CVE-2025-22868

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 56th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,634; of 17,787 indexed, latest versions
Container images: 2,031; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

Carried by container images the latest versions of 1,634 of 17,787 indexed charts deploy, on 2,031 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/oauth2golang	v0.0.0-20170629032740-5432cc9688e6, v0.0.0-20170807180024-9a379c6b3e95, v0.0.0-20180620175406-ef147856a6dd, v0.0.0-20180724155351-3d292e4d0cdc+72 more	0.27.0	2,031

OSV records: GHSA-6v2p-p543-phr9
Also known as: GO-2025-3488

Charts affected

1,634 by stars

Chart

Latest

Affected images

Radar Score

supabasetokens-studio

1.0.0

2 of 14 See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	golang.org/x/oauth2@v0.23.0	0.27.0
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

23,263

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/oauth2@v0.18.0	0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,107

kube-prometheuschoerodon

9.3.1

2 of 7 See more

kube-prometheus choerodon 9.3.1

2 of the 7 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/oauth2@v0.0.0-20190523182746-aaccbc9213b0	0.27.0

Open the chart page →

12,237

minifluxgabe565

0.9.2

1 of 2 See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/oauth2@v0.25.0	0.27.0

Open the chart page →

1,247

cubestoregadsme

1.2.0

1 of 3 See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/oauth2@v0.8.0	0.27.0

Open the chart page →

3,037

waypointhashicorp

0.1.21

1 of 2 See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/oauth2@v0.1.0	0.27.0

Open the chart page →

4,167

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0

Open the chart page →

7,896

purelbpurelb

0.0.0-106-ipv6-lbip-052cedab

1 of 2 See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

4,412

dex-k8s-authenticatorsagikazarmark

0.0.3

1 of 1 See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

2,791

tailing-sidecar-operatortailing-sidecar-operator

0.111.0

1 of 2 See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

1,205

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0

Open the chart page →

1,513

devtron-operatordevtron

0.23.3

5 of 11 See more

devtron-operator devtron 0.23.3

5 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914	0.27.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/oauth2@v0.1.0	0.27.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0

Open the chart page →

31,447

drone-runner-kubedrone

0.1.10

1 of 1 See more

drone-runner-kube drone 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,067

ilumilum

6.7.3

2 of 19 See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gitea/gitea :1.22.3	76f516a1a8c2	golang.org/x/oauth2@v0.21.0	0.27.0
ilum/api :6.7.3	624fd09528c8	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

23,289

temporallemontech

0.37.0

5 of 13 See more

temporal lemontech 0.37.0

5 of the 13 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/oauth2@v0.4.0	0.27.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/oauth2@v0.0.0-20211005180243-6b3c2da341f1	0.27.0

Open the chart page →

14,893

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	golang.org/x/oauth2@v0.0.0-20180821212333-d2e6202438be	0.27.0

Open the chart page →

30,481

nfs-server-provisionernfs-ganesha-server-and-external-provisioner

1.8.0

1 of 1 See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

2,315

syftopenmined

0.9.5

2 of 6 See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/traefik :v2.11.0	0a5157f742d2	golang.org/x/oauth2@v0.16.0	0.27.0
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

17,306

pyrrarlex

0.15.0

1 of 1 See more

pyrra rlex 0.15.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

953

helm-exportersstarcher

0.5.0

1 of 1 See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

4,154

istio-operatorwiremind

1.18.2

1 of 1 See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
istio/operator :1.18.2	70f9d1fe5fff	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

5,669

astarte-operatorastarte

26.5.2

1 of 1 See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

695

awx-operatorawx-operator-helm

3.2.1

2 of 2 See more

awx-operator awx-operator-helm 3.2.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

9,868

cadvisorckotzbauer

2.4.3

1 of 1 See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.52.1	f40e65878e25	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

961

dronecommunity-charts

0.1.5

1 of 2 See more

drone community-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,728

uptime-kumaduyet

0.1.7

1 of 1 See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.18.5	a84767d7934f	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

