CVE-2023-39325

High

Advisory

Published 11 Oct 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.038; 89th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,870; of 17,787 indexed, latest versions
Container images: 2,153; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP/2 rapid reset can cause excessive work in net/http

Carried by container images the latest versions of 1,870 of 17,787 indexed charts deploy, on 2,153 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+182 more	0.17.0	1,549
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+109 more	1.20.10	2,103

OSV records: DEBIAN-CVE-2023-39325 GHSA-4374-p667-p6c8 GO-2023-2102
Also known as: BIT-golang-2023-39325

Charts affected

1,870 by stars

Chart

Latest

Affected images

Radar Score

phpipamphpipam-helm

1.0.12

1 of 3 See more

phpipam phpipam-helm 1.0.12

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mysql :8.0.40	d58ac93387f6	stdlib@go1.18.2	1.20.10

Open the chart page →

3,778

pipelinewise-operatorpipelinewise-operator

0.5.1

1 of 1 See more

pipelinewise-operator pipelinewise-operator 0.5.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
dirathea/pipelinewise-operator :v0.5.0	8d4c9f773ae1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.15.8	0.17.0 1.20.10

Open the chart page →

2,121

secrets-store-csi-driver-provider-awsportefaix-hub

0.4.0

1 of 1 See more

secrets-store-csi-driver-provider-aws portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-2021.08.13.20.34-linux-amd64	02aed3370fce	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.17.0 1.20.10

Open the chart page →

2,206

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
codercom/code-server :4.11.0-debian	1e2cc688008e	stdlib@go1.14.4	1.20.10

Open the chart page →

31,844

postgres-backuppostgres-backup

0.3.0

2 of 2 See more

postgres-backup postgres-backup 0.3.0

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/postgres :14.1	3162a6ead070	stdlib@go1.16.7	1.20.10
nerzhul/mc-arm64 :2020.10.03	4215df511f31	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.15.2	0.17.0 1.20.10

Open the chart page →

5,462

rethinkdbpozetron

1.1.9

1 of 1 See more

rethinkdb pozetron 1.1.9

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
pozetroninc/rethinkdb-cluster :v2.4.1	6b06a098f994	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.16.9	0.17.0 1.20.10

Open the chart page →

2,912

privacyideaprivacyidea

1.0.6

1 of 2 See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/mariadb :11.7.2	fcc7fcd7114a	stdlib@go1.18.2	1.20.10

Open the chart page →

5,440

prometheus-druid-exporterprometheus-community

1.2.0

1 of 1 See more

prometheus-druid-exporter prometheus-community 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quay.io/opstree/druid-exporter :v0.11	9f01c9c5c2e3	stdlib@go1.15.15	1.20.10

Open the chart page →

1,178

prometheusprometheus-worawutchan

13.0.0

5 of 6 See more

prometheus prometheus-worawutchan 13.0.0

5 of the 6 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.20.10
prom/pushgateway :v1.3.0	c0d39b8d4cfe	stdlib@go1.15.2	1.20.10
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.17.0 1.20.10
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.17.0 1.20.10
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.3	0.17.0 1.20.10

Open the chart page →

9,939

kubernetes-dashboardpyalive-cdmswebapp

5.8.0

1 of 1 See more

kubernetes-dashboard pyalive-cdmswebapp 5.8.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.6.1	290bebc3cd96	golang.org/x/net@v0.0.0-20220526153639-5463443f8c37 stdlib@go1.19	0.17.0 1.20.10

Open the chart page →

1,662

phpqonstrukt

0.2.0

1 of 1 See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
qonstrukt/php :8.4-v8-apache	089af7925aa1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.17.0 1.20.10

Open the chart page →

23,964

minecraft-serverqumine

0.1.1500

1 of 1 See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
qumine/minecraft-server :v0.1.15	c0b650d51132	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.4	0.17.0 1.20.10

