StackRadar

CVE-2025-22868

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,615
of 17,781 indexed, latest versions
Container images
2,001
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

Carried by container images the latest versions of 1,615 of 17,781 indexed charts deploy, on 2,001 images.

Affected packageAffected versionsFixed inImages
golang.org/x/oauth2golangv0.0.0-20170629032740-5432cc9688e6, v0.0.0-20170807180024-9a379c6b3e95, v0.0.0-20180620175406-ef147856a6dd, v0.0.0-20180724155351-3d292e4d0cdc+72 more0.27.02,001
OSV records
GHSA-6v2p-p543-phr9
Also known as
GO-2025-3488

Charts affected

1,615 by stars
ChartLatestAffected imagesRadar Score
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
golang.org/x/oauth2@v0.6.0
0.27.0

Open the chart page →

1,716
mt-channel-brokerahhhhVerified publisher0.1.03 of 3See more

mt-channel-broker ahhhh 0.1.0

3 of the 3 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filterdigest-pinnedd675f211a40f
golang.org/x/oauth2@v0.22.0
0.27.0
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingressdigest-pinnedec4b544499ba
golang.org/x/oauth2@v0.22.0
0.27.0
gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_brokerdigest-pinned395f4ff1bd34
golang.org/x/oauth2@v0.22.0
0.27.0

Open the chart page →

2,607
net-istioahhhhVerified publisher0.1.12 of 2See more

net-istio ahhhh 0.1.1

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinnede70bc675f977
golang.org/x/oauth2@v0.22.0
0.27.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned7d76a6d42d13
golang.org/x/oauth2@v0.22.0
0.27.0

Open the chart page →

1,114
net-kourierahhhhVerified publisher0.18.11 of 1See more

net-kourier ahhhh 0.18.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourierdigest-pinned15a601147ef4
golang.org/x/oauth2@v0.26.0
0.27.0

Open the chart page →

508
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
golang.org/x/oauth2@v0.21.0
0.27.0

Open the chart page →

4,922
airbyteairbyte-v2Verified publisher2.2.02 of 10See more

airbyte airbyte-v2 2.2.0

2 of the 10 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-11-20T22-40-07Zb833a1699b4f
golang.org/x/oauth2@v0.13.0
0.27.0
temporalio/auto-setup:1.27.2b44cbfeb43db
golang.org/x/oauth2@v0.26.0
0.27.0

Open the chart page →

12,473
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f
0.27.0

Open the chart page →

4,547
akriakri0.12.551 of 3See more

akri akri 0.12.55

1 of the 3 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602
0.27.0

Open the chart page →

1,545
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

13,613
akto-hybrid-redactakto1.44.41 of 5See more

akto-hybrid-redact akto 1.44.4

1 of the 5 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

4,777
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

6,486
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

6,397
akto-protectionakto0.1.01 of 4See more

akto-protection akto 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

11,285
akto-testing-db-layerakto1.42.161 of 2See more

akto-testing-db-layer akto 1.42.16

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

5,489
kpubberalekcVerified publisher0.0.41 of 1See more

kpubber alekc 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/alekc/kpubber:v0.0.2a462d5797e14
golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f
0.27.0

Open the chart page →

2,228
gitlab-code-review-notifieralmorgvVerified publisher0.1.21 of 2See more

gitlab-code-review-notifier almorgv 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
almorgv/gitlab-code-review-notifier:0.1.25f2a7d2b44d8
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0

Open the chart page →

2,115
flux-suspension-exporteralpineworks0.1.11 of 1See more

flux-suspension-exporter alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
golang.org/x/oauth2@v0.25.0
0.27.0

Open the chart page →

557
flux-suspensions-exporteralpineworks0.1.01 of 1See more

flux-suspensions-exporter alpineworks 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
golang.org/x/oauth2@v0.25.0
0.27.0

Open the chart page →

557
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
golang.org/x/oauth2@v0.18.0
0.27.0

Open the chart page →

4,497
katalog-agentalpineworks0.1.21 of 1See more

katalog-agent alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-agent:v1.0.48f50bd568c2b
golang.org/x/oauth2@v0.23.0
0.27.0

