CVE-2025-22868

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 56th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,615; of 17,781 indexed, latest versions
Container images: 2,001; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

Carried by container images the latest versions of 1,615 of 17,781 indexed charts deploy, on 2,001 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/oauth2golang	v0.0.0-20170629032740-5432cc9688e6, v0.0.0-20170807180024-9a379c6b3e95, v0.0.0-20180620175406-ef147856a6dd, v0.0.0-20180724155351-3d292e4d0cdc+72 more	0.27.0	2,001

OSV records: GHSA-6v2p-p543-phr9
Also known as: GO-2025-3488

Charts affected

1,615 by stars

Chart

Latest

Affected images

Radar Score

supabasetokens-studio

1.0.0

2 of 14 See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	golang.org/x/oauth2@v0.23.0	0.27.0
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

23,123

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/oauth2@v0.18.0	0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,107

kube-prometheuschoerodon

9.3.1

2 of 7 See more

kube-prometheus choerodon 9.3.1

2 of the 7 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/oauth2@v0.0.0-20190523182746-aaccbc9213b0	0.27.0

Open the chart page →

12,237

minifluxgabe565

0.9.2

1 of 2 See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/oauth2@v0.25.0	0.27.0

Open the chart page →

1,247

cubestoregadsme

1.2.0

1 of 3 See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/oauth2@v0.8.0	0.27.0

Open the chart page →

3,025

waypointhashicorp

0.1.21

1 of 2 See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/oauth2@v0.1.0	0.27.0

Open the chart page →

4,167

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0

Open the chart page →

7,857

purelbpurelb

0.0.0-106-ipv6-lbip-052cedab

1 of 2 See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

4,413

dex-k8s-authenticatorsagikazarmark

0.0.3

1 of 1 See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

2,791

tailing-sidecar-operatortailing-sidecar-operator

0.111.0

1 of 2 See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

1,205

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602	0.27.0

Open the chart page →

1,513

devtron-operatordevtron

0.23.3

5 of 11 See more

devtron-operator devtron 0.23.3

5 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914	0.27.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/oauth2@v0.1.0	0.27.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0

Open the chart page →

32,902

drone-runner-kubedrone

0.1.10

1 of 1 See more

drone-runner-kube drone 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,067

ilumilum

6.7.3

2 of 19 See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gitea/gitea :1.22.3	76f516a1a8c2	golang.org/x/oauth2@v0.21.0	0.27.0
ilum/api :6.7.3	624fd09528c8	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

23,228

temporallemontech

0.37.0

5 of 13 See more

temporal lemontech 0.37.0

5 of the 13 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/oauth2@v0.4.0	0.27.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/oauth2@v0.0.0-20211005180243-6b3c2da341f1	0.27.0

Open the chart page →

14,893

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	golang.org/x/oauth2@v0.0.0-20180821212333-d2e6202438be	0.27.0

Open the chart page →

30,326

nfs-server-provisionernfs-ganesha-server-and-external-provisioner

1.8.0

1 of 1 See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

2,315

syftopenmined

0.9.5

2 of 6 See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/traefik :v2.11.0	0a5157f742d2	golang.org/x/oauth2@v0.16.0	0.27.0
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

17,245

pyrrarlex

0.14.3

1 of 1 See more

pyrra rlex 0.14.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

953

helm-exportersstarcher

0.5.0

1 of 1 See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

4,154

istio-operatorwiremind

1.18.2

1 of 1 See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
istio/operator :1.18.2	70f9d1fe5fff	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

5,630

astarte-operatorastarte

26.5.2

1 of 1 See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

695

awx-operatorawx-operator-helm

3.2.1

2 of 2 See more

awx-operator awx-operator-helm 3.2.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

9,868

cadvisorckotzbauer

2.4.3

1 of 1 See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.52.1	f40e65878e25	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

961

dronecommunity-charts

0.1.5

1 of 2 See more

drone community-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,728

uptime-kumaduyet

0.1.7

1 of 1 See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.18.5	a84767d7934f	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

4,515

emqx-operatoremqx-operator

2.3.2

2 of 2 See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/oauth2@v0.21.0	0.27.0
ghcr.io/emqx/emqx-operator :2.3.2	3333ed546165	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

4,531

kube-routerenix

1.10.0

1 of 1 See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
cloudnativelabs/kube-router :v1.6.0	0ec7cd73f43f	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

2,344

logging-operatorkube-logging

4.2.3

1 of 1 See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/logging-operator :4.2.2	0dd85dcb1f73	golang.org/x/oauth2@v0.5.0	0.27.0

Open the chart page →

880

keptnlifecycle-toolkit

0.11.0

3 of 3 See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/oauth2@v0.21.0	0.27.0
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/oauth2@v0.23.0	0.27.0
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

1,927

tailscale-relaymvisonneau

0.2.7

1 of 1 See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/oauth2@v0.16.0	0.27.0

Open the chart page →

1,356

sops-operatorsops-operator

0.10.1

1 of 2 See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

1,248

uffizzi-controlleruffizzi-controller

2.4.6

8 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

8 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/oauth2@v0.10.0	0.27.0
uffizzi/uffizzi-cluster-operator :v1.6.5	5ca448a08783	golang.org/x/oauth2@v0.4.0	0.27.0
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-startupapicheck :v1.14.5	0f5b104bdd1b	golang.org/x/oauth2@v0.15.0	0.27.0
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	golang.org/x/oauth2@v0.15.0	0.27.0
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	golang.org/x/oauth2@v0.18.0	0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

