CVE-2025-22868

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 56th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,616; of 17,787 indexed, latest versions
Container images: 2,004; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

Carried by container images the latest versions of 1,616 of 17,787 indexed charts deploy, on 2,004 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/oauth2golang	v0.0.0-20170629032740-5432cc9688e6, v0.0.0-20170807180024-9a379c6b3e95, v0.0.0-20180620175406-ef147856a6dd, v0.0.0-20180724155351-3d292e4d0cdc+72 more	0.27.0	2,004

OSV records: GHSA-6v2p-p543-phr9
Also known as: GO-2025-3488

Charts affected

1,616 by stars

Chart

Latest

Affected images

Radar Score

supabasetokens-studio

1.0.0

2 of 14 See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	golang.org/x/oauth2@v0.23.0	0.27.0
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

23,123

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/oauth2@v0.18.0	0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,107

kube-prometheuschoerodon

9.3.1

2 of 7 See more

kube-prometheus choerodon 9.3.1

2 of the 7 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/oauth2@v0.0.0-20190523182746-aaccbc9213b0	0.27.0

Open the chart page →

12,237

minifluxgabe565

0.9.2

1 of 2 See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/oauth2@v0.25.0	0.27.0

Open the chart page →

1,247

cubestoregadsme

1.2.0

1 of 3 See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/oauth2@v0.8.0	0.27.0

Open the chart page →

3,025

waypointhashicorp

0.1.21

1 of 2 See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/oauth2@v0.1.0	0.27.0

Open the chart page →

4,167

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0

Open the chart page →

7,857

purelbpurelb

0.0.0-106-ipv6-lbip-052cedab

1 of 2 See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

4,413

dex-k8s-authenticatorsagikazarmark

0.0.3

1 of 1 See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

2,791

tailing-sidecar-operatortailing-sidecar-operator

0.111.0

1 of 2 See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

1,205

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0

Open the chart page →

1,513

devtron-operatordevtron

0.23.3

5 of 11 See more

devtron-operator devtron 0.23.3

5 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914	0.27.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/oauth2@v0.1.0	0.27.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0

Open the chart page →

32,902

drone-runner-kubedrone

0.1.10

1 of 1 See more

drone-runner-kube drone 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,067

ilumilum

6.7.3

2 of 19 See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gitea/gitea :1.22.3	76f516a1a8c2	golang.org/x/oauth2@v0.21.0	0.27.0
ilum/api :6.7.3	624fd09528c8	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

23,228

temporallemontech

0.37.0

5 of 13 See more

temporal lemontech 0.37.0

5 of the 13 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/oauth2@v0.4.0	0.27.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/oauth2@v0.0.0-20211005180243-6b3c2da341f1	0.27.0

Open the chart page →

14,893

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	golang.org/x/oauth2@v0.0.0-20180821212333-d2e6202438be	0.27.0

Open the chart page →

30,326

nfs-server-provisionernfs-ganesha-server-and-external-provisioner

1.8.0

1 of 1 See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

2,315

syftopenmined

0.9.5

2 of 6 See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/traefik :v2.11.0	0a5157f742d2	golang.org/x/oauth2@v0.16.0	0.27.0
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

17,245

pyrrarlex

0.15.0

1 See more

pyrra rlex 0.15.0

1 container image this version deploys carries CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

—

helm-exportersstarcher

0.5.0

1 of 1 See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

4,154

istio-operatorwiremind

1.18.2

1 of 1 See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
istio/operator :1.18.2	70f9d1fe5fff	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

5,630

astarte-operatorastarte

26.5.2

1 of 1 See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

695

awx-operatorawx-operator-helm

3.2.1

2 of 2 See more

awx-operator awx-operator-helm 3.2.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

9,868

cadvisorckotzbauer

2.4.3

1 of 1 See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.52.1	f40e65878e25	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

961

dronecommunity-charts

0.1.5

1 of 2 See more

drone community-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,728

uptime-kumaduyet

0.1.7

1 of 1 See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.18.5	a84767d7934f	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

4,515

emqx-operatoremqx-operator

2.3.2

2 of 2 See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/oauth2@v0.21.0	0.27.0
ghcr.io/emqx/emqx-operator :2.3.2	3333ed546165	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

