CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,686; of 17,803 indexed, latest versions
Container images: 3,262; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,686 of 17,803 indexed charts deploy, on 3,262 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,483
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,163

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,686 by stars

Chart

Latest

Affected images

Radar Score

thingsboardthingsboard

0.1.3

1 of 12 See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.23.7

Open the chart page →

25,447

mc-routerthl-charts

0.1.0

1 of 1 See more

mc-router thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
itzg/mc-router :1.16.1	bb552b59fb53	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.18.4	0.36.0 1.23.7

Open the chart page →

1,855

monitoringthl-charts

0.1.1

8 of 10 See more

monitoring thl-charts 0.1.1

8 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.36.0 1.23.7
grafana/loki :2.5.0	f9ef133793af	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.36.0 1.23.7
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.36.0 1.23.7
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.23.7
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.36.0 1.23.7
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.36.0 1.23.7
quay.io/prometheus/prometheus :v2.34.0	b37103e03399	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.8	0.36.0 1.23.7

Open the chart page →

18,940

pock-helm-charttinote-chart

0.1.0

1 of 3 See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
nginx/nginx-ingress :1.11.1	eb5b4fd73325	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.11	0.36.0 1.23.7

Open the chart page →

6,889

tiny-api-charttiny-api

1.0.0

1 of 1 See more

tiny-api-chart tiny-api 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
stubin87/tiny-api :v1.1.0	2e5c42e92ec8	stdlib@go1.19.1	1.23.7

Open the chart page →

1,126

grafanatnh

5.3.0

1 of 1 See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.36.0 1.23.7

Open the chart page →

3,198

prometheustnh

11.6.0

4 of 6 See more

prometheus tnh 11.6.0

4 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.36.0 1.23.7
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.36.0 1.23.7
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.23.7
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.36.0 1.23.7

Open the chart page →

8,492

todolist-charttodolist-chart

0.1.7

1 of 10 See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
erenozcan17/go_backend :v4.2	50b4f23422b6	golang.org/x/net@v0.10.0	0.36.0

Open the chart page →

7,028

traefik-jwt-decodetraefik-jwt-decode

0.1.0

1 of 1 See more

traefik-jwt-decode traefik-jwt-decode 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
simonschneider/traefik-jwt-decode :latest	d674ac370f80	stdlib@go1.17.13	1.23.7

Open the chart page →

1,310

nfs-servertranhailong

0.1.2

1 of 1 See more

nfs-server tranhailong 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tranhailong/nfs-server :4.2-2-gcsfuse	028662749be2	golang.org/x/net@v0.4.0 stdlib@go1.18.4	0.36.0 1.23.7

Open the chart page →

2,331

treenitytreenity

0.1.3

1 of 4 See more

treenity treenity 0.1.3

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/nats :2.9.6-alpine3.16	f576cdc17cc3	stdlib@go1.19.3	1.23.7

Open the chart page →

3,383

harbor-scanner-trivytrivy-operator

0.31.2

1 of 1 See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

2,486

posteetrivy-operator

2.14.0

2 of 3 See more

postee trivy-operator 2.14.0

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
aquasec/postee :2.12.0-amd64	0795cba777e7	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

4,816

trivy-webhook-elasticsearchtrivy-webhook-elasticsearch

0.1.4

1 of 1 See more

trivy-webhook-elasticsearch trivy-webhook-elasticsearch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/lbi22/trivy-webhook-elasticsearch :v0.1.4	b51b824e4f19	stdlib@go1.22.8	1.23.7

Open the chart page →

755

trouw-servicetrouw-service

1.0.0

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,519

monitorortrozz

0.0.1

1 of 1 See more

monitoror trozz 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.6	0.36.0 1.23.7

Open the chart page →

3,110

clickhouse-operatortruefoundry

0.1.1

2 of 3 See more

clickhouse-operator truefoundry 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.23.3	4baec90b20cd	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.36.0 1.23.7
altinity/metrics-exporter :0.23.3	2912a6c15b44	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.36.0 1.23.7

Open the chart page →

1,430

tfy-cloudflaredtruefoundry

0.6.0

1 of 2 See more

tfy-cloudflared truefoundry 0.6.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/caddy :2.6.3	87cbd356af2e	golang.org/x/net@v0.5.0 stdlib@go1.20	0.36.0 1.23.7

