CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,685; of 17,790 indexed, latest versions
Container images: 3,260; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,685 of 17,790 indexed charts deploy, on 3,260 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,486
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,160

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,685 by stars

Chart

Latest

Affected images

Radar Score

iotaeclipse-aerios

1.0.2

3 of 4 See more

iota eclipse-aerios 1.0.2

3 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
eclipseaerios/iota-tangle-peerer :latest	99d7ff18d416	golang.org/x/net@v0.30.0 stdlib@go1.22.12	0.36.0 1.23.7
iotaledger/hornet :2.0	01206f1ba89c	golang.org/x/net@v0.14.0 stdlib@go1.21.10	0.36.0 1.23.7
iotaledger/inx-dashboard :1.0	12c669cb8748	golang.org/x/net@v0.14.0 stdlib@go1.21.1	0.36.0 1.23.7

Open the chart page →

13,422

llo-apieclipse-aerios

1.0.0

1 of 1 See more

llo-api eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-api :1.2.0	ab7a04182191	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.36.0 1.23.7

Open the chart page →

931

llo-docker-operatoreclipse-aerios

1.0.0

2 of 2 See more

llo-docker-operator eclipse-aerios 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-docker-operator :1.1.2	d7ec28bfe735	golang.org/x/net@v0.25.0	0.36.0
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

2,187

llo-k8seclipse-aerios

1.1.0

2 of 2 See more

llo-k8s eclipse-aerios 1.1.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-k8s-operator :1.4.1	2b2c0cf26fd2	golang.org/x/net@v0.10.0 stdlib@go1.21.13	0.36.0 1.23.7
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

2,158

mintakaeclipse-aerios

1.0.0

1 of 2 See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	stdlib@go1.14	1.23.7

Open the chart page →

11,482

openfaas2eclipse-aerios

12.0.5

5 of 6 See more

openfaas2 eclipse-aerios 12.0.5

5 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.5	ced93c701875	stdlib@go1.19.10	1.23.7
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.36.0 1.23.7
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.36.0 1.23.7
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	stdlib@go1.22.1	1.23.7
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.36.0 1.23.7

Open the chart page →

6,678

openldap-stack-haeclipse-aerios

4.1.2

1 of 4 See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
eclipseaerios/openldap :2.6.3	0208743f315e	stdlib@go1.18.2	1.23.7

Open the chart page →

7,534

orion-ldeclipse-aerios

1.0.0

1 of 2 See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mongo :7.0.12	ae1cf99fa7bf	stdlib@go1.21.12	1.23.7

Open the chart page →

9,805

chartecr-toke-renew

0.1.5

1 of 1 See more

chart ecr-toke-renew 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
itzmanish/ecr-token-renew :latest	02154d1c05b5	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.6	0.36.0 1.23.7

Open the chart page →

2,818

continuum-proxyedgelesssys

1.5.1

1 of 1 See more

continuum-proxy edgelesssys 1.5.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/continuum/continuum-proxydigest-pinned	24c76f294a80	golang.org/x/net@v0.32.0 stdlib@go1.23.3	0.36.0 1.23.7

Open the chart page →

852

marblerun-coordinatoredgelesssys

0.5.0

1 of 1 See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.7	0.36.0 1.23.7

Open the chart page →

10,995

grafanaedu

5.3.0

1 of 1 See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.36.0 1.23.7

Open the chart page →

3,191

prometheusedu

11.6.0

4 of 6 See more

prometheus edu 11.6.0

4 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.36.0 1.23.7
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.36.0 1.23.7
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.23.7
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.36.0 1.23.7

Open the chart page →

8,484

education-componenteducation-component

1.0.0

1 of 3 See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,327

cert-manager-cpanel-dns-webhookegeback

1.0.6

1 of 1 See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jamesorlakin/cert-manager-cpanel-dns-webhook :v0.3.0	3894dc11b236	golang.org/x/net@v0.29.0 stdlib@go1.22.8	0.36.0 1.23.7

