CVE-2025-22868

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 57th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,633; of 17,803 indexed, latest versions
Container images: 2,030; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

Carried by container images the latest versions of 1,633 of 17,803 indexed charts deploy, on 2,030 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/oauth2golang	v0.0.0-20170629032740-5432cc9688e6, v0.0.0-20170807180024-9a379c6b3e95, v0.0.0-20180620175406-ef147856a6dd, v0.0.0-20180724155351-3d292e4d0cdc+72 more	0.27.0	2,030

OSV records: GHSA-6v2p-p543-phr9
Also known as: GO-2025-3488

Charts affected

1,633 by stars

Chart

Latest

Affected images

Radar Score

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

8,545

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

26,513

cachelava

1.1.1

1 of 1 See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/oauth2@v0.16.0	0.27.0

Open the chart page →

1,385

metallblectures-k8sinfra

0.10.2

2 of 2 See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.10.2	21164241c045	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

5,406

prometheuslectures-k8sinfra

15.8.5

4 of 6 See more

prometheus lectures-k8sinfra 15.8.5

4 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c	0.27.0
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/oauth2@v0.0.0-20220628200809-02e64fa58f26	0.27.0

Open the chart page →

9,111

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

3,199

prometheusleechistest

11.6.0

1 of 6 See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

8,492

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/oauth2@v0.0.0-20220718184931-c8730f7fcb92	0.27.0

Open the chart page →

4,281

kltlifecycle-toolkit

0.2.6

4 of 4 See more

klt lifecycle-toolkit 0.2.6

4 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v1.1.0	8fdd311a6d33	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0
ghcr.io/keptn/lifecycle-operator :v0.8.2	487bfc37c4b4	golang.org/x/oauth2@v0.8.0	0.27.0
ghcr.io/keptn/metrics-operator :v0.8.2	acf22310e9dd	golang.org/x/oauth2@v0.10.0	0.27.0
ghcr.io/keptn/scheduler :v0.8.2	0f7d277bb2b2	golang.org/x/oauth2@v0.7.0	0.27.0

Open the chart page →

4,696

kube-iptables-tailerlifen

0.2.3

1 of 1 See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

4,472

lightsteplightstep-microsat

2.0.21

1 of 1 See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
lightstep/microsatellite :2024-01-22_17-52-59Z	c800e05e1eff	golang.org/x/oauth2@v0.16.0	0.27.0

Open the chart page →

1,135

linkerd-preview-vizlinkerd-buoyant

25.4.3

4 of 5 See more

linkerd-preview-viz linkerd-buoyant 25.4.3

4 of the 5 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/metrics-api :preview-25.4.3	2cef2a3f97da	golang.org/x/oauth2@v0.25.0	0.27.0
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/oauth2@v0.23.0	0.27.0
ghcr.io/buoyantio/tap :preview-25.4.3	e02a8bd9e2c3	golang.org/x/oauth2@v0.25.0	0.27.0
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	golang.org/x/oauth2@v0.25.0	0.27.0

Open the chart page →

3,464

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	golang.org/x/oauth2@v0.0.0-20211005180243-6b3c2da341f1	0.27.0

Open the chart page →

2,136

llmarinerllmariner

1.53.1

1 of 21 See more

llmariner llmariner 1.53.1

1 of the 21 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server :1.9.0	f24ecd37fbaa	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

12,177

otlp-gatewayloafoe

0.0.2

1 of 2 See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/caddy-token :v0.3.0	528f2174fa2f	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

2,170

patch-operatorloafoe

0.11.3

1 of 2 See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6	0.27.0

Open the chart page →

4,912

solgateloafoe

0.0.12

1 of 1 See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	golang.org/x/oauth2@v0.10.0	0.27.0

Open the chart page →

2,116

tempo-distributedloafoe

1.20.1

1 of 2 See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/tempo :2.6.0	f55a8a1937ff	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

2,037

ocatiecataloguslocatiecatalogus

1.0.0

1 of 3 See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

7,520

locust-pluginslocust-plugins

0.0.4

1 of 3 See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	golang.org/x/oauth2@v0.18.0	0.27.0

Open the chart page →

7,570

central-hostpath-mapperloft

0.2.9

1 of 1 See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

931

devpod-proloft

0.0.0-ci.4-do-not-use

1 of 1 See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	golang.org/x/oauth2@v0.10.0	0.27.0

Open the chart page →

3,241

devspace-cloudloft

0.3.3

1 of 8 See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

9,891

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,095

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/oauth2@v0.4.0	0.27.0

Open the chart page →

2,460

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,119

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

3,241

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/oauth2@v0.8.0	0.27.0

Open the chart page →

5,143

vcluster-pro-eksloft

0.0.0-ci-run.10

1 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/oauth2@v0.8.0	0.27.0

Open the chart page →

5,985

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/oauth2@v0.3.0	0.27.0
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/oauth2@v0.8.0	0.27.0