Open the chart page →

2,022

tfy-distributortruefoundry

0.0.1

3 of 4 See more

tfy-distributor truefoundry 0.0.1

3 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	stdlib@go1.21.5	1.23.7
natsio/nats-server-config-reloader :0.14.0	8c28b75bc416	stdlib@go1.20.5	1.23.7
natsio/prometheus-nats-exporter :0.13.0	2adf791d9f9f	stdlib@go1.21.3	1.23.7

Open the chart page →

17,403

tfy-inferentia-operatortruefoundry

0.2.8

3 of 3 See more

tfy-inferentia-operator truefoundry 0.2.8

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	golang.org/x/net@v0.24.0 stdlib@go1.22.12	0.36.0 1.23.7
public.ecr.aws/neuron/neuron-device-plugin :2.23.30.0	75a6d5ce3bd3	golang.org/x/net@v0.23.0 stdlib@go1.20.4	0.36.0 1.23.7
public.ecr.aws/neuron/neuron-scheduler :2.23.30.0	4cd274463e6b	golang.org/x/net@v0.23.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

2,918

tfy-kservetruefoundry

0.1.1

1 of 2 See more

tfy-kserve truefoundry 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kserve/kserve-controller :v0.10.0	22ff858b57c1	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

1,178

tfy-llm-gateway-infratruefoundry

0.2.10

2 of 3 See more

tfy-llm-gateway-infra truefoundry 0.2.10

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.23.7	74315beb57db	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.36.0 1.23.7
altinity/metrics-exporter :0.23.7	a4d7ff0c727e	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.36.0 1.23.7

Open the chart page →

1,206

tfy-lokitruefoundry

0.1.6

2 of 2 See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/loki :2.9.10	35b02acc6765	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7
grafana/promtail :2.9.10	63a2e57a5b14	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

2,827

aws-eks-asg-rolling-update-handlertwin

1.5.0

1 of 1 See more

aws-eks-asg-rolling-update-handler twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
twinproduction/aws-eks-asg-rolling-update-handler :v1.7.0	8f38c206972e	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

1,119

lighthousetwin

1.0.2

1 of 1 See more

lighthouse twin 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/twin/lighthouse :v0.0.4	5aeda2ea2ba2	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

544

twitter-apptwitter-helm

0.1.12

4 of 8 See more

twitter-app twitter-helm 0.1.12

4 of the 8 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.36.0 1.23.7
stakkato95/twitter-service-graphql :0.1.1	3cbe857234f2	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.36.0 1.23.7
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	stdlib@go1.18.3	1.23.7
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

6,147

kafkatwomartens

0.2.1

1 of 2 See more

kafka twomartens 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.7.0	e90b7ba06d97	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

1,569

simple-mongodbtyk-helm

0.1.1

1 of 1 See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.23.7

Open the chart page →

4,135

tyk-bootstraptyk-helm

5.3.0

3 of 3 See more

tyk-bootstrap tyk-helm 5.3.0

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.23.7

Open the chart page →

1,374

tyk-control-planetyk-helm

5.3.0

3 of 7 See more

tyk-control-plane tyk-helm 5.3.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.23.7

Open the chart page →

2,992

tyk-stacktyk-helm

5.3.0

3 of 7 See more

tyk-stack tyk-helm 5.3.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.23.7

Open the chart page →

2,936

typhoontyphoon

0.2.3

2 of 2 See more

typhoon typhoon 0.2.3

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/zeiss/typhoon/controller :0.2.3	4fdf4edfda45	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.36.0 1.23.7
ghcr.io/zeiss/typhoon/typhoon-webhook :0.2.3	78f9b82050bc	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.36.0 1.23.7

Open the chart page →

1,686

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30	1249fc292e84	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.36.0 1.23.7

Open the chart page →

8,674

miniouninettsigma2

1.2.0

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.36.0 1.23.7

Open the chart page →

4,967

kenerunxwares

2026.2.5

1 of 1 See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rajnandan1/kener :3.2.19	30407afca731	stdlib@go1.20.7	1.23.7

