CVE-2023-39325

High

Advisory

Published 11 Oct 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.038; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,870; of 17,781 indexed, latest versions
Container images: 2,153; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP/2 rapid reset can cause excessive work in net/http

Carried by container images the latest versions of 1,870 of 17,781 indexed charts deploy, on 2,153 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+182 more	0.17.0	1,549
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+109 more	1.20.10	2,103

OSV records: DEBIAN-CVE-2023-39325 GHSA-4374-p667-p6c8 GO-2023-2102
Also known as: BIT-golang-2023-39325

Charts affected

1,870 by stars

Chart

Latest

Affected images

Radar Score

kubeservice-namespace-node-affinitykubservice-charts

1.1.2

5 of 5 See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
dongjiang1989/ns-node-affinity :latest	451f7823723c	golang.org/x/net@v0.7.0 stdlib@go1.18.5	0.17.0 1.20.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.17.0 1.20.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.17.0 1.20.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.17.0 1.20.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.17.0 1.20.10

Open the chart page →

6,872

kubeservice-scheduler-pluskubservice-charts

0.2.1

1 of 2 See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	golang.org/x/net@v0.7.0 stdlib@go1.19.9	0.17.0 1.20.10

Open the chart page →

1,801

kube-fencingkvaps

2.4.1

2 of 2 See more

kube-fencing kvaps 2.4.1

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.17.0 1.20.10
ghcr.io/kvaps/kube-fencing-switcher :v2.4.0	f8c378e63b78	stdlib@go1.18.8	1.20.10

Open the chart page →

2,536

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15.14	0.17.0 1.20.10
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.14	0.17.0 1.20.10
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.17.0 1.20.10
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.14	0.17.0 1.20.10

Open the chart page →

15,547

landelijketabellencataloguslandelijketabellencatalogus

1.0.0

1 of 3 See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.17.0 1.20.10

Open the chart page →

7,510

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.13.8	0.17.0 1.20.10

Open the chart page →

4,418

linkerd-jaegerlinkerd2-edge

30.14.11-edge

2 of 4 See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.17.0 1.20.10
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.17.0 1.20.10

Open the chart page →

4,389

litlyxlitlyx

0.2.0

1 of 5 See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mongo :8.0.11	dca8d11fe467	stdlib@go1.18.2	1.20.10

Open the chart page →

7,874

jspolicyloft

0.2.2

1 of 1 See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
loftsh/jspolicy :0.2.2	25deb9bd2683	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.13	0.17.0 1.20.10

Open the chart page →

2,309

vcluster-eksloft

0.0.0-ci.3

3 of 4 See more

vcluster-eks loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.17.0 1.20.10
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.20.10
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.20.10

Open the chart page →

3,304

vcluster-k0sloft

0.0.0-ci.3

1 of 2 See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.17.0 1.20.10

Open the chart page →

3,136

log2rbac-operatorlog2rbac-operator

0.0.5

1 of 1 See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jkremser/log2rbac :v0.0.5	e35cf56ef183	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.17.0 1.20.10

Open the chart page →

1,938

logclilogcli

0.1.0

1 of 1 See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	golang.org/x/net@v0.0.0-20210505214959-0714010a04ed stdlib@go1.16.2	0.17.0 1.20.10

Open the chart page →

2,947

voice-biometricslumenvox

2.0.1

8 of 26 See more

voice-biometrics lumenvox 2.0.1

8 of the 26 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.20.10
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.17.0 1.20.10
lumenvox/cloud-init-tools :2.0.0	7ff037a71c50	stdlib@go1.17.3	1.20.10
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.3	0.17.0 1.20.10
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.20.10
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.17.0 1.20.10
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.17.0 1.20.10
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.17.0 1.20.10

Open the chart page →

70,741

magentomagento

3.2.3

1 of 12 See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mariadb :10.4	22edfe1c7834	stdlib@go1.18.2	1.20.10

Open the chart page →

13,479

goblackholemain

0.0.4

1 of 1 See more

goblackhole main 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
bedag/goblackhole :0.2.0	447a88598f4c	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.6	0.17.0 1.20.10

Open the chart page →

1,972

plane-enterprisemakeplane

3.7.1

1 of 13 See more

plane-enterprise makeplane 3.7.1

1 of the 13 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.20.10

Open the chart page →

4,942

mattermost-enterprise-editionmattermost

2.6.103

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.10	0.17.0 1.20.10

Open the chart page →

3,600

traefik-forward-authmesosphere

0.3.10

2 of 2 See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.11	0.17.0 1.20.10
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.15	0.17.0 1.20.10