Open the chart page →

5,828

vcluster-pro-k8sloft

0.0.0-ci-run.10

3 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

3 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/oauth2@v0.8.0	0.27.0
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0

Open the chart page →

8,284

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

2,993

vnode-runtimeloft

0.3.3

1 of 1 See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

2,536

loggingcomponentloggingcomponent

1.0.0

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

7,503

nightingalelogic3579

0.3.1

1 of 6 See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/oauth2@v0.21.0	0.27.0

Open the chart page →

9,147

logicservicelogicservice

1.0.0

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

7,510

apica-ascentlogiqai

2.0.4

2 of 19 See more

apica-ascent logiqai 2.0.4

2 of the 19 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	golang.org/x/oauth2@v0.16.0	0.27.0
minio/minio :RELEASE.2020-09-17T04-49-20Z	e2b7b633c250	golang.org/x/oauth2@v0.0.0-20190226205417-e64efc72b421	0.27.0

Open the chart page →

23,727

loxilbloxilb

0.1.0

1 of 2 See more

loxilb loxilb 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/loxilb-io/kube-loxilb :latest	6f65e53e252d	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

4,537

lsdisklsdisk

2.0.7

2 of 4 See more

lsdisk lsdisk 2.0.7

2 of the 4 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v5.0.2	7b9cdb5830d0	golang.org/x/oauth2@v0.20.0	0.27.0
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/oauth2@v0.8.0	0.27.0

Open the chart page →

5,075

chronograflsst-sqre

1.3.5

1 of 1 See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c	0.27.0

Open the chart page →

2,349

sasquatchlsst-sqre

0.1.13

2 of 6 See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/kapacitor :1.6.3	7232f6388a4d	golang.org/x/oauth2@v0.0.0-20210323180902-22b0adad7558	0.27.0
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/oauth2@v0.0.0-20210427180440-81ed05c6b58c	0.27.0

Open the chart page →

9,351

squash-apilsst-sqre

0.1.6

1 of 3 See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
gcr.io/cloudsql-docker/gce-proxy :1.17	a85176b8e7cc	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

6,667

telegraf-dslsst-sqre

1.0.23

1 of 1 See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
library/telegraf :1.19-alpine	addb86c0c520	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0

Open the chart page →

3,773

m9sweeperm9sweeper

1.6.0

1 of 6 See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/oauth2@v0.11.0	0.27.0

Open the chart page →

9,848

magistralamagistrala-devops

0.16.2

7 of 42 See more

magistrala magistrala-devops 0.16.2

7 of the 42 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/oauth2@v0.18.0	0.27.0
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/oauth2@v0.24.0	0.27.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	golang.org/x/oauth2@v0.24.0	0.27.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/oauth2@v0.18.0	0.27.0
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	golang.org/x/oauth2@v0.24.0	0.27.0
quay.io/prometheus/pushgateway :v1.11.0	99392035ae99	golang.org/x/oauth2@v0.24.0	0.27.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/oauth2@v0.23.0	0.27.0

Open the chart page →

24,748

kruisematrixone-operator

1.8.3

2 of 2 See more

kruise matrixone-operator 1.8.3

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
openkruise/kruise-helm-hook :v0.1.0	edc7cf9428fd	golang.org/x/oauth2@v0.17.0	0.27.0
openkruise/kruise-manager :v1.8.3	0482722b4e56	golang.org/x/oauth2@v0.17.0	0.27.0

Open the chart page →

1,927

mattermost-calls-offloadermattermost

0.2.1

1 of 1 See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mattermost/calls-offloader :v0.9.0	b440b282599e	golang.org/x/oauth2@v0.15.0	0.27.0

Open the chart page →

1,423

mattermost-push-proxymattermost

0.14.3

1 of 1 See more

mattermost-push-proxy mattermost 0.14.3

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
mattermost/mattermost-push-proxy :6.3.0	45c53061c74e	golang.org/x/oauth2@v0.19.0	0.27.0

Open the chart page →

897

mayastormayastor

2.12.1

8 of 31 See more

mayastor mayastor 2.12.1

8 of the 31 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/oauth2@v0.25.0	0.27.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/oauth2@v0.24.0	0.27.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/oauth2@v0.25.0	0.27.0
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/oauth2@v0.25.0	0.27.0
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	golang.org/x/oauth2@v0.25.0	0.27.0
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	golang.org/x/oauth2@v0.25.0	0.27.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	golang.org/x/oauth2@v0.24.0	0.27.0
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/oauth2@v0.24.0	0.27.0