Open the chart page →

575
amorphieamorphie0.1.28 of 18See more

amorphie amorphie 0.1.2

8 of the 18 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
burganbank/vault-initializer:v19259c34e4037
golang.org/x/oauth2@v0.10.0
0.27.0
daprio/dashboard:0.14.07ba5d51e5b97
golang.org/x/oauth2@v0.5.0
0.27.0
daprio/injector:1.11.2763b9b70b0c8
golang.org/x/oauth2@v0.8.0
0.27.0
daprio/operator:1.11.2c584428aa12d
golang.org/x/oauth2@v0.8.0
0.27.0
daprio/placement:1.11.2d8e1446da996
golang.org/x/oauth2@v0.8.0
0.27.0
daprio/sentry:1.11.21f507c1a181b
golang.org/x/oauth2@v0.8.0
0.27.0
hashicorp/vault:1.15.26b4e5dadf082
golang.org/x/oauth2@v0.11.0
0.27.0
hashicorp/vault-k8s:1.3.15d74a885ae3e
golang.org/x/oauth2@v0.11.0
0.27.0

Open the chart page →

28,131
kaianchore-charts0.5.11 of 1See more

kai anchore-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
anchore/kai:v0.5.08aad6d0912dd
golang.org/x/oauth2@v0.0.0-20221014153046-6fdb5e3db783
0.27.0

Open the chart page →

1,326
dnsmadeeasy-webhookangelnu6.0.71 of 1See more

dnsmadeeasy-webhook angelnu 6.0.7

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/angelnu/dnsmadeeasy-webhook:v1.9.0a5ca158b1f02
golang.org/x/oauth2@v0.24.0
0.27.0

Open the chart page →

803
maddyangelnu5.0.01 of 1See more

maddy angelnu 5.0.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/foxcpp/maddy:0.9.5de42151adff6
golang.org/x/oauth2@v0.25.0
0.27.0

Open the chart page →

767
cert-manager-webhook-safednsansgroupVerified publisher1.3.01 of 1See more

cert-manager-webhook-safedns ansgroup 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ansgroup/cert-manager-webhook-safedns:v1.0.1cd6b0ef2b309
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0

Open the chart page →

2,488
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:3.56ed80f00fde46
golang.org/x/oauth2@v0.10.0
0.27.0
library/influxdb:2.6.1-alpine44a366dd7724
golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f
0.27.0
prom/prometheus:v2.37.98176adea328e
golang.org/x/oauth2@v0.0.0-20220628200809-02e64fa58f26
0.27.0

Open the chart page →

25,669
antmediaantmediaVerified publisher3.1.02 of 4See more

antmedia antmedia 3.1.0

2 of the 4 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b
0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0

Open the chart page →

4,576
ingress-nginxantmediaVerified publisher4.4.02 of 2See more

ingress-nginx antmedia 4.4.0

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b
0.27.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0

Open the chart page →

3,322
nfs-server-provisioneranvibo1.3.01 of 1See more

nfs-server-provisioner anvibo 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0

Open the chart page →

2,730
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
golang.org/x/oauth2@v0.15.0
0.27.0

Open the chart page →

2,902
app-mobilityappmo0.1.03 of 5See more

app-mobility appmo 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
golang.org/x/oauth2@v0.0.0-20220622183110-fd043fe589d2
0.27.0
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f
0.27.0
velero/velero:v1.8.18d784580931c
golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914
0.27.0

Open the chart page →

12,521
auditorappscodeVerified publisher2023.10.11 of 1See more

auditor appscode 2023.10.1

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/auditor:v0.0.1c62c89ee706d
golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8
0.27.0

Open the chart page →

1,673
capa-vpc-peering-operatorappscodeVerified publisher2023.12.111 of 1See more

capa-vpc-peering-operator appscode 2023.12.11

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
golang.org/x/oauth2@v0.11.0
0.27.0

Open the chart page →

1,433
capi-ops-managerappscodeVerified publisher2024.8.142 of 2See more

capi-ops-manager appscode 2024.8.14

2 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/capi-ops-manager:v0.0.57465f35b684c
golang.org/x/oauth2@v0.22.0
0.27.0
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6
0.27.0

Open the chart page →

3,416
cluster-proxyappscodeVerified publisher2024.2.251 of 1See more

cluster-proxy appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-proxy:latest27a5c64b7ea8
golang.org/x/oauth2@v0.16.0
0.27.0

Open the chart page →

1,119
cluster-proxy-managerappscodeVerified publisher2026.6.261 of 1See more

cluster-proxy-manager appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
golang.org/x/oauth2@v0.10.0
0.27.0

