CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,666; of 17,781 indexed, latest versions
Container images: 3,231; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,666 of 17,781 indexed charts deploy, on 3,231 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+200 more	0.36.0	2,459
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,131

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,666 by stars

Chart

Latest

Affected images

Radar Score

oncallgrafana

1.16.5

7 of 12 See more

oncall grafana 1.16.5

7 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
quay.io/jetstack/cert-manager-ctl :v1.8.0	595c548dee6f	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
quay.io/jetstack/cert-manager-webhook :v1.8.0	fd798a5a773e	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.36.0 1.23.7

Open the chart page →

16,251

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.3	f09282d281f6	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.36.0 1.23.7

Open the chart page →

11,384

aws-cloudwatch-metricsaws

0.0.11

1 of 1 See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

1,556

zabbixcetic

3.1.3

2 of 5 See more

zabbix cetic 3.1.3

2 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.1	0.36.0 1.23.7
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	stdlib@go1.18.1	1.23.7

Open the chart page →

33,725

chatwootchatwoot

2.0.24

2 of 3 See more

chatwoot chatwoot 2.0.24

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	stdlib@go1.18.2	1.23.7
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	stdlib@go1.16.7	1.23.7

Open the chart page →

9,203

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

4,918

home-assistantgeek-cookbook

13.5.0

1 of 1 See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	stdlib@go1.17.1	1.23.7

Open the chart page →

7,705

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.23.7

Open the chart page →

6,543

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.23.7
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	stdlib@go1.22.7	1.23.7

Open the chart page →

5,240

hostpath-provisionerrimusz

0.2.13

1 of 1 See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.7	0.36.0 1.23.7

Open the chart page →

2,039

daskdask

2024.1.1

1 of 2 See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

12,746

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

2,993

openldaphelm-openldap

2.0.4

1 of 3 See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.13.4	0.36.0 1.23.7

Open the chart page →

6,219

kube-starrockskube-starrocks

1.11.7

1 of 1 See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
starrocks/operator :v1.11.7	8c20435a7579	golang.org/x/net@v0.17.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

556

linkerd-jaegerlinkerd2

30.12.11

2 of 4 See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.36.0 1.23.7
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.36.0 1.23.7

Open the chart page →

4,405

outlineoutline

0.0.9

1 of 4 See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.23.7

Open the chart page →

4,431

homeassistantvolker-raschek

0.2.3

1 of 1 See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.12.4	8d000332b09b	stdlib@go1.17.1	1.23.7

Open the chart page →

6,041

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7

Open the chart page →

1,023

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.36.0 1.23.7

Open the chart page →

6,854

edge-stackdatawire

7.1.8-ea

1 of 2 See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/aes :2.0.3-ea	07f8fe4f4f8e	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

5,173

glasskube-operatorglasskube

0.12.2

3 of 3 See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.36.0 1.23.7

Open the chart page →

11,933

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	stdlib@go1.20.12	1.23.7

Open the chart page →

5,352

linkerd-vizlinkerd2-edge

30.14.11-edge

1 of 5 See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

1,346

plane-cemakeplane

1.8.1

1 of 11 See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.23.7

Open the chart page →

4,854

milvusmilvus-helm

5.0.27

1 of 4 See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

10,670

mssqlmssql

1.10.3

1 of 1 See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql :1.10.3	f923d842bc47	stdlib@go1.23.1	1.23.7

Open the chart page →

642

spirespiffe

0.30.2

1 of 10 See more

spire spiffe 0.30.2

1 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/spiffe-csi-driver :0.2.7	9dfe4f0caff0	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.36.0 1.23.7

Open the chart page →

1,640

ansible-semaphorecloudhippie

15.2.10

1 of 1 See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.19.14	98ad9bc7a2a0	stdlib@go1.23.3	1.23.7

Open the chart page →

1,235

zookeepercloudpirates-zookeeper

0.13.11

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	cab8944a33a1	stdlib@go1.18.1	1.23.7

Open the chart page →

2,924

vertical-pod-autoscalercluster-autoscaler

0.12.0

1 of 4 See more

vertical-pod-autoscaler cluster-autoscaler 0.12.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

1,062

codefreshcodefresh-onprem

2.12.13

1 of 42 See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	golang.org/x/net@v0.27.0 stdlib@go1.21.12	0.36.0 1.23.7

Open the chart page →

14,956

aws-ebs-csi-driverdeliveryhero

2.17.4

6 of 6 See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	golang.org/x/net@v0.4.0 stdlib@go1.19.6	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	golang.org/x/net@v0.4.0 stdlib@go1.19.7	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	golang.org/x/net@v0.4.0 stdlib@go1.19.8	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.36.0 1.23.7

