StackRadar

CVE-2025-22868

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,634
of 17,790 indexed, latest versions
Container images
2,030
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

Carried by container images the latest versions of 1,634 of 17,790 indexed charts deploy, on 2,030 images.

Affected packageAffected versionsFixed inImages
golang.org/x/oauth2golangv0.0.0-20170629032740-5432cc9688e6, v0.0.0-20170807180024-9a379c6b3e95, v0.0.0-20180620175406-ef147856a6dd, v0.0.0-20180724155351-3d292e4d0cdc+72 more0.27.02,030
OSV records
GHSA-6v2p-p543-phr9
Also known as
GO-2025-3488

Charts affected

1,634 by stars
ChartLatestAffected imagesRadar Score
moonaerokube1.1.372 of 3See more

moon aerokube 1.1.37

2 of the 3 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
aerokube/moon:1.9.17da76ca51220d
golang.org/x/oauth2@v0.20.0
0.27.0
aerokube/moon-api:1.9.176b6323e75785
golang.org/x/oauth2@v0.20.0
0.27.0

Open the chart page →

2,472
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
conduction/agendaservice-php:latest9cfeeb6c7c20
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0

Open the chart page →

7,209
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
golang.org/x/oauth2@v0.6.0
0.27.0

Open the chart page →

1,716
mt-channel-brokerahhhhVerified publisher0.1.03 of 3See more

mt-channel-broker ahhhh 0.1.0

3 of the 3 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filterdigest-pinnedd675f211a40f
golang.org/x/oauth2@v0.22.0
0.27.0
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingressdigest-pinnedec4b544499ba
golang.org/x/oauth2@v0.22.0
0.27.0
gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_brokerdigest-pinned395f4ff1bd34
golang.org/x/oauth2@v0.22.0
0.27.0

Open the chart page →

2,607
net-istioahhhhVerified publisher0.1.12 of 2See more

net-istio ahhhh 0.1.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinnede70bc675f977
golang.org/x/oauth2@v0.22.0
0.27.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned7d76a6d42d13
golang.org/x/oauth2@v0.22.0
0.27.0

Open the chart page →

1,114
net-kourierahhhhVerified publisher0.18.11 of 1See more

net-kourier ahhhh 0.18.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourierdigest-pinned15a601147ef4
golang.org/x/oauth2@v0.26.0
0.27.0

Open the chart page →

508
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
golang.org/x/oauth2@v0.21.0
0.27.0

Open the chart page →

4,685
airbyteairbyte-v2Verified publisher2.3.01See more

airbyte airbyte-v2 2.3.0

1 container image this version deploys carries CVE-2025-22868.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.27.2b44cbfeb43db
golang.org/x/oauth2@v0.26.0
0.27.0

Open the chart page →

—
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f
0.27.0

Open the chart page →

4,547
akriakri0.12.551 of 3See more

akri akri 0.12.55

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602
0.27.0

Open the chart page →

1,545
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

13,689
akto-hybrid-redactakto1.44.61 of 5See more

akto-hybrid-redact akto 1.44.6

1 of the 5 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

4,089
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

6,447
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

6,395
akto-protectionakto0.1.01 of 4See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

11,283
akto-testing-db-layerakto1.42.171 of 2See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

4,856
kpubberalekcVerified publisher0.0.41 of 1See more

kpubber alekc 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/alekc/kpubber:v0.0.2a462d5797e14
golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f
0.27.0

Open the chart page →

2,228
gitlab-code-review-notifieralmorgvVerified publisher0.1.21 of 2See more

gitlab-code-review-notifier almorgv 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
almorgv/gitlab-code-review-notifier:0.1.25f2a7d2b44d8
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0

Open the chart page →

2,115
flux-suspension-exporteralpineworks0.1.11 of 1See more

flux-suspension-exporter alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
golang.org/x/oauth2@v0.25.0
0.27.0

Open the chart page →

557
flux-suspensions-exporteralpineworks0.1.01 of 1See more

flux-suspensions-exporter alpineworks 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
golang.org/x/oauth2@v0.25.0
0.27.0

Open the chart page →

557
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
golang.org/x/oauth2@v0.18.0
0.27.0

