CVE-2023-39325

High

Advisory

Published 11 Oct 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.038; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,870; of 17,781 indexed, latest versions
Container images: 2,153; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP/2 rapid reset can cause excessive work in net/http

Carried by container images the latest versions of 1,870 of 17,781 indexed charts deploy, on 2,153 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+182 more	0.17.0	1,549
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+109 more	1.20.10	2,103

OSV records: DEBIAN-CVE-2023-39325 GHSA-4374-p667-p6c8 GO-2023-2102
Also known as: BIT-golang-2023-39325

Charts affected

1,870 by stars

Chart

Latest

Affected images

Radar Score

kubernetes-loggingkubernetes-logging

4.8.0

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	stdlib@go1.20.6	1.20.10

Open the chart page →

10,530

openelbkubesphere-stable

0.5.0

2 of 2 See more

openelb kubesphere-stable 0.5.0

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.5.0	b5b665c4672c	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.15.15	0.17.0 1.20.10
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.17.0 1.20.10

Open the chart page →

4,329

vclustermain

0.17.0

6 of 10 See more

vcluster main 0.17.0

6 of the 10 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.17.0 1.20.10
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.17.0 1.20.10
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.17.0 1.20.10
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.17.0 1.20.10
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.17.0 1.20.10
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.17.0 1.20.10

Open the chart page →

11,552

netris-operatornetrisai

3.0.2

1 of 2 See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.10	0.17.0 1.20.10

Open the chart page →

1,588

node-local-dnsnode-local-dns

2.4.0

1 of 1 See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	stdlib@go1.21.1	1.20.10

Open the chart page →

2,593

open5gsopen5gs

2.3.4

2 of 5 See more

open5gs open5gs 2.3.4

2 of the 5 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.20.10
gradiant/open5gs-dbctl :0.10.3	332031245fce	stdlib@go1.18.2	1.20.10

Open the chart page →

9,261

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	stdlib@go1.20.7	1.20.10

Open the chart page →

8,722

rke2-multusrke2-charts

3.7.1-build2021041601

1 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.17.0

Open the chart page →

4,519

uffizzi-appuffizzi-app

1.3.0

3 of 14 See more

uffizzi-app uffizzi-app 1.3.0

3 of the 14 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/net@v0.12.0 stdlib@go1.20.1	0.17.0 1.20.10
uffizzi/uffizzi-cluster-operator :v1.4.5	14e528bbd926	golang.org/x/net@v0.8.0 stdlib@go1.19.13	0.17.0 1.20.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0	0.17.0

Open the chart page →

19,337

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.10	0.17.0 1.20.10

Open the chart page →

13,562

eshoponabpabp-charts

1.0.0

2 of 15 See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.20.10
library/postgres :14.1	3162a6ead070	stdlib@go1.16.7	1.20.10

Open the chart page →

19,799

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :15.2.0-debian-11-r11	3e65a6b89e38	stdlib@go1.18.2	1.20.10

Open the chart page →

3,569

ansible-semaphoreansible-semaphore

0.1.0

1 of 1 See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	stdlib@go1.16.3	1.20.10

Open the chart page →

4,019

aperture-controlleraperture

2.34.0

2 of 5 See more

aperture-controller aperture 2.34.0

2 of the 5 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.20.10
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.8	0.17.0 1.20.10

Open the chart page →

4,663

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18	0.17.0 1.20.10

Open the chart page →

3,300

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.17.0 1.20.10

Open the chart page →

9,052

prometheusavesha

19.3.0

4 of 4 See more

prometheus avesha 19.3.0

4 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.20.10
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.17.0 1.20.10
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.17.0 1.20.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b stdlib@go1.19.3	0.17.0 1.20.10

Open the chart page →

5,484

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.2	0.17.0 1.20.10

Open the chart page →

2,250

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.17.0 1.20.10

Open the chart page →

1,915

yatai-deploymentbentoml

1.1.21

1 of 2 See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	stdlib@go1.19.13	1.20.10

Open the chart page →

1,160

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	stdlib@go1.19.12	1.20.10

Open the chart page →

7,960

cert-managerchoerodon

1.8.2

4 of 4 See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.17.0 1.20.10
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.17.0 1.20.10
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.17.0 1.20.10
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.11	0.17.0 1.20.10

Open the chart page →

7,775

hellocloudecho

0.1.2

1 of 1 See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
cloudecho/hello :0.1.0	f76ede067ab9	stdlib@go1.16.6	1.20.10

Open the chart page →

1,817

ghostcloudpirates-ghost

0.20.22

1 of 3 See more

ghost cloudpirates-ghost 0.20.22

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.20.10

Open the chart page →

7,146

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/net@v0.7.0 stdlib@go1.18	0.17.0 1.20.10

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

3 of 21 See more

coder-observability coder-observability 0.7.3

3 of the 21 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.20.10
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.6	0.17.0 1.20.10
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18.6	0.17.0 1.20.10

