

3 of 7 See more

containers-security-charts containers-security 0.1.0

3 of the 7 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.20.10
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.20.10
falcosecurity/falcosidekick :2.27.0	828ee36cb13a	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.18.1	0.17.0 1.20.10

Open the chart page →

9,146

falcocontainers-security

2.4.6

2 of 2 See more

falco containers-security 2.4.6

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.20.10
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.20.10

Open the chart page →

2,540

corteza-all-in-onecorteza

0.1.0

1 of 2 See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.0	8eb7a26605c9	stdlib@go1.19.13	1.20.10

Open the chart page →

4,682

cosmo-traefikcosmo

0.9.1

1 of 2 See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/traefik :v2.10.1	1489caffaedb	golang.org/x/net@v0.7.0 stdlib@go1.20.3	0.17.0 1.20.10

Open the chart page →

3,672

dev-code-servercosmo

0.0.7

1 of 2 See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	stdlib@go1.20.7	1.20.10

Open the chart page →

14,587

katibcowboysysop

2.4.2

3 of 4 See more

katib cowboysysop 2.4.2

3 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kubeflowkatib/katib-controller :v0.12.0	12a28c8a0b41	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.1	0.17.0 1.20.10
kubeflowkatib/katib-db-manager :v0.12.0	db88bf09d88e	golang.org/x/net@v0.0.0-20191021144547-ec77196f6094 stdlib@go1.13.3	0.17.0 1.20.10
kubeflowkatib/katib-ui :v0.12.0	129f0aaba976	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.1	0.17.0 1.20.10

Open the chart page →

6,542

kfservingcowboysysop

1.3.1

1 of 3 See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kfserving/kfserving-controller :v0.6.1	63d79d04c2e3	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.14	0.17.0 1.20.10

Open the chart page →

3,830

metacontrollercowboysysop

1.2.2

1 of 1 See more

metacontroller cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
metacontrollerio/metacontroller :v2.1.1	0336993b88e4	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.6	0.17.0 1.20.10

Open the chart page →

2,092

mpi-operatorcowboysysop

1.2.2

1 of 1 See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.13	0.17.0 1.20.10

Open the chart page →

2,577

notebook-controllercowboysysop

1.1.2

1 of 1 See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.15.15	0.17.0 1.20.10

Open the chart page →

2,582

quickchartcowboysysop

5.0.0

1 of 1 See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ianw/quickchart :v1.7.1	dc49dd460c37	stdlib@go1.13.1	1.20.10

Open the chart page →

5,489

Container images carrying it

2,183 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
cmacrae/lgtm :0.1.0	dec8d490fe40	golang.org/x/net@v0.0.0-20181108082009-03003ca0c849 stdlib@go1.14.1	0.17.0 1.20.10	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.13.14	0.17.0 1.20.10	1
codenotary/immudb :1.9.7	7c85d7cc4f22	stdlib@go1.18.10	1.20.10	1
codercom/code-server :4.11.0-debian	1e2cc688008e	stdlib@go1.14.4	1.20.10	1
codercom/code-server :3.10.2	47605610ad8d	stdlib@go1.14.4	1.20.10	1
codeskyblue/gohttpserver :latest	caa862590e34	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.3	0.17.0 1.20.10	1
conduction/agendaservice-php :latest	9cfeeb6c7c20	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10	1
conduction/balance-registration-php :dev	c36094a41369	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10	1
conduction/betaalservice-php :latest	ece1ab544c57	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10	1
conduction/cgrc-php :dev	25415534d245	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10	1
conduction/checkin-component-php :dev	3423845692c1	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10	1
conduction/conduction-ui-php :dev	2744565516e8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10	1
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10	1
conduction/docparser-php :dev	b6f95c8ead7d	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10	1
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10	1
conduction/pan-php :dev	24f03c57568f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10	1
containous/maesh :v1.3.2	587162516502	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.14.4	0.17.0 1.20.10	1
coredns/coredns :1.7.0	73ca82b4ce82	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.4	0.17.0 1.20.10	1
coredns/coredns :1.10.1	a0ead06651cf	golang.org/x/net@v0.4.0 stdlib@go1.20	0.17.0 1.20.10	1
cortezaproject/corteza :2024.9.0	8eb7a26605c9	stdlib@go1.19.13	1.20.10	1
countly/api :25.05.4	f4cc7447c4f5	stdlib@go1.19.4	1.20.10	1
countly/countly-server :25.05.4	e3c238248f99	stdlib@go1.19.4	1.20.10	1
countly/frontend :25.05.4	2acbc11499b6	stdlib@go1.19.4	1.20.10	1
craftypath/sops-operator :v0.8.0	402a0024c732	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16.5	0.17.0 1.20.10	1
crossplane/crossplane :v0.12.0	66666e6963af	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.4	0.17.0 1.20.10	1
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.14	0.17.0 1.20.10	1
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.17.0 1.20.10	1
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.2	0.17.0 1.20.10	1
csepulvedab/secret-sync :0.5	227a6f2b0ff8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.17.0 1.20.10	1
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.14.4	0.17.0 1.20.10	1
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.17.0 1.20.10	1
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.16.13	0.17.0 1.20.10	1
dabealu/zookeeper-exporter :latest	86106fec315f	stdlib@go1.14.15	1.20.10	1
dalf/filtron :latest	b19cbf5b2f37	stdlib@go1.18.2	1.20.10	1
dalf/morty :latest	248a4849c350	golang.org/x/net@v0.0.0-20220421235706-1d1ef9303861 stdlib@go1.18.2	0.17.0 1.20.10	1
danielfm/kube-ecr-cleanup-controller :0.1.10	12485563b1d0	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.17.0 1.20.10	1
danielqsj/kafka-exporter :v1.7.0	e90b7ba06d97	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.17.0 1.20.10	1
dannielkil/book-db :latest	433290c5c1db	stdlib@go1.18.2	1.20.10	1
danuk/k8s-sftp-gcs :latest	dd0e6585c44f	stdlib@go1.18.4	1.20.10	1
daprio/dashboard :0.14.0	7ba5d51e5b97	golang.org/x/net@v0.6.0 stdlib@go1.19.13	0.17.0 1.20.10	1
daprio/injector :1.11.2	763b9b70b0c8	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.17.0 1.20.10	1
daprio/operator :1.11.2	c584428aa12d	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.17.0 1.20.10	1
daprio/placement :1.11.2	d8e1446da996	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.17.0 1.20.10	1
daprio/sentry :1.11.2	1f507c1a181b	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.17.0 1.20.10	1
darkobas/ethexporter :latest	62e6464491ba	stdlib@go1.19.1	1.20.10	1
darkobas/tokenexporter :latest	a0349a0eedf0	stdlib@go1.19.1	1.20.10	1
darthsim/imgproxy :v3.15.0	40f6eb807444	golang.org/x/net@v0.7.0 stdlib@go1.20	0.17.0 1.20.10	1
dasmeta/mongodb-bi-connector :1.0.3	fa657960dfec	stdlib@go1.16.9	1.20.10	1
datadog/agent :7.22.0	8f20e56b5311	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.11	0.17.0 1.20.10	1
datadog/extendeddaemonset :v0.8.0	513a4377aed5	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.15	0.17.0 1.20.10	1