Open the chart page →

6,796

velero-s3-deploymentradar-base

0.4.2

2 of 4 See more

velero-s3-deployment radar-base 0.4.2

2 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
velero/velero :v1.9.0	277fbfaf8dcf	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.18	0.17.0 1.20.10
velero/velero-plugin-for-aws :v1.5.0	3d2ea7aab32d	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.11	0.17.0 1.20.10

Open the chart page →

4,798

docker-registry-mirrorregistry-mirror

1.0.1

1 of 1 See more

docker-registry-mirror registry-mirror 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/registry :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.20.10

Open the chart page →

550

reservation-appreservation-app

1.0.9

1 of 4 See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/postgres :9.6	caddd35b05cd	stdlib@go1.16.7	1.20.10

Open the chart page →

6,639

backup-repository-serverriotkit-org

4.0.0

1 of 1 See more

backup-repository-server riotkit-org 4.0.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/riotkit-org/backup-repository :v4.0.0	ab41ffa78f69	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd stdlib@go1.17.13	0.17.0 1.20.10

Open the chart page →

2,049

rke2-canalrke2-charts

3.13.3

2 of 2 See more

rke2-canal rke2-charts 3.13.3

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
rancher/hardened-calico :v3.13.3	6d2cd61a338b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.17.0
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.17.0

Open the chart page →

6,996

cloudflare-tunnelrlex

0.8.0

1 of 1 See more

cloudflare-tunnel rlex 0.8.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2023.10.0	c18744ae1767	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.17.0 1.20.10

Open the chart page →

1,684

hcloud-fip-controllerrlex

0.2.5

1 of 1 See more

hcloud-fip-controller rlex 0.2.5

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
cbeneke/hcloud-fip-controller :v0.4.1	dc658078d7ba	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.15.3	0.17.0 1.20.10

Open the chart page →

2,962

prometheus-webhook-dingtalkrlex

0.0.3

1 of 1 See more

prometheus-webhook-dingtalk rlex 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
timonwong/prometheus-webhook-dingtalk :v1.4.0	a0fcc028bd8d	stdlib@go1.13.5	1.20.10

Open the chart page →

1,852

kimai2robjuz

5.0.14

1 See more

kimai2 robjuz 5.0.14

1 container image this version deploys carries CVE-2023-39325.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :10.6.12-debian-11-r16	78847062532a	stdlib@go1.19.7	1.20.10

Open the chart page →

—

grafanaromanow-helm-charts

1.7.1

1 of 1 See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
grafana/grafana :8.3.4	cf81d2c753c8	golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f stdlib@go1.17.6	0.17.0 1.20.10

Open the chart page →

2,835

jaeger-collectorromanow-helm-charts

1.5.0

1 of 1 See more

jaeger-collector romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.41.0	ff81f0a9f63c	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.17.0 1.20.10

Open the chart page →

1,854

jaeger-queryromanow-helm-charts

1.5.0

1 of 1 See more

jaeger-query romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-query :1.41.0	b636f0f464bc	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.17.0 1.20.10

Open the chart page →

1,797

logstashromanow-helm-charts

1.5.0

1 of 1 See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/logstash :7.17.8	17a4f64e9cf5	stdlib@go1.19.3	1.20.10

Open the chart page →

7,529

routehub-client-hubroutehub-helm

1.0.0

2 of 3 See more

routehub-client-hub routehub-helm 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
eqalpha/keydb :latest	6537505c4235	stdlib@go1.16.7	1.20.10
timescale/timescaledb-ha :pg16	d7db8f1085a3	stdlib@go1.18.1	1.20.10

Open the chart page →

12,930

rabbitmq-operatorsagikazarmark

0.0.3

1 of 1 See more

rabbitmq-operator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
rabbitmqoperator/cluster-operator :1.8.3	231e7ce0e905	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.17	0.17.0 1.20.10

Open the chart page →

2,001

conference-appsalaboy

1.0.0

4 of 7 See more

conference-app salaboy 1.0.0

4 of the 7 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinned	ce9ce8293e4e	stdlib@go1.20.1	1.20.10
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinned	bb64bf14467d	stdlib@go1.20.1	1.20.10
salaboy/frontend-go-1739aa83b5e69d4ccb8a5615830ae66cdigest-pinned	1ff7c90845e4	stdlib@go1.20.1	1.20.10
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned	799c35f9f306	stdlib@go1.20.1	1.20.10