Open the chart page →

4,414
katalog-agentalpineworks0.1.21 of 1See more

katalog-agent alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-agent:v1.0.48f50bd568c2b
golang.org/x/oauth2@v0.23.0
0.27.0

Open the chart page →

575
amorphieamorphie0.1.28 of 18See more

amorphie amorphie 0.1.2

8 of the 18 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
burganbank/vault-initializer:v19259c34e4037
golang.org/x/oauth2@v0.10.0
0.27.0
daprio/dashboard:0.14.07ba5d51e5b97
golang.org/x/oauth2@v0.5.0
0.27.0
daprio/injector:1.11.2763b9b70b0c8
golang.org/x/oauth2@v0.8.0
0.27.0
daprio/operator:1.11.2c584428aa12d
golang.org/x/oauth2@v0.8.0
0.27.0
daprio/placement:1.11.2d8e1446da996
golang.org/x/oauth2@v0.8.0
0.27.0
daprio/sentry:1.11.21f507c1a181b
golang.org/x/oauth2@v0.8.0
0.27.0
hashicorp/vault:1.15.26b4e5dadf082
golang.org/x/oauth2@v0.11.0
0.27.0
hashicorp/vault-k8s:1.3.15d74a885ae3e
golang.org/x/oauth2@v0.11.0
0.27.0

Open the chart page →

28,212
kaianchore-charts0.5.11 of 1See more

kai anchore-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
anchore/kai:v0.5.08aad6d0912dd
golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783
0.27.0

Open the chart page →

1,326
dnsmadeeasy-webhookangelnu6.0.71 of 1See more

dnsmadeeasy-webhook angelnu 6.0.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/angelnu/dnsmadeeasy-webhook:v1.9.0a5ca158b1f02
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

803
maddyangelnu5.0.01 of 1See more

maddy angelnu 5.0.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/foxcpp/maddy:0.9.5de42151adff6
golang.org/x/oauth2@v0.25.0
0.27.0

Open the chart page →

767
cert-manager-webhook-safednsansgroupVerified publisher1.3.01 of 1See more

cert-manager-webhook-safedns ansgroup 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ansgroup/cert-manager-webhook-safedns:v1.0.1cd6b0ef2b309
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0

Open the chart page →

2,488
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:3.56ed80f00fde46
golang.org/x/oauth2@v0.10.0
0.27.0
library/influxdb:2.6.1-alpine44a366dd7724
golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f
0.27.0
prom/prometheus:v2.37.98176adea328e
golang.org/x/oauth2@v0.0.0-20220628200809-02e64fa58f26
0.27.0

Open the chart page →

25,720
antmediaantmediaVerified publisher3.1.02 of 4See more

antmedia antmedia 3.1.0

2 of the 4 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b
0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0

Open the chart page →

4,615
ingress-nginxantmediaVerified publisher4.4.02 of 2See more

ingress-nginx antmedia 4.4.0

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b
0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0

Open the chart page →

3,322
nfs-server-provisioneranvibo1.3.01 of 1See more

nfs-server-provisioner anvibo 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0

Open the chart page →

2,730
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
golang.org/x/oauth2@v0.15.0
0.27.0

Open the chart page →

2,947
app-mobilityappmo0.1.03 of 5See more

app-mobility appmo 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
golang.org/x/oauth2@v0.0.0-20220622183110-fd043fe589d2
0.27.0
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f
0.27.0
velero/velero:v1.8.18d784580931c
golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914
0.27.0

Open the chart page →

12,520
auditorappscodeVerified publisher2023.10.11 of 1See more

auditor appscode 2023.10.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/auditor:v0.0.1c62c89ee706d
golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8
0.27.0

Open the chart page →

1,673
capa-vpc-peering-operatorappscodeVerified publisher2023.12.111 of 1See more

capa-vpc-peering-operator appscode 2023.12.11

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
golang.org/x/oauth2@v0.11.0
0.27.0

Open the chart page →

1,433
capi-ops-managerappscodeVerified publisher2024.8.142 of 2See more

capi-ops-manager appscode 2024.8.14

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/capi-ops-manager:v0.0.57465f35b684c
golang.org/x/oauth2@v0.22.0
0.27.0
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6
0.27.0