Open the chart page →

5,308

subspacemglants

0.1.0

1 of 1 See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14.6	0.17.0 1.20.10

Open the chart page →

3,254

librenmsmidokura-community

0.3.2

1 of 6 See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
librenms/librenms :22.4.1	4f1f3d667cc7	stdlib@go1.16.12	1.20.10

Open the chart page →

8,967

chartmuseummike7515

1.2.0

1 of 1 See more

chartmuseum mike7515 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/net@v0.0.0-20220531201128-c960675eff93 stdlib@go1.17.8	0.17.0 1.20.10

Open the chart page →

3,168

miniomilvus

8.0.17

1 of 1 See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.17.0 1.20.10

Open the chart page →

6,915

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.17.0 1.20.10

Open the chart page →

13,738

podsyncmy0n

1.5.4

1 of 2 See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
tdeutsch/podsync :v2.4.2	b67186f4c9a5	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.19.3	0.17.0 1.20.10

Open the chart page →

2,059

maddymya

22.4.12

1 of 2 See more

1,412

registrymya

22.4.11

1 of 1 See more

registry mya 22.4.11

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
distribution/distribution :2.8.3	f84b2078238f	stdlib@go1.20.8	1.20.10

Open the chart page →

899

satisfactorynaj98

1.1.1

1 of 1 See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.1	199be1064b18	stdlib@go1.18.1	1.20.10

Open the chart page →

3,689

nats-account-servernats

0.8.1

1 of 1 See more

nats-account-server nats 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
natsio/nats-account-server :1.0.0	a3381560aab6	stdlib@go1.16.6	1.20.10

Open the chart page →

2,634

clowder2ncsa

1.9.7

3 of 12 See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	stdlib@go1.18.2	1.20.10
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.4	0.17.0 1.20.10
bitnamilegacy/rabbitmq :3.10.8	8f7161d8ce19	stdlib@go1.16.7	1.20.10

Open the chart page →

37,373

ngrok-operatorngrok-operator

1.1.0

1 of 2 See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.15	0.17.0 1.20.10

Open the chart page →

1,896

node-exporternode-exporter

0.1.10

1 of 1 See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.17.0 1.20.10

Open the chart page →

1,229

helm-composenousefreak

0.1.3

1 of 2 See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.2-focal	490f01279be1	stdlib@go1.16.7	1.20.10

Open the chart page →

14,250

oadaoada

5.0.5

1 of 11 See more

oada oada 5.0.5

1 of the 11 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.17.0 1.20.10

Open the chart page →

13,317

open5gs-webuiopen5gs-webui

2.3.1

1 of 2 See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.20.10

Open the chart page →

5,300

openvaultopenvault

0.8.1

1 of 2 See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/wgbh-mla/ov-frontend :v1.1.0	bfc3118f6565	stdlib@go1.20.4	1.20.10

Open the chart page →

6,873

opikopik

2.2.59

2 of 13 See more

opik opik 2.2.59

2 of the 13 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mysql :8.4.2	ac80b6e09e5b	stdlib@go1.18.2	1.20.10
library/zookeeper :3.9.4	dfa9ba46d14b	stdlib@go1.18.1	1.20.10

Open the chart page →

14,334

kubernetes-dashboard-proxyosc

0.7.2

3 of 4 See more

kubernetes-dashboard-proxy osc 0.7.2

3 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.7.0	2e500d29e9d5	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.17.0 1.20.10
kubernetesui/metrics-scraper :v1.0.8	76049887f07a	golang.org/x/net@v0.0.0-20220524220425-1d687d428aca stdlib@go1.18.2	0.17.0 1.20.10
quay.io/oauth2-proxy/oauth2-proxy :v7.1.3	ecd26b74a01f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16	0.17.0 1.20.10

Open the chart page →

6,005

hlf-caowkin

2.1.0

1 of 2 See more

hlf-ca owkin 2.1.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.17.0 1.20.10

Open the chart page →

3,424

hlf-ordowkin

3.1.0

1 of 1 See more

hlf-ord owkin 3.1.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.17.0 1.20.10

Open the chart page →

3,350

hlf-peerowkin

5.1.0

1 of 1 See more

hlf-peer owkin 5.1.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.17.0 1.20.10

Open the chart page →

3,688

prometheus-cachethqoxyno-zeta

1.1.1

1 of 1 See more

prometheus-cachethq oxyno-zeta 1.1.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
oxynozeta/prometheus-cachethq :1.1.1	31f11669d597	stdlib@go1.15.1	1.20.10