4,515

emqx-operatoremqx-operator

2.3.2

2 of 2 See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/oauth2@v0.21.0	0.27.0
ghcr.io/emqx/emqx-operator :2.3.2	3333ed546165	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

4,532

kube-routerenix

1.10.0

1 of 1 See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
cloudnativelabs/kube-router :v1.6.0	0ec7cd73f43f	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

2,344

logging-operatorkube-logging

4.2.3

1 of 1 See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/logging-operator :4.2.2	0dd85dcb1f73	golang.org/x/oauth2@v0.5.0	0.27.0

Open the chart page →

880

keptnlifecycle-toolkit

0.11.0

3 of 3 See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/oauth2@v0.21.0	0.27.0
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/oauth2@v0.23.0	0.27.0
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

1,927

tailscale-relaymvisonneau

0.2.7

1 of 1 See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/oauth2@v0.16.0	0.27.0

Open the chart page →

1,356

sops-operatorsops-operator

0.10.1

1 of 2 See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

1,250

uffizzi-controlleruffizzi-controller

2.4.6

8 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

8 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/oauth2@v0.10.0	0.27.0
uffizzi/uffizzi-cluster-operator :v1.6.5	5ca448a08783	golang.org/x/oauth2@v0.4.0	0.27.0
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-startupapicheck :v1.14.5	0f5b104bdd1b	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	golang.org/x/oauth2@v0.15.0	0.27.0
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	golang.org/x/oauth2@v0.18.0	0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

14,266

vsphere-csivsphere-tmm

3.8.1

2 of 7 See more

vsphere-csi vsphere-tmm 3.8.1

2 of the 7 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/oauth2@v0.25.0	0.27.0
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	golang.org/x/oauth2@v0.15.0	0.27.0

Open the chart page →

3,911

wazuhwazuh-helm

0.0.8

1 of 4 See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

6,168

aad-pod-identityaad-pod-identity

4.1.18

2 of 2 See more

aad-pod-identity aad-pod-identity 4.1.18

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

2,858

baserowbaserow-chart

1.0.56

2 of 6 See more

baserow baserow-chart 1.0.56

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	golang.org/x/oauth2@v0.21.0	0.27.0
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/oauth2@v0.13.0	0.27.0

Open the chart page →

17,346

mysql-operatorbitpoke

0.6.3

2 of 2 See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,354

cadvisorcadvisor

0.1.15

1 of 1 See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	golang.org/x/oauth2@v0.3.0	0.27.0

Open the chart page →

1,698

celestia-appcelestia-labs

0.5.0

1 of 3 See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

1,066

cert-manager-webhook-hetznercert-manager-webhook-hetzner

0.2.1

1 of 1 See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,080

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/oauth2@v0.0.0-20200902213428-5d25da1a8d43	0.27.0
library/traefik :2.5.4	7d0228d19042	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

53,012

daskhubdask

2024.1.1

2 of 9 See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/traefik :2.10.6	1957e3314f43	golang.org/x/oauth2@v0.10.0	0.27.0
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

14,134

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

27,358

drone-runner-dockerdrone

0.7.0

1 of 3 See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/docker :20-dind	af96c680a7e1	golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783	0.27.0

Open the chart page →

5,674

k8s-image-swapperestahn

1.11.0

1 of 2 See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/oauth2@v0.14.0	0.27.0

Open the chart page →

1,980

loadtesterflagger

0.39.0

1 of 1 See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

1,760

flyteflyte

1.16.8

1 of 11 See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,282

geonode-k8sgeonode-k8s

2.0.0

1 of 10 See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

14,043

hertzbeathertzbeat

1.8.1

1 of 4 See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
victoriametrics/victoria-metrics :v1.95.1	f52723a08a44	golang.org/x/oauth2@v0.14.0	0.27.0