Open the chart page →

3,416
cluster-proxyappscodeVerified publisher2024.2.251 of 1See more

cluster-proxy appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-proxy:latest27a5c64b7ea8
golang.org/x/oauth2@v0.16.0
0.27.0

Open the chart page →

1,119
cluster-proxy-managerappscodeVerified publisher2026.6.261 of 1See more

cluster-proxy-manager appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
golang.org/x/oauth2@v0.10.0
0.27.0

Open the chart page →

1,465
docker-machine-operatorappscodeVerified publisher2024.7.91 of 1See more

docker-machine-operator appscode 2024.7.9

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
golang.org/x/oauth2@v0.10.0
0.27.0

Open the chart page →

2,220
fluxcd-addon-managerappscodeVerified publisher2024.2.251 of 1See more

fluxcd-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/fluxcd-addon:v0.0.23acba3df8827
golang.org/x/oauth2@v0.15.0
0.27.0

Open the chart page →

1,304
gateway-converterappscodeVerified publisher2024.8.301 of 1See more

gateway-converter appscode 2024.8.30

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/gateway-converter:v0.0.1b92123805584
golang.org/x/oauth2@v0.21.0
0.27.0

Open the chart page →

1,267
gh-ci-webhookappscodeVerified publisher2026.9.111 of 1See more

gh-ci-webhook appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
golang.org/x/oauth2@v0.21.0
0.27.0

Open the chart page →

1,240
grafanaappscodeVerified publisher2026.9.111 of 1See more

grafana appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana:v2025.2.367d18880448c
golang.org/x/oauth2@v0.0.0-20210113205817-d3ed898aa8a3
0.27.0

Open the chart page →

2,333
inbox-agentappscodeVerified publisher2026.6.21 of 2See more

inbox-agent appscode 2026.6.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.15.0d8cc6ffb9819
golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8
0.27.0

Open the chart page →

2,115
kube-auth-managerappscodeVerified publisher2023.11.141 of 1See more

kube-auth-manager appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
golang.org/x/oauth2@v0.5.0
0.27.0

Open the chart page →

1,945
kube-auth-proxyappscodeVerified publisher2023.11.141 of 1See more

kube-auth-proxy appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
golang.org/x/oauth2@v0.5.0
0.27.0

Open the chart page →

1,945
kubedb-communityappscodeVerified publisher0.24.21 of 2See more

kubedb-community appscode 0.24.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
kubedb/operator:v0.24.01a06ff0bda52
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0

Open the chart page →

2,550
kubedb-enterpriseappscodeVerified publisher0.11.21 of 2See more

kubedb-enterprise appscode 0.11.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
kubedb/kubedb-enterprise:v0.11.05829bcedcb0d
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0

Open the chart page →

2,575
kubedb-oneappscodeVerified publisher2023.12.289 of 10See more

kubedb-one appscode 2023.12.28

9 of the 10 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c
0.27.0
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/stashed/stash-crd-installer:v0.32.0c6f2a844b5dd
golang.org/x/oauth2@v0.5.0
0.27.0
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914
0.27.0

Open the chart page →

15,016
kubedb-provider-awsappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-aws appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
golang.org/x/oauth2@v0.4.0
0.27.0