Open the chart page →

21,596

medewerkercatalogusmedewerkercatalogus

1.0.0

1 of 3 See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0

Open the chart page →

7,338

Container images carrying it

2,030 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/jetstack/cert-manager-webhook :v1.10.1	64121721c665	golang.org/x/oauth2@v0.0.0-20220909003341-f21342109be1	0.27.0	1
quay.io/jetstack/cert-manager-webhook :v1.16.1	6edf44244b2a	golang.org/x/oauth2@v0.23.0	0.27.0	1
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
quay.io/jetstack/cert-manager-webhook :v1.12.0	ec4306b243d9	golang.org/x/oauth2@v0.5.0	0.27.0	1
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	golang.org/x/oauth2@v0.15.0	0.27.0	1
quay.io/jetstack/cert-manager-webhook :v1.8.0	fd798a5a773e	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
quay.io/jetstack/kube-oidc-proxy :v0.3.0	e045b26eb6df	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
quay.io/keycloak/keycloak-operator :19.0.2-legacy	15fa0ed662b1	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
quay.io/kiali/kiali :v1.89.3	0dcdb1c1e747	golang.org/x/oauth2@v0.19.0	0.27.0	1
quay.io/kiali/kiali-operator :v2.32.0	96c5264d54ab	golang.org/x/oauth2@v0.22.0	0.27.0	1
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/oauth2@v0.10.0	0.27.0	1
quay.io/kube-ops/loki :2.2.1	4fbd63194674	golang.org/x/oauth2@v0.0.0-20201208152858-08078c50e5b5	0.27.0	1
quay.io/kube-ops/promtail :2.2.1	34de6387233b	golang.org/x/oauth2@v0.0.0-20201208152858-08078c50e5b5	0.27.0	1
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	golang.org/x/oauth2@v0.13.0	0.27.0	1
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/oauth2@v0.5.0	0.27.0	1
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/oauth2@v0.7.0	0.27.0	1
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
quay.io/kubernetes-multicluster/kubefed :v0.10.0	c4635c95730e	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
quay.io/kubevirt/kubemacpool :v0.45.0	eebb65b8a12c	golang.org/x/oauth2@v0.13.0	0.27.0	1
quay.io/kubevirt/vm-console-proxy :v0.8.0	8d6b4b6e99bd	golang.org/x/oauth2@v0.26.0	0.27.0	1
quay.io/metallb/controller :v0.10.2	21164241c045	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
quay.io/metallb/controller :v0.14.4	bbef1ee3e7d3	golang.org/x/oauth2@v0.18.0	0.27.0	1
quay.io/metallb/speaker :v0.14.4	37611bde45a2	golang.org/x/oauth2@v0.18.0	0.27.0	1
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
quay.io/minio/csi-provisioner	7b5c070ec70d	golang.org/x/oauth2@v0.5.0	0.27.0	1
quay.io/minio/csi-resizer	819f68a4daf7	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	1
quay.io/minio/directpv :v4.0.8	4560083eb77d	golang.org/x/oauth2@v0.6.0	0.27.0	1
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	golang.org/x/oauth2@v0.15.0	0.27.0	1
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	golang.org/x/oauth2@v0.16.0	0.27.0	1
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	golang.org/x/oauth2@v0.0.0-20220909003341-f21342109be1	0.27.0	1
quay.io/minio/minio :RELEASE.2024-06-04T19-20-08Z	c6b68f158628	golang.org/x/oauth2@v0.21.0	0.27.0	1
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	golang.org/x/oauth2@v0.1.0	0.27.0	1
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/oauth2@v0.6.0	0.27.0	1
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/oauth2@v0.19.0	0.27.0	1
quay.io/mittwald/kubernetes-replicator :v2.10.0	b79e77d421d0	golang.org/x/oauth2@v0.10.0	0.27.0	1
quay.io/mittwald/kubernetes-replicator :v2.9.1	baf5f784398b	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	1
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	golang.org/x/oauth2@v0.21.0	0.27.0	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
quay.io/mongodb/mongodb-kubernetes-operator :0.3.0	107a7c73af59	golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45	0.27.0	1
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b	0.27.0	1
quay.io/oauth2-proxy/oauth2-proxy :v6.1.1	791aef35b8d1	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
quay.io/oauth2-proxy/oauth2-proxy :v7.7.0	9ed7eaf72050	golang.org/x/oauth2@v0.23.0	0.27.0	1
quay.io/oauth2-proxy/oauth2-proxy :v7.1.3	ecd26b74a01f	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
quay.io/oauth2-proxy/oauth2-proxy :v7.2.1	febeebebe762	golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d	0.27.0	1
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
quay.io/open-cluster-management/cluster-proxy :v0.12.0	35f9c3ad644a	golang.org/x/oauth2@v0.10.0	0.27.0	1
quay.io/open-cluster-management/multicluster-mesh-addon :latest	3e010e1188f1	golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8	0.27.0	1
quay.io/openshift/origin-cli :4.6	6722d5041b47	golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6	0.27.0	1