Open the chart page →

14,109

Container images carrying it

2,031 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
rancher/mirrored-cloud-provider-vsphere :v1.31.1	febfd0517838	golang.org/x/oauth2@v0.21.0	0.27.0	1
rclone/rclone :1.63.0	08e1af3c8814	golang.org/x/oauth2@v0.6.0	0.27.0	1
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	1
rclone/rclone :1.56.0	f2fc45c8bc57	golang.org/x/oauth2@v0.0.0-20210413134643-5e61552d6c78	0.27.0	1
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/oauth2@v0.18.0	0.27.0	1
reportportal/migrations :5.7.0	da5d8e1395fe	golang.org/x/oauth2@v0.0.0-20190402181905-9f3314589c9a	0.27.0	1
reportportal/service-index :5.0.11	2b27a2d7a87d	golang.org/x/oauth2@v0.0.0-20190402181905-9f3314589c9a	0.27.0	1
restic/restic :0.15.2	579e4e6a4931	golang.org/x/oauth2@v0.6.0	0.27.0	1
robustadev/kubewatch :v2.9.0	0457a51e36e8	golang.org/x/oauth2@v0.21.0	0.27.0	1
rookout/k8s-operator :latest	0d083f3ef1a7	golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6	0.27.0	1
runatlantis/atlantis :v0.16.1	45fbaf7e207c	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
ruslanguns/metadata-injector-operator :v0.0.1	6c77e4675e07	golang.org/x/oauth2@v0.21.0	0.27.0	1
ryuunosukeds3/orbital :latest	0879f7261b10	golang.org/x/oauth2@v0.26.0	0.27.0	1
sarwansharma/minio :v3	59d1da9385d1	golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5	0.27.0	1
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	golang.org/x/oauth2@v0.4.0	0.27.0	1
selectdb/doris.k8s-operator :1.3.1	919210765cb8	golang.org/x/oauth2@v0.7.0	0.27.0	1
semaphoreui/semaphore :v2.9.64	5b50bc11833f	golang.org/x/oauth2@v0.17.0	0.27.0	1
semitechnologies/weaviate :1.19.1	7a00d226f063	golang.org/x/oauth2@v0.0.0-20220822191816-0ebed06d0094	0.27.0	1
shaowenchen/ops-controller-manager :latest	26da43bb5b66	golang.org/x/oauth2@v0.15.0	0.27.0	1
shaowenchen/ops-server :latest	315444f703f4	golang.org/x/oauth2@v0.15.0	0.27.0	1
shlomibendavid/k8s-applier :0311240529	a22ffbe0f04e	golang.org/x/oauth2@v0.10.0	0.27.0	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	golang.org/x/oauth2@v0.1.0	0.27.0	1
signoz/alertmanager :0.5.0	7bc7de2e33c2	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0	1
sikalabs/slu :v0.72.0	7bd267f30247	golang.org/x/oauth2@v0.14.0	0.27.0	1
sikalabs/slu :v0.34.0	fdc0c6711add	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
simpleidserver/faasprometheus :0.0.4	25e378d57d78	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	golang.org/x/oauth2@v0.12.0	0.27.0	1
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	golang.org/x/oauth2@v0.18.0	0.27.0	1
skylenet/ethereum-testnet-homepage :latest	8698903e379f	golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914	0.27.0	1
slamdev/config-connector-templater :0.0.3	a234541c9fa8	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
slamdev/gke-preemptible-notifier :v0.0.3	d5d6430108a3	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
softonic/pod-defaulter :0.1.0	72017aed5902	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
softonic/preemptible-killer :1.2.6-2	94b87f1fb362	golang.org/x/oauth2@v0.0.0-20170807180024-9a379c6b3e95	0.27.0	1
softonic/rate-limit-operator :0.1.1	910f6de37763	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
sorintlab/stolon :v0.16.0-pg12	36b45c0f97fc	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	1
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
stakater/k8s-cost-optimizer :v0.0.5	450415ce1b4e	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	1
stakater/konfigurator :v0.1.39	3409565b1ef5	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
stakater/reloader :v1.0.15	f4b87a8e56d4	golang.org/x/oauth2@v0.4.0	0.27.0	1
stakater/tronador :v0.0.1	37ce9acf2722	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
stakater/whitelister :v0.0.16	39107924063e	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
statcan/ingress-istio-controller :1.4.0	d7d6bd180c46	golang.org/x/oauth2@v0.0.0-20200902213428-5d25da1a8d43	0.27.0	1