Open the chart page →

2,527

Container images carrying it

2,030 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
kubernetesui/dashboard-web:1.7.0cc7c31bd2d84
golang.org/x/oauth2@v0.25.0
0.27.0
1
kubernetesui/metrics-scraper:v1.0.876049887f07a
golang.org/x/oauth2@v0.0.0-20220524215830-622c5d57e401
0.27.0
1
kubeshop/kube-webhook-certgen:0.0.7866827c379ae
golang.org/x/oauth2@v0.26.0
0.27.0
1
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
golang.org/x/oauth2@v0.0.0-20220524215830-622c5d57e401
0.27.0
1
kubeshop/kusk-gateway-api:v1.5.4126c713cf7d8
golang.org/x/oauth2@v0.0.0-20220524215830-622c5d57e401
0.27.0
1
kubeshop/kusk-gateway-api-websocket:v1.5.43b4f8345ca5c
golang.org/x/oauth2@v0.0.0-20220524215830-622c5d57e401
0.27.0
1
kubeshop/testkube-api-server:0.11.160ad97f07a78b
golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602
0.27.0
1
kubeshop/testkube-operator:2.1.154def0d0f0d4ab
golang.org/x/oauth2@v0.26.0
0.27.0
1
kubesphere/fluentbit-operator:v0.9.0b87db3c57cb3
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0
1
kubesphere/fluent-operator:v1.0.2702df77228c6
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0
1
kubesphere/ks-extensions-museum:latest29681958f220
golang.org/x/oauth2@v0.10.0
0.27.0
1
kubesphere/kubectl:v1.27.1649b445b1b732
golang.org/x/oauth2@v0.10.0
0.27.0
1
kubesphere/openelb:v0.5.0b5b665c4672c
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0
1
kubesphere/openelb:v0.4.4ed7311a0f9e4
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0
1
kubesphere/porter:v0.4.38d1ed5ee1d2e
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0
1
kubesphere/pvc-autoresizer:v0.19a18a16c7b87
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0
1
kubesphere/storageclass-accessor:v0.1.1eac8f273a9b6
golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602
0.27.0
1
kubestar/event-exporter:latest656606941255
golang.org/x/oauth2@v0.8.0
0.27.0
1
kubesuite/kubereport:latest0262424ee702
golang.org/x/oauth2@v0.23.0
0.27.0
1
kubevip/kube-vip-cloud-provider:v0.0.12f8f4e3401f76
golang.org/x/oauth2@v0.23.0
0.27.0
1
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
golang.org/x/oauth2@v0.10.0
0.27.0
1
kudobuilder/controller:v0.9.069072d979708
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0
1
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8
0.27.0
1
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b
0.27.0
1
kusionstack/karpor:v0.6.4b707d3bf0abd
golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b
0.27.0
1
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
golang.org/x/oauth2@v0.15.0
0.27.0
1
kusionstack/kusion:v0.14.0126c8f0b0976
golang.org/x/oauth2@v0.23.0
0.27.0
1
kusionstack/operating:v0.5.0c28bd96b986b
golang.org/x/oauth2@v0.8.0
0.27.0
1
kvalitetsit/metadoc-app:maine89e351733ad
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0
1
kvalitetsit/metadoc-web:mainf57e7553f5bd
golang.org/x/oauth2@v0.0.0-20210413134643-5e61552d6c78
0.27.0
1
l7mp/stunner-auth-server:1.1.02f8114477ba6
golang.org/x/oauth2@v0.24.0
0.27.0
1
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
golang.org/x/oauth2@v0.24.0
0.27.0
1
layer5/meshery-app-mesh:stable-latest77d59943b3d6
golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5
0.27.0
1
layer5/meshery-consul:stable-latest25a4cc38abcd
golang.org/x/oauth2@v0.12.0
0.27.0
1
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0
1
layer5/meshery-istio:stable-latestfde47c141ec6
golang.org/x/oauth2@v0.15.0
0.27.0
1
layer5/meshery-kuma:stable-latest9d25f029a8a2
golang.org/x/oauth2@v0.7.0
0.27.0
1
layer5/meshery-linkerd:stable-latestb99c73bac1f5
golang.org/x/oauth2@v0.15.0
0.27.0
1
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
golang.org/x/oauth2@v0.5.0
0.27.0
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0
1
layer5/meshery-operator:stable-latest6f58a28fe422
golang.org/x/oauth2@v0.23.0
0.27.0
1
layer5/meshery-osm:stable-latestec898e5786c6
golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783
0.27.0
1
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
golang.org/x/oauth2@v0.5.0
0.27.0
1
leonardomulticloud/webhook:v1.0.0d119918900e8
golang.org/x/oauth2@v0.21.0
0.27.0
1
library/chronograf:1.9.496d8a3f65a4f
golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c
0.27.0
1
library/docker:24.0.2-dind1d148deae16a
golang.org/x/oauth2@v0.5.0
0.27.0
1
library/docker:20.10.21-dind3153fa63f546
golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f
0.27.0
1
library/docker:27-cli851f91d24121
golang.org/x/oauth2@v0.23.0
0.27.0
1
library/docker:27-dindaa3df78ecf32
golang.org/x/oauth2@v0.23.0
0.27.0
1
library/docker:23.0.6-dindafa5d5134900
golang.org/x/oauth2@v0.5.0
0.27.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.