CVE-2023-39325

High

Advisory

Published 11 Oct 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.038; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,887; of 17,790 indexed, latest versions
Container images: 2,183; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP/2 rapid reset can cause excessive work in net/http

Carried by container images the latest versions of 1,887 of 17,790 indexed charts deploy, on 2,183 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+183 more	0.17.0	1,572
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+109 more	1.20.10	2,132

OSV records: DEBIAN-CVE-2023-39325 GHSA-4374-p667-p6c8 GO-2023-2102
Also known as: BIT-golang-2023-39325

Charts affected

1,887 by stars

Chart

Latest

Affected images

Radar Score

csi-neonsankubesphere-test

1.3.0

6 of 6 See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.17.0 1.20.10
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.14.4	0.17.0 1.20.10
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.17.0 1.20.10
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.17.0 1.20.10
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.17.0 1.20.10
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.17.0 1.20.10

Open the chart page →

18,526

csi-qingcloudkubesphere-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.17.0 1.20.10
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.17.0 1.20.10
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.19.13	0.17.0 1.20.10
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.17.0 1.20.10
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.17.0 1.20.10
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.17.0 1.20.10

Open the chart page →

12,444

curvefs-csikubesphere-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.17.0 1.20.10

Open the chart page →

2,831

mongodbkubesphere-test

0.3.2

1 of 2 See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
mikefarah/yq :2.4.1	6fc625c402de	stdlib@go1.13.3	1.20.10

Open the chart page →

9,631

online-boutiquekubesphere-test

0.1.0

8 of 11 See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.17.0 1.20.10
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.10	0.17.0 1.20.10
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.17.0 1.20.10
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7 stdlib@go1.15.10	0.17.0 1.20.10
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.17.0 1.20.10
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7 stdlib@go1.15.10	0.17.0 1.20.10
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.17.0 1.20.10
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.6	0.17.0 1.20.10

Open the chart page →

26,075

openelbkubesphere-test

0.2.4

2 of 2 See more

openelb kubesphere-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.17.0 1.20.10
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.17.0 1.20.10

Open the chart page →

4,336

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.17.0 1.20.10

Open the chart page →

2,791

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.17.0 1.20.10

Open the chart page →

2,220

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.17.0 1.20.10

Open the chart page →

4,456

kubestellar-uikubestellarui

0.1.1

2 of 4 See more

kubestellar-ui kubestellarui 0.1.1

2 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/redis :7.0-alpine	c9d92d840fd0	stdlib@go1.18.2	1.20.10
mavrick1/kubestellar-b :latest	45ca0429a1d4	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10

Open the chart page →

4,773

kube-wordpress-mysqlkube-wordpress-mysql

0.1.0

1 of 2 See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.20.10

Open the chart page →

8,767

kube-workload-restarterkube-workload-restarter

0.0.4

1 of 1 See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	golang.org/x/net@v0.7.0 stdlib@go1.20.2	0.17.0 1.20.10

Open the chart page →

1,815

kubiya-runnerkubiya-helm-charts

0.9.4

1 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.20.10

Open the chart page →

20,386

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	stdlib@go1.19.13	1.20.10

Open the chart page →

1,881

sample-operatorkusionstack

0.1.2

1 of 1 See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
chaerr/kridge :demo-operator-v0.1.2	66833deec017	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.17.0 1.20.10

Open the chart page →

2,503

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.14.1	0.17.0 1.20.10

Open the chart page →

16,539

metadockvalitetsit

0.0.7

2 of 2 See more

metadoc kvalitetsit 0.0.7

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-app :main	e89e351733ad	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.19.5	0.17.0 1.20.10
kvalitetsit/metadoc-web :main	f57e7553f5bd	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.17.0 1.20.10

Open the chart page →

4,033

nsp-prometheus-exporterkvalitetsit

1.0.19

1 of 2 See more

nsp-prometheus-exporter kvalitetsit 1.0.19

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kvalitetsit/nsp-prometheus-exporter :1.0.19	0b397ff954ec	stdlib@go1.15.3	1.20.10

Open the chart page →

2,063

stakitkvalitetsit

0.3.11

1 of 3 See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kvalitetsit/stakit-frontend :0.2.5	fd5c4f60ef80	golang.org/x/net@v0.0.0-20180906233101-161cd47e91fd stdlib@go1.19.3	0.17.0 1.20.10

Open the chart page →

7,848

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10

Open the chart page →

8,543

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14	0.17.0 1.20.10

Open the chart page →

26,377

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	stdlib@go1.20.5	1.20.10

Open the chart page →

33,540

metallblectures-k8sinfra

0.10.2

2 of 2 See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.10.2	21164241c045	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.5	0.17.0 1.20.10
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.5	0.17.0 1.20.10