Open the chart page →

1,284

home-assistantegeback

2.0.35

1 of 1 See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.8.2	56690a89c79a	stdlib@go1.23.3	1.23.7

Open the chart page →

2,164

uptime-kumaegeback

2.0.12

1 of 1 See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	stdlib@go1.20.5	1.23.7

Open the chart page →

30,167

egressgatewayegressgateway

0.6.9

2 of 2 See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	golang.org/x/net@v0.33.0	0.36.0
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	golang.org/x/net@v0.33.0	0.36.0

Open the chart page →

3,944

eherkenning-uieherkenning-ui

1.0.0

1 of 3 See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eherkenning-ui-php :latest	deed102b4255	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,510

ejabberdejabberd

0.1.0

1 of 1 See more

ejabberd ejabberd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
indevlab/ejabberd :24.12-k8s	8bc689d093a7	golang.org/x/net@v0.30.0 stdlib@go1.23.6	0.36.0 1.23.7

Open the chart page →

902

mongodb-charteks-3-tier-app-chart

0.1.0

1 of 1 See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.23.7

Open the chart page →

8,046

seafileeleksbai

0.1.1

1 of 3 See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.10	6693911bcc40	stdlib@go1.19	1.23.7

Open the chart page →

25,239

rabbitmqemberstack

1.0.21

1 of 1 See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :management	ffd1b50c522a	stdlib@go1.22.2	1.23.7

Open the chart page →

1,040

Navidromeemmas-charts

0.0.4

1 of 1 See more

Navidrome emmas-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.49.3	11a24da08977	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.36.0 1.23.7

Open the chart page →

2,837

parrot-mirroremmas-charts

1.0.0

1 of 1 See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.36.0 1.23.7

Open the chart page →

2,237

cost-reportempathyco

0.7.8

1 of 1 See more

cost-report empathyco 0.7.8

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
empathyco/cost-report :0.0.12	4f1e26eaacbf	stdlib@go1.15.15	1.23.7

Open the chart page →

1,167

deadman-switchempathyco

0.0.2

1 of 1 See more

deadman-switch empathyco 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
gcr.io/pingcap-public/deadmansswitch :1.0	4861d81aa528	stdlib@go1.16.3	1.23.7

Open the chart page →

1,258

elasticsearch-umbrellaempathyco

0.8.12

1 of 3 See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prometheuscommunity/elasticsearch-exporter :v1.3.0	fe735268fbdc	stdlib@go1.16.9	1.23.7

Open the chart page →

10,605

yace-exporterempathyco

0.1.0

1 of 1 See more

yace-exporter empathyco 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.32.0-alpha	71e24278a049	stdlib@go1.17.3	1.23.7

Open the chart page →

1,641

edge-operatoremqx-operator

0.0.5

1 of 1 See more

edge-operator emqx-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
emqx/edge-operator-controller :0.0.5	53865c1267d9	golang.org/x/net@v0.1.0 stdlib@go1.19.10	0.36.0 1.23.7

Open the chart page →

1,328

kube-ecp-stackemqx-operator

2.5.1

11 of 16 See more

kube-ecp-stack emqx-operator 2.5.1

11 of the 16 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
emqx/ecp-emqx-agent-downloader :2.5.1	a8431baa7950	golang.org/x/net@v0.23.0 stdlib@go1.23.3	0.36.0 1.23.7
emqx/ecp-main :2.5.1	fa876f71e5d6	golang.org/x/net@v0.30.0 stdlib@go1.22.0	0.36.0 1.23.7
emqxecp/otelcol :2.5.0	4c31d9bec846	golang.org/x/net@v0.28.0 stdlib@go1.22.12	0.36.0 1.23.7
library/telegraf :1.27	507a3eecf809	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.36.0 1.23.7
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/jetstack/cert-manager-startupapicheck :v1.16.1	b4a5e42f6dbf	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/jetstack/cert-manager-webhook :v1.16.1	6edf44244b2a	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.1	e2dc5623bcdd	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0 stdlib@go1.23.1	0.36.0 1.23.7