Open the chart page →

1,463
docker-machine-operatorappscodeVerified publisher2024.7.91 of 1See more

docker-machine-operator appscode 2024.7.9

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
golang.org/x/oauth2@v0.10.0
0.27.0

Open the chart page →

2,220
fluxcd-addon-managerappscodeVerified publisher2024.2.251 of 1See more

fluxcd-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/fluxcd-addon:v0.0.23acba3df8827
golang.org/x/oauth2@v0.15.0
0.27.0

Open the chart page →

1,304
gateway-converterappscodeVerified publisher2024.8.301 of 1See more

gateway-converter appscode 2024.8.30

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/gateway-converter:v0.0.1b92123805584
golang.org/x/oauth2@v0.21.0
0.27.0

Open the chart page →

1,267
gh-ci-webhookappscodeVerified publisher2026.9.111 of 1See more

gh-ci-webhook appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
golang.org/x/oauth2@v0.21.0
0.27.0

Open the chart page →

1,240
grafanaappscodeVerified publisher2026.9.111 of 1See more

grafana appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana:v2025.2.367d18880448c
golang.org/x/oauth2@v0.0.0-20210113205817-d3ed898aa8a3
0.27.0

Open the chart page →

2,333
inbox-agentappscodeVerified publisher2026.6.21 of 2See more

inbox-agent appscode 2026.6.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.15.0d8cc6ffb9819
golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8
0.27.0

Open the chart page →

2,114
kube-auth-managerappscodeVerified publisher2023.11.141 of 1See more

kube-auth-manager appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
golang.org/x/oauth2@v0.5.0
0.27.0

Open the chart page →

1,945
kube-auth-proxyappscodeVerified publisher2023.11.141 of 1See more

kube-auth-proxy appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
golang.org/x/oauth2@v0.5.0
0.27.0

Open the chart page →

1,945
kubedb-communityappscodeVerified publisher0.24.21 of 2See more

kubedb-community appscode 0.24.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
kubedb/operator:v0.24.01a06ff0bda52
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0

Open the chart page →

2,550
kubedb-enterpriseappscodeVerified publisher0.11.21 of 2See more

kubedb-enterprise appscode 0.11.2

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
kubedb/kubedb-enterprise:v0.11.05829bcedcb0d
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0

Open the chart page →

2,575
kubedb-oneappscodeVerified publisher2023.12.289 of 10See more

kubedb-one appscode 2023.12.28

9 of the 10 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/oauth2@v0.0.0-20210514164344-f6687ab2804c
0.27.0
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
golang.org/x/oauth2@v0.13.0
0.27.0
ghcr.io/stashed/stash-crd-installer:v0.32.0c6f2a844b5dd
golang.org/x/oauth2@v0.5.0
0.27.0
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
golang.org/x/oauth2@v0.0.0-20210628180205-a41e5a781914
0.27.0

Open the chart page →

15,200
kubedb-provider-awsappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-aws appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
golang.org/x/oauth2@v0.4.0
0.27.0

Open the chart page →

2,527
kubedb-provider-azureappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-azure appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
golang.org/x/oauth2@v0.4.0
0.27.0

Open the chart page →

2,705
kubedb-provider-gcpappscodeVerified publisher2026.7.101 of 2See more

kubedb-provider-gcp appscode 2026.7.10

1 of the 2 container images this version deploys carry CVE-2025-22868.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
golang.org/x/oauth2@v0.7.0
0.27.0