4,531

kube-routerenix

1.10.0

1 of 1 See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
cloudnativelabs/kube-router :v1.6.0	0ec7cd73f43f	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

2,344

logging-operatorkube-logging

4.2.3

1 of 1 See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/logging-operator :4.2.2	0dd85dcb1f73	golang.org/x/oauth2@v0.5.0	0.27.0

Open the chart page →

880

keptnlifecycle-toolkit

0.11.0

3 of 3 See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/oauth2@v0.21.0	0.27.0
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/oauth2@v0.23.0	0.27.0
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

1,927

tailscale-relaymvisonneau

0.2.7

1 of 1 See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/oauth2@v0.16.0	0.27.0

Open the chart page →

1,356

sops-operatorsops-operator

0.10.1

1 of 2 See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

1,248

uffizzi-controlleruffizzi-controller

2.4.6

8 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

8 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/oauth2@v0.10.0	0.27.0
uffizzi/uffizzi-cluster-operator :v1.6.5	5ca448a08783	golang.org/x/oauth2@v0.4.0	0.27.0
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-startupapicheck :v1.14.5	0f5b104bdd1b	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	golang.org/x/oauth2@v0.15.0	0.27.0
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	golang.org/x/oauth2@v0.18.0	0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

14,240

vsphere-csivsphere-tmm

3.8.1

2 of 7 See more

vsphere-csi vsphere-tmm 3.8.1

2 of the 7 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/oauth2@v0.25.0	0.27.0
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	golang.org/x/oauth2@v0.15.0	0.27.0

Open the chart page →

3,911

wazuhwazuh-helm

0.0.8

1 of 4 See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

6,168

aad-pod-identityaad-pod-identity

4.1.18

2 of 2 See more

aad-pod-identity aad-pod-identity 4.1.18

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

2,858

baserowbaserow-chart

1.0.56

2 of 6 See more

baserow baserow-chart 1.0.56

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	golang.org/x/oauth2@v0.21.0	0.27.0
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/oauth2@v0.13.0	0.27.0

Open the chart page →

17,263

mysql-operatorbitpoke

0.6.3

2 of 2 See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,354

cadvisorcadvisor

0.1.15

1 of 1 See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	golang.org/x/oauth2@v0.3.0	0.27.0

Open the chart page →

1,698

celestia-appcelestia-labs

0.5.0

1 of 3 See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

1,066

cert-manager-webhook-hetznercert-manager-webhook-hetzner

0.2.1

1 of 1 See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,080

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/oauth2@v0.0.0-20200902213428-5d25da1a8d43	0.27.0
library/traefik :2.5.4	7d0228d19042	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

52,919

daskhubdask

2024.1.1

2 of 9 See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/traefik :2.10.6	1957e3314f43	golang.org/x/oauth2@v0.10.0	0.27.0
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

14,094

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

27,267

drone-runner-dockerdrone

0.7.0

1 of 3 See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/docker :20-dind	af96c680a7e1	golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783	0.27.0

Open the chart page →

5,674

k8s-image-swapperestahn

1.11.0

1 of 2 See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/oauth2@v0.14.0	0.27.0

Open the chart page →

1,981

loadtesterflagger

0.39.0

1 of 1 See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

1,760

flyteflyte

1.16.8

1 of 11 See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,281

geonode-k8sgeonode-k8s

2.0.0

1 of 10 See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

13,953

hertzbeathertzbeat

1.8.1

1 of 4 See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
victoriametrics/victoria-metrics :v1.95.1	f52723a08a44	golang.org/x/oauth2@v0.14.0	0.27.0