Open the chart page →

5,406

prometheuslectures-k8sinfra

15.8.5

5 of 6 See more

prometheus lectures-k8sinfra 15.8.5

5 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.20.10
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.17.0 1.20.10
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.17.0 1.20.10
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.17.0 1.20.10
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.4	0.17.0 1.20.10

Open the chart page →

9,100

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.17.0 1.20.10

Open the chart page →

3,198

prometheusleechistest

11.6.0

4 of 6 See more

prometheus leechistest 11.6.0

4 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.17.0 1.20.10
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.17.0 1.20.10
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.20.10
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.17.0 1.20.10

Open the chart page →

8,491

kube-benchlemontech

0.1.0

1 of 1 See more

kube-bench lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.9	c329d73fea58	stdlib@go1.19	1.20.10

Open the chart page →

1,632

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.17.0 1.20.10

Open the chart page →

4,280

kltlifecycle-toolkit

0.2.6

4 of 4 See more

klt lifecycle-toolkit 0.2.6

4 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v1.1.0	8fdd311a6d33	golang.org/x/net@v0.14.0 stdlib@go1.20.4	0.17.0 1.20.10
ghcr.io/keptn/lifecycle-operator :v0.8.2	487bfc37c4b4	golang.org/x/net@v0.14.0 stdlib@go1.20.4	0.17.0 1.20.10
ghcr.io/keptn/metrics-operator :v0.8.2	acf22310e9dd	golang.org/x/net@v0.14.0 stdlib@go1.20.4	0.17.0 1.20.10
ghcr.io/keptn/scheduler :v0.8.2	0f7d277bb2b2	golang.org/x/net@v0.14.0 stdlib@go1.20.4	0.17.0 1.20.10

Open the chart page →

4,680

kube-iptables-tailerlifen

0.2.3

1 of 1 See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.13.8	0.17.0 1.20.10

Open the chart page →

4,459

op-scim-bridgelifen

1.0.3

1 of 2 See more

op-scim-bridge lifen 1.0.3

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.16.8	0.17.0 1.20.10

Open the chart page →

2,777

op-scim-bridgelifen-charts

1.0.3

1 of 2 See more

op-scim-bridge lifen-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.16.8	0.17.0 1.20.10

Open the chart page →

2,777

komgalinkding

0.2.3

1 of 1 See more

komga linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
gotson/komga :1.22.0	ba892ab3e082	stdlib@go1.17.8	1.20.10

Open the chart page →

3,133

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	stdlib@go1.20.7	1.20.10

Open the chart page →

10,780

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	golang.org/x/net@v0.0.0-20211004195052-b30845b58a23 stdlib@go1.16.2	0.17.0 1.20.10

Open the chart page →

2,135

patch-operatorloafoe

0.11.3

1 of 2 See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.17.0 1.20.10

Open the chart page →

4,911

solgateloafoe

0.0.12

1 of 1 See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.17.0 1.20.10

Open the chart page →

2,108

weather-app-chartlocal-weatherapp

0.1.0

1 of 4 See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
youssef11gaber10/deployment-auth-go :latest	6597b26959d2	golang.org/x/net@v0.10.0	0.17.0

Open the chart page →

5,905

ocatiecataloguslocatiecatalogus

1.0.0

1 of 3 See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10

Open the chart page →

7,519

locust-pluginslocust-plugins

0.0.4

1 of 3 See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
sky5367/locust-plugins-timescale :latest	d3150f201471	stdlib@go1.18.7	1.20.10

Open the chart page →

7,534

uptime-kumaloeken-at-home

2.3.2

1 of 1 See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	stdlib@go1.20.5	1.20.10

Open the chart page →

33,540

devpod-proloft

0.0.0-ci.4-do-not-use

1 of 1 See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.17.0 1.20.10

Open the chart page →

3,234

devspace-cloudloft

0.3.3

2 of 8 See more

devspace-cloud loft 0.3.3

2 of the 8 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.8	0.17.0 1.20.10
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.20.10

Open the chart page →

9,888

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.15.7	0.17.0 1.20.10

Open the chart page →

3,094

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/net@v0.6.0 stdlib@go1.18.10	0.17.0 1.20.10

Open the chart page →

2,453

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.6	0.17.0 1.20.10

Open the chart page →

3,119

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.17.0 1.20.10

Open the chart page →

3,234

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80 stdlib@go1.19.4	0.17.0 1.20.10
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.17.0 1.20.10

Open the chart page →

5,101

vcluster-pro-eksloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.17.0 1.20.10
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.17.0 1.20.10
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.20.10
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.20.10

