CVE-2025-22868

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 56th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,634; of 17,787 indexed, latest versions
Container images: 2,031; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

Carried by container images the latest versions of 1,634 of 17,787 indexed charts deploy, on 2,031 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/oauth2golang	v0.0.0-20170629032740-5432cc9688e6, v0.0.0-20170807180024-9a379c6b3e95, v0.0.0-20180620175406-ef147856a6dd, v0.0.0-20180724155351-3d292e4d0cdc+72 more	0.27.0	2,031

OSV records: GHSA-6v2p-p543-phr9
Also known as: GO-2025-3488

Charts affected

1,634 by stars

Chart

Latest

Affected images

Radar Score

supabasetokens-studio

1.0.0

2 of 14 See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	golang.org/x/oauth2@v0.23.0	0.27.0
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

23,263

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/oauth2@v0.18.0	0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,107

kube-prometheuschoerodon

9.3.1

2 of 7 See more

kube-prometheus choerodon 9.3.1

2 of the 7 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/oauth2@v0.0.0-20190523182746-aaccbc9213b0	0.27.0

Open the chart page →

12,237

minifluxgabe565

0.9.2

1 of 2 See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/oauth2@v0.25.0	0.27.0

Open the chart page →

1,247

cubestoregadsme

1.2.0

1 of 3 See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/oauth2@v0.8.0	0.27.0

Open the chart page →

3,037

waypointhashicorp

0.1.21

1 of 2 See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/oauth2@v0.1.0	0.27.0

Open the chart page →

4,167

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0

Open the chart page →

7,896

purelbpurelb

0.0.0-106-ipv6-lbip-052cedab

1 of 2 See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

4,412

dex-k8s-authenticatorsagikazarmark

0.0.3

1 of 1 See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

2,791

tailing-sidecar-operatortailing-sidecar-operator

0.111.0

1 of 2 See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

1,205

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0

Open the chart page →

1,513

devtron-operatordevtron

0.23.3

5 of 11 See more

devtron-operator devtron 0.23.3

5 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914	0.27.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/oauth2@v0.1.0	0.27.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0

Open the chart page →

31,447

drone-runner-kubedrone

0.1.10

1 of 1 See more

drone-runner-kube drone 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,067

ilumilum

6.7.3

2 of 19 See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gitea/gitea :1.22.3	76f516a1a8c2	golang.org/x/oauth2@v0.21.0	0.27.0
ilum/api :6.7.3	624fd09528c8	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

23,289

temporallemontech

0.37.0

5 of 13 See more

temporal lemontech 0.37.0

5 of the 13 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/oauth2@v0.4.0	0.27.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/oauth2@v0.0.0-20211005180243-6b3c2da341f1	0.27.0

Open the chart page →

14,893

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	golang.org/x/oauth2@v0.0.0-20180821212333-d2e6202438be	0.27.0

Open the chart page →

30,481

nfs-server-provisionernfs-ganesha-server-and-external-provisioner

1.8.0

1 of 1 See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

2,315

syftopenmined

0.9.5

2 of 6 See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/traefik :v2.11.0	0a5157f742d2	golang.org/x/oauth2@v0.16.0	0.27.0
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

17,306

pyrrarlex

0.15.0

1 of 1 See more

pyrra rlex 0.15.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

953

helm-exportersstarcher

0.5.0

1 of 1 See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

4,154

istio-operatorwiremind

1.18.2

1 of 1 See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
istio/operator :1.18.2	70f9d1fe5fff	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

5,669

astarte-operatorastarte

26.5.2

1 of 1 See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

695

awx-operatorawx-operator-helm

3.2.1

2 of 2 See more

awx-operator awx-operator-helm 3.2.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

9,868

cadvisorckotzbauer

2.4.3

1 of 1 See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.52.1	f40e65878e25	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

961

dronecommunity-charts

0.1.5

1 of 2 See more

drone community-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,728

uptime-kumaduyet

0.1.7

1 of 1 See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.18.5	a84767d7934f	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

4,515

emqx-operatoremqx-operator

2.3.2

2 of 2 See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/oauth2@v0.21.0	0.27.0
ghcr.io/emqx/emqx-operator :2.3.2	3333ed546165	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

4,532

kube-routerenix

1.10.0

1 of 1 See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
cloudnativelabs/kube-router :v1.6.0	0ec7cd73f43f	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