Open the chart page →

5,251

phonebook-chartusuladams2

0.2.1

1 of 3 See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.23.7

Open the chart page →

3,176

kiamuswitch

6.1.2

1 of 1 See more

kiam uswitch 6.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/uswitch/kiam :v4.0	be3a5846922d	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.13.8	0.36.0 1.23.7

Open the chart page →

2,972

utho-app-operator-chartutho-operator

0.1.6

1 of 2 See more

utho-app-operator-chart utho-operator 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
utho/utho-app-operator :0.1.4	6e8a690e8b7a	golang.org/x/net@v0.26.0 stdlib@go1.22.8	0.36.0 1.23.7

Open the chart page →

491

gohttpserverutkuozdemir

0.2.0

1 of 1 See more

gohttpserver utkuozdemir 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeskyblue/gohttpserver :latest	caa862590e34	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.3	0.36.0 1.23.7

Open the chart page →

1,898

transmission-exporterutkuozdemir

1.1.0

1 of 1 See more

transmission-exporter utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
metalmatze/transmission-exporter :0.3.0	90d6acb6d47d	stdlib@go1.13	1.23.7

Open the chart page →

1,646

openldap-havcnngr

1.0.0

1 of 3 See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.36.0 1.23.7

Open the chart page →

5,515

verhuis-serviceverhuis-service

1.0.0

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,519

verzoekconversieserviceverzoekconversieservice

1.0.0

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,537

verzoekregistratiecomponentverzoekregistratiecomponent

1.1.0

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,439

verzoektypecatalogusverzoektypecatalogus

1.1.0

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,439

homarrvhdirk

0.1.5

1 of 1 See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/ajnart/homarr :latest	e103abadfb52	stdlib@go1.22.5	1.23.7

Open the chart page →

2,789

scrutinyvhdirk

0.1.3

1 of 1 See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/analogj/scrutiny :master-omnibus	18689773150d	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.20.14	0.36.0 1.23.7

Open the chart page →

4,415

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.7	0.36.0 1.23.7

Open the chart page →

13,617

kube-monitoring-telegram-botviento-repository

1.0.0

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.36.0 1.23.7

Open the chart page →

7,906

vineyard-operatorvineyard

0.24.2

2 of 2 See more

vineyard-operator vineyard 0.24.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vineyardcloudnative/vineyard-operator :latest	9d419aa18faa	golang.org/x/net@v0.23.0 stdlib@go1.19.13	0.36.0 1.23.7
ghcr.io/v6d-io/v6d/kube-rbac-proxy :v0.13.0	a2523c532c0c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