Open the chart page →

5,951

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.17.0 1.20.10
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.17.0 1.20.10

Open the chart page →

5,786

Container images carrying it

2,183 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
minio/kes :2023-04-03T16-41-28Z	f93c2d9088df	golang.org/x/net@v0.7.0 stdlib@go1.20.2	0.17.0 1.20.10	1
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.10	0.17.0 1.20.10	1
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.17.0 1.20.10	1
minio/mc :RELEASE.2022-05-09T04-08-26Z	4b415310d8d0	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.9	0.17.0 1.20.10	1
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.13.8	0.17.0 1.20.10	1
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.17.0 1.20.10	1
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.15.5	0.17.0 1.20.10	1
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.5	0.17.0 1.20.10	1
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.17.0 1.20.10	1
minio/minio :RELEASE.2020-09-17T04-49-20Z	e2b7b633c250	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.9	0.17.0 1.20.10	1
minio/minio :RELEASE.2020-01-03T19-12-21Z	f00aa6ef2b72	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.5	0.17.0 1.20.10	1
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.17.0 1.20.10	1
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.17.0 1.20.10	1
minio/operator :v5.0.9	170b154d2c61	golang.org/x/net@v0.13.0 stdlib@go1.21.1	0.17.0 1.20.10	1
minio/operator :v4.1.0	2adc5be088f5	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.16.3	0.17.0 1.20.10	1
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.13.12	0.17.0 1.20.10	1
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.17.0 1.20.10	1
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582 stdlib@go1.13.9	0.17.0 1.20.10	1
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.17.0 1.20.10	1
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.9	0.17.0 1.20.10	1
mirrorgitlabcontainers/kubectl :1.13.12	99931bd06b41	stdlib@go1.13.3	1.20.10	1
moby/buildkit :v0.10.0	c2aeafaed434	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.8	0.17.0 1.20.10	1
moikot/basic-git-server :0.0.2	0d941bd30ffa	stdlib@go1.14.9	1.20.10	1
moikot/smartthings-metrics :0.1.0	8625f53aa9b7	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.13	0.17.0 1.20.10	1
moikot/smartthings-metrics :feat-log-details	fb8565140106	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.15	0.17.0 1.20.10	1
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.6	0.17.0 1.20.10	1
moul/sshportal :v1.19.3	332b603727c3	stdlib@go1.17.6	1.20.10	1
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.13	0.17.0 1.20.10	1
muonsoft/openapi-mock :latest	c9afe1295484	stdlib@go1.20.2	1.20.10	1
murtazashah46/helmfile :latest	4d11726cf803	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.17.0 1.20.10	1
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.1	0.17.0 1.20.10	1
mziyabo/fargate-eks-sidecar-injector :latest	3067dce17983	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.17.0 1.20.10	1
nacos/nacos-peer-finder-plugin :latest	a9c769301fa6	stdlib@go1.13.5	1.20.10	1
natsio/nats-box :0.13.5	59cf2e949181	stdlib@go1.19.5	1.20.10	1
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.17.0 1.20.10	1
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/net@v0.15.0	0.17.0	1
natsio/nats-kafka :1.4.2	bb241956b0dc	stdlib@go1.20	1.20.10	1
natsio/nats-operator :0.8.3	1261dae38389	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.10	0.17.0 1.20.10	1
natsio/nats-server-config-reloader :0.14.1	0d50270fa374	stdlib@go1.20.5	1.20.10	1
natsio/nats-server-config-reloader :0.8.0	6bdaceb63aa5	stdlib@go1.19.4	1.20.10	1
natsio/nats-server-config-reloader :0.14.0	8c28b75bc416	stdlib@go1.20.5	1.20.10	1
natsio/nats-server-config-reloader :0.11.0	c3a755eab2cc	stdlib@go1.20.5	1.20.10	1
natsio/prometheus-nats-exporter :0.10.1	bce728062c4f	stdlib@go1.19.3	1.20.10	1
nerzhul/mc-arm64 :2020.10.03	4215df511f31	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.15.2	0.17.0 1.20.10	1
netapp/trident-operator :21.10.0	49cfe552d9c2	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.17.0 1.20.10	1
netrisai/controller-web-session-generator :0.2.0	a030a31289f4	stdlib@go1.14.15	1.20.10	1
netrisai/mariadb :10.11.4-debian-11-r46	0aa742a0b906	stdlib@go1.19.11	1.20.10	1
netrisai/mongodb :4.4.4-debian-10-r0	95abfb776bb4	stdlib@go1.15.1	1.20.10	1
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.10	0.17.0 1.20.10	1
nginx/nginx-ingress :1.11.1	eb5b4fd73325	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.11	0.17.0 1.20.10	1