2,344

logging-operatorkube-logging

4.2.3

1 of 1 See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/logging-operator :4.2.2	0dd85dcb1f73	golang.org/x/oauth2@v0.5.0	0.27.0

Open the chart page →

880

keptnlifecycle-toolkit

0.11.0

3 of 3 See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/oauth2@v0.21.0	0.27.0
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/oauth2@v0.23.0	0.27.0
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

1,927

tailscale-relaymvisonneau

0.2.7

1 of 1 See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/oauth2@v0.16.0	0.27.0

Open the chart page →

1,356

sops-operatorsops-operator

0.10.1

1 of 2 See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

1,250

uffizzi-controlleruffizzi-controller

2.4.6

8 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

8 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/oauth2@v0.10.0	0.27.0
uffizzi/uffizzi-cluster-operator :v1.6.5	5ca448a08783	golang.org/x/oauth2@v0.4.0	0.27.0
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-startupapicheck :v1.14.5	0f5b104bdd1b	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	golang.org/x/oauth2@v0.15.0	0.27.0
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	golang.org/x/oauth2@v0.18.0	0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

14,266

vsphere-csivsphere-tmm

3.8.1

2 of 7 See more

vsphere-csi vsphere-tmm 3.8.1

2 of the 7 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/oauth2@v0.25.0	0.27.0
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	golang.org/x/oauth2@v0.15.0	0.27.0

Open the chart page →

3,911

wazuhwazuh-helm

0.0.8

1 of 4 See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

6,168

aad-pod-identityaad-pod-identity

4.1.18

2 of 2 See more

aad-pod-identity aad-pod-identity 4.1.18

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

2,858

baserowbaserow-chart

1.0.56

2 of 6 See more

baserow baserow-chart 1.0.56

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	golang.org/x/oauth2@v0.21.0	0.27.0
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/oauth2@v0.13.0	0.27.0

Open the chart page →

17,346

mysql-operatorbitpoke

0.6.3

2 of 2 See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,354

cadvisorcadvisor

0.1.15

1 of 1 See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	golang.org/x/oauth2@v0.3.0	0.27.0

Open the chart page →

1,698

celestia-appcelestia-labs

0.5.0

1 of 3 See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

1,066

cert-manager-webhook-hetznercert-manager-webhook-hetzner

0.2.1

1 of 1 See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,080

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/oauth2@v0.0.0-20200902213428-5d25da1a8d43	0.27.0
library/traefik :2.5.4	7d0228d19042	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

53,012

daskhubdask

2024.1.1

2 of 9 See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/traefik :2.10.6	1957e3314f43	golang.org/x/oauth2@v0.10.0	0.27.0
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

14,134

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

27,358

drone-runner-dockerdrone

0.7.0

1 of 3 See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/docker :20-dind	af96c680a7e1	golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783	0.27.0

Open the chart page →

5,674

k8s-image-swapperestahn

1.11.0

1 of 2 See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/oauth2@v0.14.0	0.27.0

Open the chart page →

1,980

loadtesterflagger

0.39.0

1 of 1 See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

1,760

flyteflyte

1.16.8

1 of 11 See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,282

geonode-k8sgeonode-k8s

2.0.0

1 of 10 See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

14,043

hertzbeathertzbeat

1.8.1

1 of 4 See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
victoriametrics/victoria-metrics :v1.95.1	f52723a08a44	golang.org/x/oauth2@v0.14.0	0.27.0