Open the chart page →

1,713

ngrok-operatorpaganuzzi

0.0.2

1 of 1 See more

ngrok-operator paganuzzi 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.15.12	0.17.0 1.20.10

Open the chart page →

2,811

uptime-kumapascaliske

3.0.0

1 of 1 See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.0.2-slim-rootless	9865163f92c1	stdlib@go1.20.5	1.20.10

Open the chart page →

6,883

patch-operatorpatch-operator

0.1.11

2 of 2 See more

patch-operator patch-operator 0.1.11

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.17.0 1.20.10
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0

Open the chart page →

7,807

pdf-editor-helmpdf-editor-web

1.0.0

2 of 4 See more

pdf-editor-helm pdf-editor-web 1.0.0

2 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
dipugodocker/pdf-editor :1.0-backend-rotate	316e203b8bf5	stdlib@go1.18.7	1.20.10
dipugodocker/pdf-editor :1.0-backend-merge	70b07544a604	stdlib@go1.18.7	1.20.10

Open the chart page →

4,206

spirephilips-labs

0.12.2

5 of 6 See more

spire philips-labs 0.12.2

5 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/spiffe-csi-driver :0.2.3	4144101005b2	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.17.0 1.20.10
ghcr.io/spiffe/spire-agent :1.6.0	62517726d0c4	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.17.0 1.20.10
ghcr.io/spiffe/spire-controller-manager :0.2.2	5e90b2d092df	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.17.0 1.20.10
ghcr.io/spiffe/spire-server :1.6.0	635b9024cad2	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.17.0 1.20.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.2	a13bff2ed69a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.17.0 1.20.10

Open the chart page →

7,236

chadbotphntom

0.2.3

1 of 1 See more

chadbot phntom 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
phntom/chadbot :0.2.3	97c28e4178ad	golang.org/x/net@v0.11.0	0.17.0

Open the chart page →

1,103

chartmuseumphntom

4.0.20

1 of 1 See more

chartmuseum phntom 4.0.20

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
phntom/chartmuseum :v0.16.0	53883b65d9b7	golang.org/x/net@v0.10.0 stdlib@go1.19.3	0.17.0 1.20.10

Open the chart page →

2,939

phonebook-chartphonebook-chart

0.1.0

1 of 3 See more

phonebook-chart phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.20.10

Open the chart page →

3,034

Container images carrying it

2,153 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	stdlib@go1.19.13	1.20.10	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.17.0 1.20.10	3
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.17.0 1.20.10	3
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.20.10	3
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.19.2	0.17.0 1.20.10	3
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.20.10	3
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.20.10	3
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.10	0.17.0 1.20.10	3
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.9	0.17.0 1.20.10	3
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.17.0 1.20.10	3
quay.io/metallb/controller :v0.13.10	1b33357b3595	golang.org/x/net@v0.8.0 stdlib@go1.19.5	0.17.0 1.20.10	3
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	stdlib@go1.17.7	1.20.10	3
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.17.0 1.20.10	3
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.17.0 1.20.10	3
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0 stdlib@go1.20.6	0.17.0 1.20.10	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.17.0 1.20.10	3
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16	0.17.0 1.20.10	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.17.0 1.20.10	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.17.0 1.20.10	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.17.3	0.17.0 1.20.10	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.17.0 1.20.10	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.17.0 1.20.10	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.8	0.17.0 1.20.10	3
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.17.0 1.20.10	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.17.0 1.20.10	3
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10	3
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10	3
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.17.0 1.20.10	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.17.0 1.20.10	3
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.16.8	0.17.0 1.20.10	2
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.20.10	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.17.0 1.20.10	2
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.17.0 1.20.10	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.17.0 1.20.10	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0 stdlib@go1.17.10	0.17.0 1.20.10	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.17.0 1.20.10	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.6	0.17.0 1.20.10	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.17.0 1.20.10	2
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.20.10	2
bitnamilegacy/postgresql :14.4.0-debian-11-r23	7e7ebb082031	stdlib@go1.16.7	1.20.10	2
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.20.10	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/net@v0.8.0 stdlib@go1.17.13	0.17.0 1.20.10	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/net@v0.8.0 stdlib@go1.19.9	0.17.0 1.20.10	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.7	0.17.0 1.20.10	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.5	0.17.0 1.20.10	2
clickhouse/clickhouse-server :24.2	ed9640bfff07	stdlib@go1.19.10	1.20.10	2
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.20.10	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6 stdlib@go1.16.3	0.17.0 1.20.10	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.17.0 1.20.10	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.17.0 1.20.10	2