Open the chart page →

10,905

ntfysarab97

0.1.7

1 of 1 See more

ntfy sarab97 0.1.7

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
binwiederhier/ntfy :v2.6.2	83e2e43d9956	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.17.0 1.20.10

Open the chart page →

1,766

uptime-kumasb-helm-charts

0.4.0

1 of 1 See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.0.2	4c364ef96aad	stdlib@go1.20.5	1.20.10

Open the chart page →

38,107

scienceboxsciencebox

0.0.7

2 of 17 See more

sciencebox sciencebox 0.0.7

2 of the 17 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.17.3	0.17.0 1.20.10
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.17.0 1.20.10

Open the chart page →

6,587

iopsciencemesh

0.4.0

1 of 2 See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.17.0 1.20.10

Open the chart page →

4,052

karakeepself-hosters-by-night

2.5.1

1 of 1 See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/karakeep-app/karakeep :0.27.1	abd7d6b11b1b	stdlib@go1.20.7	1.20.10

Open the chart page →

5,213

sentry-k8ssentry-k8s

1.4.1

2 of 11 See more

sentry-k8s sentry-k8s 1.4.1

2 of the 11 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/redis :6.2.20-alpine	77697a75da9f	stdlib@go1.18.2	1.20.10
ghcr.io/getsentry/sentry :26.7.2	7c5052aa4e3c	stdlib@go1.19.8	1.20.10

Open the chart page →

16,449

vuiseriohub

1.0.6

1 of 3 See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
dserio83/velero-api :0.3.1	6b3d9115fee2	stdlib@go1.19.8	1.20.10

Open the chart page →

11,532

clickhousesignoz

24.1.18

3 of 3 See more

clickhouse signoz 24.1.18

3 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.17.0 1.20.10
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.17.0 1.20.10
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.20.10

Open the chart page →

4,695

cosignedsigstore

0.1.23

2 of 2 See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
gcr.io/projectsigstore/cosigneddigest-pinned	784518ff3ee7	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.17.0 1.20.10
gcr.io/projectsigstore/policy-webhookdigest-pinned	82940e8c3e0d	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.17.0 1.20.10

Open the chart page →

5,118

scaffoldsigstore

0.6.114

2 of 15 See more

scaffold sigstore 0.6.114

2 of the 15 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.20.10
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.20.10

Open the chart page →

7,710

postgresql-singlesinextra

1.15.1

1 of 1 See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	stdlib@go1.16.15	1.20.10

Open the chart page →

4,913

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.17.0 1.20.10
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.17.0 1.20.10

Open the chart page →

6,422

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.18	0.17.0 1.20.10

Open the chart page →

2,200

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.17.0 1.20.10

Open the chart page →

2,301

smallest-self-hostsmallest-self-host

0.2.2

1 of 12 See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.17.0 1.20.10

Open the chart page →

7,685

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.17.0 1.20.10

Open the chart page →

1,144

yopasssoftizy

1.0.1

1 of 2 See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.4.6	9516e3b3e88c	stdlib@go1.19.1	1.20.10

Open the chart page →

1,461

artifact-hubsoftonic

1.19.0

1 of 8 See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	golang.org/x/net@v0.11.0 stdlib@go1.19.10	0.17.0 1.20.10

Open the chart page →

14,491

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.13.12	0.17.0 1.20.10

Open the chart page →

2,637

go-ratelimitsoftonic

1.0.7

2 of 3 See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14	0.17.0 1.20.10
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.20.10

Open the chart page →

5,098

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.6	0.17.0 1.20.10

Open the chart page →

2,591

redis-shardedsoftonic

0.5.0

1 of 2 See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-39325.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.20.10