Open the chart page →

14,109

Container images carrying it

2,031 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
netapp/trident-operator :21.10.0	49cfe552d9c2	golang.org/x/oauth2@v0.0.0-20211005180243-6b3c2da341f1	0.27.0	1
netbirdio/management :0.45.1	0c9994b393ea	golang.org/x/oauth2@v0.24.0	0.27.0	1
netbirdio/management :0.46.0	b0adc4ad4ec6	golang.org/x/oauth2@v0.24.0	0.27.0	1
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
nginx/nginx-ingress :1.11.1	eb5b4fd73325	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
nineinfra/hdfs-operator :v0.7.0	debb1e3410e2	golang.org/x/oauth2@v0.8.0	0.27.0	1
nineinfra/kyuubi-operator :v0.7.0	8d8ed87ef77c	golang.org/x/oauth2@v0.8.0	0.27.0	1
nineinfra/metastore-operator :v0.7.0	11259032fb04	golang.org/x/oauth2@v0.8.0	0.27.0	1
nineinfra/nineinfra :v0.7.0	d4aad414eccd	golang.org/x/oauth2@v0.8.0	0.27.0	1
nineinfra/zookeeper-operator :v0.7.0	af6eb2f37bfc	golang.org/x/oauth2@v0.8.0	0.27.0	1
nocodb/nocodb :0.258.0	6779a4ddedf2	golang.org/x/oauth2@v0.15.0	0.27.0	1
nocodb/nocodb :0.100.2	b0b91ec2a2dd	golang.org/x/oauth2@v0.0.0-20220808172628-8227340efae7	0.27.0	1
nocodb/nocodb :0.84.15	f9b799933aa8	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
ntakashi/cole :1.2.3	f7b68bee2a68	golang.org/x/oauth2@v0.8.0	0.27.0	1
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	1
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	1
ofekmeister/csi-gcs :v0.9.0	30d70fa9211b	golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5	0.27.0	1
okteto/civo-webhook :0.5.3	57cd51176538	golang.org/x/oauth2@v0.12.0	0.27.0	1
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
opea/gmcmanager :1.0	514af17c495c	golang.org/x/oauth2@v0.20.0	0.27.0	1
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	golang.org/x/oauth2@v0.23.0	0.27.0	1
opencsghq/gitlab-shell :v17.5.0	f6d7e7d6be5d	golang.org/x/oauth2@v0.11.0	0.27.0	1
opencsghq/lws :v0.6.1	de15437db41b	golang.org/x/oauth2@v0.23.0	0.27.0	1
openebs/provisioner-nfs :0.11.0	4f41dd782761	golang.org/x/oauth2@v0.8.0	0.27.0	1
openenergyprojects/modbus_exporter :20230617_a144551	58990f24fb25	golang.org/x/oauth2@v0.6.0	0.27.0	1
openkruise/kruise-manager :v1.8.3	0482722b4e56	golang.org/x/oauth2@v0.17.0	0.27.0	1
openkruise/kruise-rollout :v0.6.2	a75e6739ea7d	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	1
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	1
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/oauth2@v0.17.0	0.27.0	1
openpolicyagent/gatekeeper :v3.17.1	b7b4d7cfdd52	golang.org/x/oauth2@v0.21.0	0.27.0	1
openpolicyagent/gatekeeper-crds :v3.17.1	77bc9bf3d163	golang.org/x/oauth2@v0.10.0	0.27.0	1
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
oryd/hydra :v2.3.0	b94007e19a1f	golang.org/x/oauth2@v0.23.0	0.27.0	1
oryd/kratos :v1.1.0	8f15006a080d	golang.org/x/oauth2@v0.16.0	0.27.0	1
otel/opentelemetry-collector :0.100.0	9e36620d6c2c	golang.org/x/oauth2@v0.19.0	0.27.0	1
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/oauth2@v0.0.0-20220822191816-0ebed06d0094	0.27.0	1
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/oauth2@v0.23.0	0.27.0	1
otel/opentelemetry-collector-contrib :0.113.0	5ac3e0ba2b0b	golang.org/x/oauth2@v0.23.0	0.27.0	1
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/oauth2@v0.11.0	0.27.0	1
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/oauth2@v0.22.0	0.27.0	1
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/oauth2@v0.14.0	0.27.0	1
otel/opentelemetry-collector-contrib :0.46.0	ba173aa85f3f	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
otel/opentelemetry-collector-contrib :0.81.0	c6671841470b	golang.org/x/oauth2@v0.9.0	0.27.0	1
otel/opentelemetry-collector-contrib :0.63.1	dfb3a55ea8c9	golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783	0.27.0	1
otel/opentelemetry-collector-k8s :0.120.0	1e45d9483faa	golang.org/x/oauth2@v0.26.0	0.27.0	1
otel/opentelemetry-ebpf-k8s-watcher :v0.10.2	63a0d1dd2cac	golang.org/x/oauth2@v0.4.0	0.27.0	1
owncloud/ocis :7.1.3	88e7c854517d	golang.org/x/oauth2@v0.24.0	0.27.0	1
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0	1