Open the chart page →

24,700

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	stdlib@go1.19.8	1.20.10

Open the chart page →

17,404

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.17.0 1.20.10

Open the chart page →

3,080

cosmocosmo-platform

0.20.0

2 of 10 See more

cosmo cosmo-platform 0.20.0

2 of the 10 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	stdlib@go1.20.7	1.20.10
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	stdlib@go1.20.7	1.20.10

Open the chart page →

28,839

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.17.0 1.20.10

Open the chart page →

2,537

prometheus-locust-exporterdeliveryhero

1.2.3

1 of 1 See more

prometheus-locust-exporter deliveryhero 1.2.3

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.20.10

Open the chart page →

1,276

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.17.0 1.20.10

Open the chart page →

2,271

keydbfinkinfridom

0.48.3

1 of 1 See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.20.10

Open the chart page →

5,264

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.17.0 1.20.10

Open the chart page →

3,030

error-pagesgeek-cookbook

1.2.2

1 of 1 See more

error-pages geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/error-pages :2.6.0	13e73da04ee4	stdlib@go1.17.6	1.20.10

Open the chart page →

1,110

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.10	0.17.0 1.20.10

Open the chart page →

7,579

multusgeek-cookbook

3.5.2

2 of 3 See more

multus geek-cookbook 3.5.2

2 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/cni-plugins :v0.9.1	241592d93640	stdlib@go1.15.8	1.20.10
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.13.10	0.17.0 1.20.10

Open the chart page →

4,906

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	stdlib@go1.15	1.20.10

Open the chart page →

13,950

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	stdlib@go1.18.4	1.20.10

Open the chart page →

9,627

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.17.0 1.20.10

Open the chart page →

10,154

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.4	0.17.0 1.20.10

Open the chart page →

2,330

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.17.0 1.20.10

Open the chart page →

3,371

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.17	0.17.0 1.20.10

Open the chart page →

2,610

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	stdlib@go1.16.7	1.20.10

Open the chart page →

10,628

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.17.0 1.20.10

Open the chart page →

2,234

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	stdlib@go1.20.4	1.20.10

Open the chart page →

11,839

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.20.10

Open the chart page →

6,711

unifi-pollerhalkeye

0.1.2

1 of 1 See more

unifi-poller halkeye 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
golift/unifi-poller :2.0.0	cafac968b540	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.13.7	0.17.0 1.20.10

Open the chart page →

1,654

health-exporterhealth-exporter

0.3.4

1 of 1 See more

health-exporter health-exporter 0.3.4

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.2	0.17.0 1.20.10

Open the chart page →

1,558

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.19.5	0.17.0 1.20.10

Open the chart page →

2,622

Container images carrying it

2,153 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	stdlib@go1.19.13	1.20.10	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.17.0 1.20.10	3
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.17.0 1.20.10	3
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.20.10	3
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.19.2	0.17.0 1.20.10	3
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.20.10	3
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.20.10	3
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.10	0.17.0 1.20.10	3
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.9	0.17.0 1.20.10	3
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.17.0 1.20.10	3
quay.io/metallb/controller :v0.13.10	1b33357b3595	golang.org/x/net@v0.8.0 stdlib@go1.19.5	0.17.0 1.20.10	3
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	stdlib@go1.17.7	1.20.10	3
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.17.0 1.20.10	3
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.17.0 1.20.10	3
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0 stdlib@go1.20.6	0.17.0 1.20.10	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.17.0 1.20.10	3
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16	0.17.0 1.20.10	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.17.0 1.20.10	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.17.0 1.20.10	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.17.3	0.17.0 1.20.10	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.17.0 1.20.10	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.17.0 1.20.10	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.8	0.17.0 1.20.10	3
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.17.0 1.20.10	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.17.0 1.20.10	3
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10	3
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10	3
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.17.0 1.20.10	3
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.16.8	0.17.0 1.20.10	2
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.20.10	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.17.0 1.20.10	2
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.17.0 1.20.10	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.17.0 1.20.10	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0 stdlib@go1.17.10	0.17.0 1.20.10	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.17.0 1.20.10	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.6	0.17.0 1.20.10	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.17.0 1.20.10	2
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.20.10	2
bitnamilegacy/postgresql :14.4.0-debian-11-r23	7e7ebb082031	stdlib@go1.16.7	1.20.10	2
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.20.10	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/net@v0.8.0 stdlib@go1.17.13	0.17.0 1.20.10	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/net@v0.8.0 stdlib@go1.19.9	0.17.0 1.20.10	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.7	0.17.0 1.20.10	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.5	0.17.0 1.20.10	2
clickhouse/clickhouse-server :24.2	ed9640bfff07	stdlib@go1.19.10	1.20.10	2
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.20.10	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6 stdlib@go1.16.3	0.17.0 1.20.10	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.17.0 1.20.10	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.17.0 1.20.10	2