4,565

Container images carrying it

3,262 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
adrianberger/fluxcd-webui :latest	76848c0d2780	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.2	0.36.0 1.23.7	1
aerokube/moon :1.9.17	da76ca51220d	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7	1
aerokube/moon-api :1.9.17	6b6323e75785	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7	1
aerokube/selenoid-ui :1.10.11	3f3e299509fd	golang.org/x/net@v0.10.0 stdlib@go1.21.5	0.36.0 1.23.7	1
afgane/galaxy-k8s-monitor :latest	457173db5640	golang.org/x/net@v0.30.0	0.36.0	1
agentarea/agentarea-mcp-manager :latest	efe23cef3727	stdlib@go1.22.5	1.23.7	1
agentarea/agentarea-mcp-runner :latest	d3c209a5d531	stdlib@go1.19.8	1.23.7	1
aibrix/controller-manager :v0.7.0	76aabbbfda79	golang.org/x/net@v0.34.0 stdlib@go1.22.12	0.36.0 1.23.7	1
aibrix/gateway-plugins :v0.7.0	5b93ea4c753a	golang.org/x/net@v0.34.0 stdlib@go1.22.12	0.36.0 1.23.7	1
airbyte/minio :RELEASE.2023-11-20T22-40-07Z	fdae972eaf0e	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7	1
airbyte/pod-sweeper :1.5.1	98d2c39d512e	golang.org/x/net@v0.26.0 stdlib@go1.23.4	0.36.0 1.23.7	1
akeyless/base-rhel :0.0.1	4ba8900a0061	stdlib@go1.22.1	1.23.7	1
aktosecurity/akto-puppeteer-replay :doom_latest	853e37321e6e	stdlib@go1.22.5	1.23.7	1
aktosecurity/mirror-api-logging :api-gateway-logging-openapi	12ed2544756f	stdlib@go1.23.3	1.23.7	1
aktosecurity/mirror-api-logging :api-gateway-logging-multi-logging	1a1bc76d50fe	stdlib@go1.23.3	1.23.7	1
alex6021710/ai-scale-auth :latest	6c7a47e470c3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.16.12	0.36.0 1.23.7	1
alex6021710/ai-scale-doer :latest	31e533cf7cd3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.16.10	0.36.0 1.23.7	1
alex6021710/ai-scale-migrator :latest	744b8a924f35	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e stdlib@go1.17.2	0.36.0 1.23.7	1
alex6021710/ai-scale-provider :latest	5837d9b30cc7	golang.org/x/net@v0.0.0-20211104170005-ce137452f963 stdlib@go1.15.8	0.36.0 1.23.7	1
alex6021710/ai-scale-saver :latest	f73e8d60fd03	golang.org/x/net@v0.0.0-20211105192438-b53810dc28af stdlib@go1.17	0.36.0 1.23.7	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	stdlib@go1.18.1	1.23.7	1
almir/webhook :2.8.0	1698346f6077	stdlib@go1.14.7	1.23.7	1
almorgv/gitlab-code-review-notifier :0.1.2	5f2a7d2b44d8	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.14.15	0.36.0 1.23.7	1
alpine/git :2.36.3	66b210a97bc0	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.7	0.36.0 1.23.7	1
alpine/helm	105741fa6621	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7	1
alpine/k8s :1.22.6	00ac10bcb759	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d stdlib@go1.17.6	0.36.0 1.23.7	1
alpine/k8s :1.27.3	21b24e6bf801	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.20.4	0.36.0 1.23.7	1
alpine/k8s :1.36.2	44ef4942e171	stdlib@go1.24.0	1.23.7	1
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/net@v0.19.0 stdlib@go1.22.7	0.36.0 1.23.7	1
alpine/k8s :1.31.13	7a319b15cfc9	golang.org/x/net@v0.26.0 stdlib@go1.20.4	0.36.0 1.23.7	1
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/net@v0.34.0 stdlib@go1.20.4	0.36.0 1.23.7	1
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/net@v0.31.0 stdlib@go1.23.2	0.36.0 1.23.7	1
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.2	0.36.0 1.23.7	1
alpine/k8s :1.37.0	b421c2e9419e	stdlib@go1.24.0	1.23.7	1
alpine/k8s :1.35.6	b7a12c5ddf26	stdlib@go1.24.0	1.23.7	1
alpine/k8s :1.30.0	bd01dae02676	golang.org/x/net@v0.23.0 stdlib@go1.21.1	0.36.0 1.23.7	1
alpine/k8s :1.30.2	cd560fce90f7	golang.org/x/net@v0.9.0 stdlib@go1.22.3	0.36.0 1.23.7	1
alpine/k8s :1.35.5	d870622d0040	stdlib@go1.24.0	1.23.7	1
alpine/k8s :1.28.13	e5c0b053fed7	golang.org/x/net@v0.12.0 stdlib@go1.22.5	0.36.0 1.23.7	1
alpine/k8s :1.32.3	eec354133193	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.36.0 1.23.7	1
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/net@v0.9.0 stdlib@go1.20.8	0.36.0 1.23.7	1
altinity/clickhouse-operator :0.23.3	4baec90b20cd	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.36.0 1.23.7	1
altinity/clickhouse-operator :0.23.7	74315beb57db	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.36.0 1.23.7	1
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.13	0.36.0 1.23.7	1
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.36.0 1.23.7	1
altinity/clickhouse-operator :0.16.1	db7dde971407	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.13.15	0.36.0 1.23.7	1
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.36.0 1.23.7	1
altinity/metrics-exporter :0.23.3	2912a6c15b44	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.36.0 1.23.7	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.13.15	0.36.0 1.23.7	1
altinity/metrics-exporter :0.23.7	a4d7ff0c727e	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.36.0 1.23.7	1