CVE-2025-22868

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 56th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,615; of 17,781 indexed, latest versions
Container images: 2,001; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

Carried by container images the latest versions of 1,615 of 17,781 indexed charts deploy, on 2,001 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/oauth2golang	v0.0.0-20170629032740-5432cc9688e6, v0.0.0-20170807180024-9a379c6b3e95, v0.0.0-20180620175406-ef147856a6dd, v0.0.0-20180724155351-3d292e4d0cdc+72 more	0.27.0	2,001

OSV records: GHSA-6v2p-p543-phr9
Also known as: GO-2025-3488

Charts affected

1,615 by stars

Chart

Latest

Affected images

Radar Score

supabasetokens-studio

1.0.0

2 of 14 See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	golang.org/x/oauth2@v0.23.0	0.27.0
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

23,123

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/oauth2@v0.18.0	0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,107

kube-prometheuschoerodon

9.3.1

2 of 7 See more

kube-prometheus choerodon 9.3.1

2 of the 7 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/oauth2@v0.0.0-20190523182746-aaccbc9213b0	0.27.0

Open the chart page →

12,237

minifluxgabe565

0.9.2

1 of 2 See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/oauth2@v0.25.0	0.27.0

Open the chart page →

1,247

cubestoregadsme

1.2.0

1 of 3 See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/oauth2@v0.8.0	0.27.0

Open the chart page →

3,025

waypointhashicorp

0.1.21

1 of 2 See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/oauth2@v0.1.0	0.27.0

Open the chart page →

4,167

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0

Open the chart page →

7,857

purelbpurelb

0.0.0-106-ipv6-lbip-052cedab

1 of 2 See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

4,413

dex-k8s-authenticatorsagikazarmark

0.0.3

1 of 1 See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

2,791

tailing-sidecar-operatortailing-sidecar-operator

0.111.0

1 of 2 See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

1,205

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0

Open the chart page →

1,513

devtron-operatordevtron

0.23.3

5 of 11 See more

devtron-operator devtron 0.23.3

5 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914	0.27.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/oauth2@v0.1.0	0.27.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0

Open the chart page →

32,902

drone-runner-kubedrone

0.1.10

1 of 1 See more

drone-runner-kube drone 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,067

ilumilum

6.7.3

2 of 19 See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gitea/gitea :1.22.3	76f516a1a8c2	golang.org/x/oauth2@v0.21.0	0.27.0
ilum/api :6.7.3	624fd09528c8	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

23,228

temporallemontech

0.37.0

5 of 13 See more

temporal lemontech 0.37.0

5 of the 13 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/oauth2@v0.4.0	0.27.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/oauth2@v0.0.0-20211005180243-6b3c2da341f1	0.27.0

Open the chart page →

14,893

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	golang.org/x/oauth2@v0.0.0-20180821212333-d2e6202438be	0.27.0

Open the chart page →

30,326

nfs-server-provisionernfs-ganesha-server-and-external-provisioner

1.8.0

1 of 1 See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

2,315

syftopenmined

0.9.5

2 of 6 See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/traefik :v2.11.0	0a5157f742d2	golang.org/x/oauth2@v0.16.0	0.27.0
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

17,245

pyrrarlex

0.14.3

1 of 1 See more

pyrra rlex 0.14.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

953

helm-exportersstarcher

0.5.0

1 of 1 See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

4,154

istio-operatorwiremind

1.18.2

1 of 1 See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
istio/operator :1.18.2	70f9d1fe5fff	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

5,630

astarte-operatorastarte

26.5.2

1 of 1 See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

695

awx-operatorawx-operator-helm

3.2.1

2 of 2 See more

awx-operator awx-operator-helm 3.2.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

9,868

cadvisorckotzbauer

2.4.3

1 of 1 See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.52.1	f40e65878e25	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

961

dronecommunity-charts

0.1.5

1 of 2 See more

drone community-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,728

uptime-kumaduyet

0.1.7

1 of 1 See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.18.5	a84767d7934f	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

4,515

emqx-operatoremqx-operator

2.3.2

2 of 2 See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/oauth2@v0.21.0	0.27.0
ghcr.io/emqx/emqx-operator :2.3.2	3333ed546165	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

4,531

kube-routerenix

1.10.0

1 of 1 See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
cloudnativelabs/kube-router :v1.6.0	0ec7cd73f43f	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

2,344

logging-operatorkube-logging

4.2.3

1 of 1 See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/logging-operator :4.2.2	0dd85dcb1f73	golang.org/x/oauth2@v0.5.0	0.27.0

Open the chart page →

880

keptnlifecycle-toolkit

0.11.0

3 of 3 See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/oauth2@v0.21.0	0.27.0
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/oauth2@v0.23.0	0.27.0
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

1,927

tailscale-relaymvisonneau

0.2.7

1 of 1 See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/oauth2@v0.16.0	0.27.0