Open the chart page →

6,483

loki-simple-scalablegrafana

1.8.11

2 of 3 See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.36.0 1.23.7
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.36.0 1.23.7

Open the chart page →

6,470

adguard-homerm3l

0.24.1

1 of 2 See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.51	3a143e6c071c	golang.org/x/net@v0.25.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

1,149

supabasetokens-studio

1.0.0

2 of 14 See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.36.0 1.23.7
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

23,123

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

2,107

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.23.7

Open the chart page →

8,493

nsqbeeinventor

1.3.0

1 of 1 See more

871

frigateblakeblackshear

7.8.0

1 of 1 See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	golang.org/x/net@v0.8.0 stdlib@go1.17.1	0.36.0 1.23.7

Open the chart page →

3,004

kube-prometheuschoerodon

9.3.1

4 of 7 See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.36.0 1.23.7
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e stdlib@go1.13.11	0.36.0 1.23.7
squareup/ghostunnel :v1.5.2	70f4cf270425	golang.org/x/net@v0.0.0-20191003171128-d98b1b443823 stdlib@go1.13.4	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.3	0.36.0 1.23.7

Open the chart page →

12,237

minifluxgabe565

0.9.2

1 of 2 See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.36.0 1.23.7

Open the chart page →

1,247

cubestoregadsme

1.2.0

1 of 3 See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.36.0 1.23.7

Open the chart page →

3,025

waypointhashicorp

0.1.21

1 of 2 See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

4,167

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.36.0 1.23.7

Open the chart page →

7,857

jaeger-all-in-onejaeger-all-in-one

0.1.12

1 of 1 See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.55	f6b5d09073f1	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.36.0 1.23.7

Open the chart page →

1,216

rabbitmqkubelauncher

0.2.11

1 of 1 See more

rabbitmq kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/rabbitmqdigest-pinned	ff5a36a457f1	stdlib@go1.22.2	1.23.7

Open the chart page →

1,079

purelbpurelb

0.0.0-106-ipv6-lbip-052cedab

1 of 2 See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.15	0.36.0 1.23.7

Open the chart page →

4,413

dex-k8s-authenticatorsagikazarmark

0.0.3

1 of 1 See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/net@v0.0.0-20190522155817-f3200d17e092 stdlib@go1.13.11	0.36.0 1.23.7

Open the chart page →

2,791

connaisseurconnaisseur

2.12.0

1 of 2 See more

connaisseur connaisseur 2.12.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	83edc2b8e9ff	stdlib@go1.18.2	1.23.7

Open the chart page →

3,012

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.2	0.36.0 1.23.7

Open the chart page →

1,513

Container images carrying it

3,231 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.5	0.36.0 1.23.7	2
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.36.0 1.23.7	2
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.10	0.36.0 1.23.7	2
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.36.0 1.23.7	2
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/net@v0.0.0-20220325170049-de3da57026de stdlib@go1.18.1	0.36.0 1.23.7	2
quay.io/iver-wharf/wharf-cmd :v0.8.2	e98d13459cdc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.36.0 1.23.7	2
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.36.0 1.23.7	2
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.36.0 1.23.7	2
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.2	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-cainjector :v1.11.0	5c3eb25b0854	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-cainjector :v1.15.3	e0ce8ae280c8	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-startupapicheck :v1.15.3	4cbc1b022a23	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7	2
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7	2
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.36.0 1.23.7	2
quay.io/metallb/speaker :v0.13.10	00406ccb1fa0	golang.org/x/net@v0.8.0 stdlib@go1.19.5	0.36.0 1.23.7	2
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.36.0 1.23.7	2
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	2
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.36.0 1.23.7	2
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	golang.org/x/net@v0.12.0 stdlib@go1.19.11	0.36.0 1.23.7	2
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.36.0 1.23.7	2
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.10	0.36.0 1.23.7	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.14	0.36.0 1.23.7	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.16.12	0.36.0 1.23.7	2
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.36.0 1.23.7	2
quay.io/prometheuscommunity/json-exporter :v0.7.0	3a777171d39a	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7	2
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.36.0 1.23.7	2
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.3	0.36.0 1.23.7	2
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.36.0 1.23.7	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.67.0	14feefde1b80	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.36.0 1.23.7	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.36.0 1.23.7	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.36.0 1.23.7	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7	2
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.12	0.36.0 1.23.7	2
quay.io/prometheus-operator/prometheus-operator :v0.77.2	af92db7eac86	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7	2
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.36.0 1.23.7	2
quay.io/prometheus/prometheus :v2.53.0	075b1ba2c4eb	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7	2
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.36.0 1.23.7	2
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.3	0.36.0 1.23.7	2
quay.io/prometheus/prometheus :v2.47.0	c5dd35038287	golang.org/x/net@v0.12.0 stdlib@go1.21.0	0.36.0 1.23.7	2