14,240

vsphere-csivsphere-tmm

3.8.1

2 of 7 See more

vsphere-csi vsphere-tmm 3.8.1

2 of the 7 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/oauth2@v0.25.0	0.27.0
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	golang.org/x/oauth2@v0.15.0	0.27.0

Open the chart page →

3,911

wazuhwazuh-helm

0.0.8

1 of 4 See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

6,168

aad-pod-identityaad-pod-identity

4.1.18

2 of 2 See more

aad-pod-identity aad-pod-identity 4.1.18

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0

Open the chart page →

2,858

baserowbaserow-chart

1.0.56

2 of 6 See more

baserow baserow-chart 1.0.56

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	golang.org/x/oauth2@v0.21.0	0.27.0
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/oauth2@v0.13.0	0.27.0

Open the chart page →

17,263

mysql-operatorbitpoke

0.6.3

2 of 2 See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,354

cadvisorcadvisor

0.1.15

1 of 1 See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	golang.org/x/oauth2@v0.3.0	0.27.0

Open the chart page →

1,698

celestia-appcelestia-labs

0.5.0

1 of 3 See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

1,066

cert-manager-webhook-hetznercert-manager-webhook-hetzner

0.2.1

1 of 1 See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,080

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/oauth2@v0.0.0-20200902213428-5d25da1a8d43	0.27.0
library/traefik :2.5.4	7d0228d19042	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

52,919

daskhubdask

2024.1.1

2 of 9 See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/traefik :2.10.6	1957e3314f43	golang.org/x/oauth2@v0.10.0	0.27.0
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

14,094

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

27,267

drone-runner-dockerdrone

0.7.0

1 of 3 See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/docker :20-dind	af96c680a7e1	golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783	0.27.0

Open the chart page →

5,674

k8s-image-swapperestahn

1.11.0

1 of 2 See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/oauth2@v0.14.0	0.27.0

Open the chart page →

1,981

loadtesterflagger

0.39.0

1 of 1 See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

1,760

flyteflyte

1.16.8

1 of 11 See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,281

geonode-k8sgeonode-k8s

2.0.0

1 of 10 See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

13,953

hertzbeathertzbeat

1.8.1

1 of 4 See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
victoriametrics/victoria-metrics :v1.95.1	f52723a08a44	golang.org/x/oauth2@v0.14.0	0.27.0

Open the chart page →

14,000

Container images carrying it

2,001 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/oauth2@v0.0.0-20211005180243-6b3c2da341f1	0.27.0	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/oauth2@v0.6.0	0.27.0	3
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/oauth2@v0.22.0	0.27.0	3
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/oauth2@v0.18.0	0.27.0	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6	0.27.0	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6	0.27.0	3
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/oauth2@v0.8.0	0.27.0	3
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/oauth2@v0.18.0	0.27.0	3
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	golang.org/x/oauth2@v0.21.0	0.27.0	3
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/oauth2@v0.18.0	0.27.0	3
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/oauth2@v0.4.0	0.27.0	3
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	golang.org/x/oauth2@v0.25.0	0.27.0	3
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	3
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	golang.org/x/oauth2@v0.25.0	0.27.0	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	3
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/oauth2@v0.24.0	0.27.0	2
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/oauth2@v0.23.0	0.27.0	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0	2
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0	2
apecloud/apecloud-mcp :0.1.0	94041b080510	golang.org/x/oauth2@v0.25.0	0.27.0	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/oauth2@v0.15.0	0.27.0	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/oauth2@v0.0.0-20220411215720-9780585627b5	0.27.0	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f	0.27.0	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/oauth2@v0.0.0-20220309155454-6242fa91716a	0.27.0	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/oauth2@v0.3.0	0.27.0	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	2
datawire/aes :1.14.4	8588eafe6862	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	2
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/oauth2@v0.22.0	0.27.0	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	2
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/oauth2@v0.10.0	0.27.0	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/oauth2@v0.19.0	0.27.0	2
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/oauth2@v0.0.0-20210810183815-faf39c7919d5	0.27.0	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/oauth2@v0.7.0	0.27.0	2
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/oauth2@v0.0.0-20210810183815-faf39c7919d5	0.27.0	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/oauth2@v0.0.0-20210810183815-faf39c7919d5	0.27.0	2
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/oauth2@v0.0.0-20210810183815-faf39c7919d5	0.27.0	2
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/oauth2@v0.0.0-20210810183815-faf39c7919d5	0.27.0	2
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/oauth2@v0.15.0	0.27.0	2
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	2
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/oauth2@v0.8.0	0.27.0	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/oauth2@v0.0.0-20220309155454-6242fa91716a	0.27.0	2
governify/dashboard :latest	e83a17ba5038	golang.org/x/oauth2@v0.0.0-20210805134026-6f1e6394065a	0.27.0	2
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	2
grafana/grafana :9.2.4	057896e23443	golang.org/x/oauth2@v0.0.0-20220608161450-d0670ef3b1eb	0.27.0	2