Open the chart page →

3,033

Container images carrying it

2,001 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:11.1.0079600c9517b
golang.org/x/oauth2@v0.20.0
0.27.0
2
grafana/grafana:8.5.042d3e6bc1865
golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8
0.27.0
2
grafana/grafana:7.3.5511bc20bfcd1
golang.org/x/oauth2@v0.0.0-20200902213428-5d25da1a8d43
0.27.0
2
grafana/grafana:11.1.4886b56d5534e
golang.org/x/oauth2@v0.20.0
0.27.0
2
grafana/grafana:11.4.0d8ea37798ccc
golang.org/x/oauth2@v0.23.0
0.27.0
2
grafana/loki:1.5.0922b3f412fdd
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0
2
grafana/loki:3.1.0d947e68a84d9
golang.org/x/oauth2@v0.18.0
0.27.0
2
grafana/loki:2.5.0f9ef133793af
golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8
0.27.0
2
grafana/promtail:1.5.046e88d390cd6
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0
2
grafana/tempo:2.5.0f0200a9bff6d
golang.org/x/oauth2@v0.17.0
0.27.0
2
hashicorp/consul:1.14.2e38576edcdfd
golang.org/x/oauth2@v0.0.0-20220909003341-f21342109be1
0.27.0
2
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0
2
hashicorp/vault:1.8.34db614d40d0e
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0
2
hashicorp/vault:1.15.26b4e5dadf082
golang.org/x/oauth2@v0.11.0
0.27.0
2
hashicorp/vault:1.12.18de4d5f31b38
golang.org/x/oauth2@v0.0.0-20220524215830-622c5d57e401
0.27.0
2
hashicorp/vault-k8s:1.3.15d74a885ae3e
golang.org/x/oauth2@v0.11.0
0.27.0
2
hashicorp/vault-k8s:1.1.0844337076b72
golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b
0.27.0
2
hashicorp/vault-k8s:0.13.1bebb03e8e800
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0
2
honestica/kube-iptables-tailer:master-91a393242fb939
golang.org/x/oauth2@v0.0.0-20190604053449-0f29369cfe45
0.27.0
2
ilum/api:6.7.3624fd09528c8
golang.org/x/oauth2@v0.23.0
0.27.0
2
inaccel/reef:latestc967218739f3
golang.org/x/oauth2@v0.15.0
0.27.0
2
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/oauth2@v0.0.0-20210313182246-cd4f82c27b84
0.27.0
2
iomesh/csi-snapshotter:v6.2.2becc53e25b96
golang.org/x/oauth2@v0.1.0
0.27.0
2
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0
2
iomesh/localpv-manager:v0.2.0f13deacac3f4
golang.org/x/oauth2@v0.0.0-20220223155221-ee480838109b
0.27.0
2
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0
2
iomesh/snapshot-controller:v6.2.2fb95b65bb88f
golang.org/x/oauth2@v0.1.0
0.27.0
2
iomesh/zookeeper-operator:0.2.159b38b5c7a61d
golang.org/x/oauth2@v0.0.0-20220524215830-622c5d57e401
0.27.0
2
ipfs/kubo:v0.33.21a30f5ed8579
golang.org/x/oauth2@v0.24.0
0.27.0
2
istio/install-cni:1.24.2-distrolessaef4825e110f
golang.org/x/oauth2@v0.23.0
0.27.0
2
istio/pilot:1.24.2-distroless137e44e3d1d2
golang.org/x/oauth2@v0.23.0
0.27.0
2
istio/proxyv2:1.18.0757d28c24100
golang.org/x/oauth2@v0.7.0
0.27.0
2
istio/proxyv2:1.10.3a78b7a165744
golang.org/x/oauth2@v0.0.0-20210323180902-22b0adad7558
0.27.0
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/oauth2@v0.0.0-20190523182746-aaccbc9213b0
0.27.0
2
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6
0.27.0
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
golang.org/x/oauth2@v0.3.0
0.27.0
2
kubernetesui/dashboard:v2.2.0148991563e37
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0
2
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602
0.27.0
2
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8
0.27.0
2
library/influxdb:2.6.1-alpine44a366dd7724
golang.org/x/oauth2@v0.0.0-20210819190943-2bc19b11175f
0.27.0
2
library/influxdb:2.7b8d940ca9376
golang.org/x/oauth2@v0.21.0
0.27.0
2
library/traefik:v2.57d5a6ae66572
golang.org/x/oauth2@v0.0.0-20210402161424-2e8d93401602
0.27.0
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6
0.27.0
2
minio/operator:v4.3.754393e03f3b2
golang.org/x/oauth2@v0.0.0-20200107190931-bf48bf16ab8d
0.27.0
2
natsio/nats-box:0.11.09fbf7bf684e4
golang.org/x/oauth2@v0.0.0-20181203162652-d668ce993890
0.27.0
2
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8
0.27.0
2
openebs/node-disk-operator:2.1.06afe2123c457
golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c8
0.27.0
2
openebs/provisioner-localpv:3.5.0aea39e49bb97
golang.org/x/oauth2@v0.8.0
0.27.0
2
openkruise/kruise-helm-hook:v0.1.0edc7cf9428fd
golang.org/x/oauth2@v0.17.0
0.27.0
2
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
golang.org/x/oauth2@v0.0.0-20191202225959-858c2ad4c8b6
0.27.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.