Open the chart page →

14,000

Container images carrying it

2,004 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gkarthics/container-resource-exporter :latest	6799af333e8a	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
goalert/goalert :v0.32.0	08d57388b0cb	golang.org/x/oauth2@v0.16.0	0.27.0	1
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	golang.org/x/oauth2@v0.25.0	0.27.0	1
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/oauth2@v0.20.0	0.27.0	1
gocrane/craned :v0.5.1	a1400909118c	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	1
gocrane/crane-scheduler-controller :0.1.23	a2d7e60576f9	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	1
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
goharbor/harbor-core :v2.9.0	6412d679fdc3	golang.org/x/oauth2@v0.5.0	0.27.0	1
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914	0.27.0	1
goharbor/harbor-core :v2.11.1	c017dd84ee96	golang.org/x/oauth2@v0.19.0	0.27.0	1
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914	0.27.0	1
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914	0.27.0	1
goharbor/harbor-registryctl :v2.9.0	cce272836449	golang.org/x/oauth2@v0.5.0	0.27.0	1
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
goharbor/trivy-adapter-photon :v2.9.0	dc5b882a7db4	golang.org/x/oauth2@v0.7.0	0.27.0	1
gomods/athens :v0.8.1	d714c7ff0231	golang.org/x/oauth2@v0.0.0-20190226205417-e64efc72b421	0.27.0	1
gomods/athens :v0.11.0	efb811df7844	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/oauth2@v0.21.0	0.27.0	1
grafana/agent :v0.20.0	825c09373d27	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	1
grafana/agent :v0.40.3	f6cbec9409be	golang.org/x/oauth2@v0.16.0	0.27.0	1
grafana/agent-operator :v0.34.1	045c9125634c	golang.org/x/oauth2@v0.7.0	0.27.0	1
grafana/alloy :v1.5.1	01a63f4e032c	golang.org/x/oauth2@v0.23.0	0.27.0	1
grafana/alloy :v1.4.3	06bdcbb51fc2	golang.org/x/oauth2@v0.22.0	0.27.0	1
grafana/alloy :v1.1.1	c3dac4e26471	golang.org/x/oauth2@v0.19.0	0.27.0	1
grafana/beyla :1.3.3	36d07f8d276e	golang.org/x/oauth2@v0.16.0	0.27.0	1
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/oauth2@v0.0.0-20190319182350-c85d3e98c914	0.27.0	1
grafana/grafana :10.1.5	0679e877ba20	golang.org/x/oauth2@v0.8.0	0.27.0	1
grafana/grafana :7.5.6	09bb407e26ab	golang.org/x/oauth2@v0.0.0-20210113205817-d3ed898aa8a3	0.27.0	1
grafana/grafana :7.3.3	15b977f5207d	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
grafana/grafana :9.4.7	1a359d92f40e	golang.org/x/oauth2@v0.3.0	0.27.0	1
grafana/grafana :10.1.1	1b9ca4bbc4a2	golang.org/x/oauth2@v0.8.0	0.27.0	1
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/oauth2@v0.6.0	0.27.0	1
grafana/grafana :11.2.2-security-01	464eac539793	golang.org/x/oauth2@v0.21.0	0.27.0	1
grafana/grafana :11.5.1	5781759b3d27	golang.org/x/oauth2@v0.25.0	0.27.0	1
grafana/grafana :8.0.3	696823fbc561	golang.org/x/oauth2@v0.0.0-20210413134643-5e61552d6c78	0.27.0	1
grafana/grafana :10.2.3	6b5b37eb35bb	golang.org/x/oauth2@v0.15.0	0.27.0	1
grafana/grafana :7.3.4	6d42886b3ebe	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
grafana/grafana :9.4.3	76dcf36e7d2a	golang.org/x/oauth2@v0.3.0	0.27.0	1
grafana/grafana :10.3.3	8640e5038e83	golang.org/x/oauth2@v0.15.0	0.27.0	1
grafana/grafana :11.5.2	8b37a2f028f1	golang.org/x/oauth2@v0.25.0	0.27.0	1
grafana/grafana :9.1.1	9746858c20e6	golang.org/x/oauth2@v0.0.0-20220608161450-d0670ef3b1eb	0.27.0	1
grafana/grafana :9.0.1	a738d0744784	golang.org/x/oauth2@v0.0.0-20220309155454-6242fa91716a	0.27.0	1
grafana/grafana :11.1.3	b23b588cf7cb	golang.org/x/oauth2@v0.20.0	0.27.0	1
grafana/grafana :6.5.1	befcd84da2c1	golang.org/x/oauth2@v0.0.0-20190319182350-c85d3e98c914	0.27.0	1
grafana/grafana :8.3.5	cd7cb4345aa7	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	1
grafana/grafana :8.3.4	cf81d2c753c8	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	1