Open the chart page →

1,356

sops-operatorsops-operator

0.10.1

1 of 2 See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

1,248

uffizzi-controlleruffizzi-controller

2.4.6

8 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

8 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/oauth2@v0.10.0	0.27.0
uffizzi/uffizzi-cluster-operator :v1.6.5	5ca448a08783	golang.org/x/oauth2@v0.4.0	0.27.0
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-startupapicheck :v1.14.5	0f5b104bdd1b	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	golang.org/x/oauth2@v0.15.0	0.27.0
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	golang.org/x/oauth2@v0.18.0	0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

14,240

vsphere-csivsphere-tmm

3.8.1

2 of 7 See more

vsphere-csi vsphere-tmm 3.8.1

2 of the 7 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/oauth2@v0.25.0	0.27.0
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	golang.org/x/oauth2@v0.15.0	0.27.0

Open the chart page →

3,911

wazuhwazuh-helm

0.0.8

1 of 4 See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

6,168

aad-pod-identityaad-pod-identity

4.1.18

2 of 2 See more

aad-pod-identity aad-pod-identity 4.1.18

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

2,858

baserowbaserow-chart

1.0.56

2 of 6 See more

baserow baserow-chart 1.0.56

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	golang.org/x/oauth2@v0.21.0	0.27.0
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/oauth2@v0.13.0	0.27.0

Open the chart page →

17,263

mysql-operatorbitpoke

0.6.3

2 of 2 See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,354

cadvisorcadvisor

0.1.15

1 of 1 See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	golang.org/x/oauth2@v0.3.0	0.27.0

Open the chart page →

1,698

celestia-appcelestia-labs

0.5.0

1 of 3 See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

1,066

cert-manager-webhook-hetznercert-manager-webhook-hetzner

0.2.1

1 of 1 See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,080

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/oauth2@v0.0.0-20200902213428-5d25da1a8d43	0.27.0
library/traefik :2.5.4	7d0228d19042	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

52,919

daskhubdask

2024.1.1

2 of 9 See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/traefik :2.10.6	1957e3314f43	golang.org/x/oauth2@v0.10.0	0.27.0
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

14,094

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

27,267

drone-runner-dockerdrone

0.7.0

1 of 3 See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/docker :20-dind	af96c680a7e1	golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783	0.27.0

Open the chart page →

5,674

k8s-image-swapperestahn

1.11.0

1 of 2 See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/oauth2@v0.14.0	0.27.0

Open the chart page →

1,981

loadtesterflagger

0.39.0

1 of 1 See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

1,760

flyteflyte

1.16.8

1 of 11 See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,281

geonode-k8sgeonode-k8s

2.0.0

1 of 10 See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

13,953

hertzbeathertzbeat

1.8.1

1 of 4 See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
victoriametrics/victoria-metrics :v1.95.1	f52723a08a44	golang.org/x/oauth2@v0.14.0	0.27.0

Open the chart page →

14,000

Container images carrying it

2,001 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/oauth2@v0.24.0	0.27.0	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c	0.27.0	3
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/oauth2@v0.0.0-20210805134026-6f1e6394065a	0.27.0	3
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/oauth2@v0.18.0	0.27.0	3
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/oauth2@v0.23.0	0.27.0	3
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/oauth2@v0.25.0	0.27.0	3
grafana/promtail :2.4.2	626900031c4e	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	3
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	3
library/docker :20.10-dind :20-dind	af96c680a7e1	golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783	0.27.0	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/oauth2@v0.0.0-20190226205417-e64efc72b421	0.27.0	3
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	3
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/oauth2@v0.14.0	0.27.0	3
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/oauth2@v0.24.0	0.27.0	3
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/oauth2@v0.23.0	0.27.0	3
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	3
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/oauth2@v0.23.0	0.27.0	3
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/oauth2@v0.0.0-20191122200657-5d9234df094c	0.27.0	3
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/oauth2@v0.10.0	0.27.0	3
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/oauth2@v0.10.0	0.27.0	3
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/oauth2@v0.23.0	0.27.0	3
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/oauth2@v0.23.0	0.27.0	3
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914	0.27.0	3
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	3
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/oauth2@v0.6.0	0.27.0	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/oauth2@v0.21.0	0.27.0	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	3
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	3
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	3
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	3
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	3
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/oauth2@v0.11.0	0.27.0	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	3
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/oauth2@v0.12.0	0.27.0	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	3
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/oauth2@v0.6.0	0.27.0	3
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/oauth2@v0.0.0-20181203162652-d668ce993890	0.27.0	3
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	golang.org/x/oauth2@v0.22.0	0.27.0	3
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	3
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	3
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	3
quay.io/metallb/controller :v0.13.10	1b33357b3595	golang.org/x/oauth2@v0.5.0	0.27.0	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5	0.27.0	3
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/oauth2@v0.8.0	0.27.0	3
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/oauth2@v0.8.0	0.27.0	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0	3
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/oauth2@v0.19.0	0.27.0	3
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/oauth2@v0.3.0	0.27.0	3
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/oauth2@v0.23.0	0.27.0	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/oauth2@v0.0.0-20210323180902-22b0adad7558	0.27.0	3