Open the chart page →

22,845

cnpg-monitoringenix

0.3.0

1 of 1 See more

cnpg-monitoring enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

824

kube-packetloss-exporterenix

0.2.1

2 of 2 See more

kube-packetloss-exporter enix 0.2.1

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.31	64614ef8290f	golang.org/x/net@v0.26.0 stdlib@go1.23.4	0.36.0 1.23.7
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

6,154

monitoring-proxyenix

0.3.0

1 of 2 See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.36.0 1.23.7

Open the chart page →

3,946

eoapi-supporteoapi

0.1.7

6 of 7 See more

eoapi-support eoapi 0.1.7

6 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :10.3.3	8640e5038e83	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-config-reloader :v0.67.0	14feefde1b80	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0 stdlib@go1.20.6	0.36.0 1.23.7
quay.io/prometheus/prometheus :v2.47.0	c5dd35038287	golang.org/x/net@v0.12.0 stdlib@go1.21.0	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.36.0 1.23.7
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.11.1	e6a43c83ab16	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

8,648

backendeoc-charts

0.1.0

1 of 1 See more

backend eoc-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/http-echo :latest	fcb75f691c8b	stdlib@go1.21.1	1.23.7

Open the chart page →

550

mariadbeoc-charts

0.3.14

1 of 1 See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mariadb :10.6.15	e22328f4d714	stdlib@go1.16.7	1.23.7

Open the chart page →

5,150

umbrella-appeoc-charts

0.1.0

1 of 3 See more

umbrella-app eoc-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/http-echo :latest	fcb75f691c8b	stdlib@go1.21.1	1.23.7

Open the chart page →

1,078

eolicplantseolicplants

0.1.0

2 of 7 See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.23.7
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	stdlib@go1.15.6	1.23.7

Open the chart page →

27,349

eoloPlanteolo-planner

0.1.0

1 of 7 See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

27,667

eoloplannereoloplanner

0.1.0

3 of 7 See more

eoloplanner eoloplanner 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.23.7
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.23.7

Open the chart page →

32,336

eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelm

0.1.0

1 of 7 See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

27,667

eoloplanner-mcaeoloplanner-mca

0.1.0

2 of 7 See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	stdlib@go1.22.2	1.23.7
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	stdlib@go1.15.6	1.23.7

Open the chart page →

27,314

eoloplannereoloplanner-molynx-gat

0.1.0

3 of 7 See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.23.7
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.23.7

Open the chart page →

28,539

eolo-plannereolo-planner-repo

0.1.0

3 of 7 See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.23.7
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.23.7

Open the chart page →

27,188

eoloplanteoloplant

1.0.0

1 of 7 See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

27,667

eoloplantseoloplants-urjc

0.1.0

3 of 7 See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.23.7
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.23.7

Open the chart page →

27,812

servereoloserver

0.1.0

3 of 7 See more

server eoloserver 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.23.7
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.23.7

Open the chart page →

32,336

download-from-github-repoeosc-lot-1

0.1.0

1 of 2 See more

download-from-github-repo eosc-lot-1 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/eosc-lot-1/curl-jq :8	156beafae7ca	golang.org/x/net@v0.15.0 stdlib@go1.21.10	0.36.0 1.23.7

Open the chart page →

992

postgresql-backupeosc-lot-1

0.4.2

1 of 2 See more

postgresql-backup eosc-lot-1 0.4.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine3.20	468d34fefd63	stdlib@go1.18.2	1.23.7