Open the chart page →

2,307

Container images carrying it

2,153 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.17.0 1.20.10	2
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.17.0 1.20.10	2
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.17.0 1.20.10	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.17.0 1.20.10	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b stdlib@go1.19.3	0.17.0 1.20.10	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.5	0.17.0 1.20.10	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/csi-attacher :v3.4.0	8b9c313c05f5	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.1	0103eee7c35e	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.0	4fd21f36075b	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/csi-resizer :v1.5.0	8f7520bd957e	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.3	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/csi-snapshotter :v6.0.1	ad16874e2140	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.17.0 1.20.10	2
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15	0.17.0 1.20.10	2
0xpolygon/heimdall :1.0.1	34ddf259993c	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.17.0 1.20.10	1
1password/connect-api :1.7.2	6aa94cf713f9	golang.org/x/net@v0.14.0 stdlib@go1.20.6	0.17.0 1.20.10	1
1password/connect-sync :1.7.2	fe527ed9d81f	golang.org/x/net@v0.14.0 stdlib@go1.20.6	0.17.0 1.20.10	1
1password/kubernetes-secrets-injector :1.0.2	5884757f7879	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.17.0 1.20.10	1
absaoss/terraform-controller :v0.0.20	ad538a1285a0	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.14.8	0.17.0 1.20.10	1
adguard/adguardhome :v0.107.38	43ec119419a9	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.17.0 1.20.10	1
adguard/adguardhome :v0.107.7	b9974aed13d0	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.9	0.17.0 1.20.10	1
adrianberger/fluxcd-webui :latest	76848c0d2780	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.2	0.17.0 1.20.10	1
aerokube/selenoid-ui :1.10.11	3f3e299509fd	golang.org/x/net@v0.10.0	0.17.0	1
agentarea/agentarea-mcp-runner :latest	d3c209a5d531	stdlib@go1.19.8	1.20.10	1
alex6021710/ai-scale-auth :latest	6c7a47e470c3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.16.12	0.17.0 1.20.10	1
alex6021710/ai-scale-doer :latest	31e533cf7cd3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.16.10	0.17.0 1.20.10	1
alex6021710/ai-scale-migrator :latest	744b8a924f35	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.2	0.17.0 1.20.10	1
alex6021710/ai-scale-provider :latest	5837d9b30cc7	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.15.8	0.17.0 1.20.10	1
alex6021710/ai-scale-saver :latest	f73e8d60fd03	golang.org/x/net@v0.0.0-20211105192438-b53810dc28af stdlib@go1.17	0.17.0 1.20.10	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	stdlib@go1.18.1	1.20.10	1
almir/webhook :2.8.0	1698346f6077	stdlib@go1.14.7	1.20.10	1
almorgv/gitlab-code-review-notifier :0.1.2	5f2a7d2b44d8	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.14.15	0.17.0 1.20.10	1
alpine/git :2.36.3	66b210a97bc0	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.7	0.17.0 1.20.10	1
alpine/k8s :1.22.6	00ac10bcb759	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d stdlib@go1.17.6	0.17.0 1.20.10	1
alpine/k8s :1.27.3	21b24e6bf801	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.20.4	0.17.0 1.20.10	1
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.17.0 1.20.10	1
alpine/k8s :1.31.13	7a319b15cfc9	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.17.0 1.20.10	1
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.17.0 1.20.10	1
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/net@v0.12.0 stdlib@go1.20.5	0.17.0 1.20.10	1
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.2	0.17.0 1.20.10	1
alpine/k8s :1.30.0	bd01dae02676	golang.org/x/net@v0.12.0 stdlib@go1.21.1	0.17.0 1.20.10	1
alpine/k8s :1.30.2	cd560fce90f7	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.17.0 1.20.10	1
alpine/k8s :1.28.13	e5c0b053fed7	golang.org/x/net@v0.12.0 stdlib@go1.20.4	0.17.0 1.20.10	1
alpine/k8s :1.32.3	eec354133193	golang.org/x/net@v0.12.0 stdlib@go1.20.5	0.17.0 1.20.10	1
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/net@v0.9.0 stdlib@go1.20.8	0.17.0 1.20.10	1