Open the chart page →

1,467

Container images carrying it

3,260 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	golang.org/x/net@v0.34.0 stdlib@go1.22.10	0.36.0 1.23.7	1
aristidetm/basic-notebook :3.6.5	469dbc951224	golang.org/x/net@v0.7.0 stdlib@go1.22.5	0.36.0 1.23.7	1
artifacthub/db-migrator :v1.19.0	2a746b289fcd	stdlib@go1.22.4	1.23.7	1
artifacthub/hub :v1.19.0	111918d8c399	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7	1
artifacthub/scanner :v1.19.0	323d026e78c3	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.36.0 1.23.7	1
artifacthub/tracker :v1.19.0	6596c8c4d955	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.23.7	1
arunvelsriram/utils :latest	655ad18fd8d6	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7	1
assistiot/authorization_db :latest	c3adbab6a3e7	stdlib@go1.18.2	1.23.7	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.36.0 1.23.7	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	stdlib@go1.18.2	1.23.7	1
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.36.0 1.23.7	1
assistiot/distributed_broker :1.0.0	33e02dad168f	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.36.0 1.23.7	1
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.17.13	0.36.0 1.23.7	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	stdlib@go1.17.10	1.23.7	1
assistiot/identity-manager_db :latest	0d3e6d35f168	stdlib@go1.18.2	1.23.7	1
assistiot/logging_auditing :1.0.0	790dbb198e86	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.17.13	0.36.0 1.23.7	1
assistiot/open_api_backend :1.1.2	30812ba93555	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.6	0.36.0 1.23.7	1
assistiot/smart-orchestrator_helm :latest	9bb46ea14e8e	stdlib@go1.22.1	1.23.7	1
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	golang.org/x/net@v0.30.0	0.36.0	1
atlassian/bamboo :12.1.11	4af4bb6c8d46	stdlib@go1.22.2	1.23.7	1
atlassian/bamboo-agent-base :12.1.11	51c2d7274eef	stdlib@go1.22.2	1.23.7	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7	1
aveshasystems/spiffe-csi-driver :0.2.7	53fc6d009e04	golang.org/x/net@v0.21.0 stdlib@go1.22.2	0.36.0 1.23.7	1
baserow/backend :1.31.1	e0b3c8130b91	stdlib@go1.19.8	1.23.7	1
baserow/baserow :1.30.1	df0c42eb67e8	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.36.0 1.23.7	1
beanbag/reviewboard :latest	6b840f546e1c	stdlib@go1.18.1	1.23.7	1
bedag/goblackhole :0.2.0	447a88598f4c	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.6	0.36.0 1.23.7	1
beopenit/door-cd-operator :v3.0.4	d3999cb8d026	golang.org/x/net@v0.17.0	0.36.0	1
beopenit/door-helm :v3.0.1	b4d9f9bee224	golang.org/x/net@v0.15.0 stdlib@go1.19.13	0.36.0 1.23.7	1
beopenit/onboarding-operator-kubernetes :v3.0.2	75a48144e682	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7	1
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	stdlib@go1.23.5	1.23.7	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.17.6	0.36.0 1.23.7	1
bicarus/mx-notifier :1.1.8	bed688d16762	golang.org/x/net@v0.2.0 stdlib@go1.17.6	0.36.0 1.23.7	1
bicarus/wg-access-server :v0.8.2	06cab48e9334	golang.org/x/net@v0.0.0-20220418201149-a630d4f3e7a2 stdlib@go1.19.3	0.36.0 1.23.7	1
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.23.7	1
binrc/headcni :1.0.10	e199c334b957	stdlib@go1.22.10	1.23.7	1
binwiederhier/ntfy :v2.11.0	4a7d0f0adc6d	golang.org/x/net@v0.25.0 stdlib@go1.22.2	0.36.0 1.23.7	1
binwiederhier/ntfy :v2.6.2	83e2e43d9956	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.36.0 1.23.7	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.36.0 1.23.7	1
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.36.0 1.23.7	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7	1
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	stdlib@go1.20.5	1.23.7	1
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	stdlib@go1.19.6	1.23.7	1
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	stdlib@go1.18.2	1.23.7	1
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.36.0 1.23.7	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	stdlib@go1.18.2	1.23.7	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	stdlib@go1.21.10	1.23.7	1
bitnamilegacy/kubectl :1.30	1249fc292e84	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.36.0 1.23.7	1