CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,662; of 17,787 indexed, latest versions
Container images: 3,226; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,662 of 17,787 indexed charts deploy, on 3,226 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+200 more	0.36.0	2,456
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,127

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,662 by stars

Chart

Latest

Affected images

Radar Score

ghostcloudpirates-ghost

0.20.22

1 of 3 See more

ghost cloudpirates-ghost 0.20.22

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.23.7

Open the chart page →

7,146

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/net@v0.7.0 stdlib@go1.18	0.36.0 1.23.7

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

12 of 21 See more

coder-observability coder-observability 0.7.3

12 of the 21 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/agent :v0.40.3	f6cbec9409be	golang.org/x/net@v0.20.0 stdlib@go1.22.1	0.36.0 1.23.7
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.36.0 1.23.7
grafana/loki-canary :3.1.0	39baf6d67f85	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.36.0 1.23.7
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.23.7
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.6	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18.6	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

24,700

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

17,404

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.36.0 1.23.7

Open the chart page →

3,080

cosmocosmo-platform

0.20.0

5 of 10 See more

cosmo cosmo-platform 0.20.0

5 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	stdlib@go1.21.10	1.23.7
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	golang.org/x/net@v0.26.0 stdlib@go1.23.6	0.36.0 1.23.7
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	stdlib@go1.20.7	1.23.7

Open the chart page →

28,839

dapr-dashboarddapr

0.15.0

1 of 1 See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
daprio/dashboard :0.15.0	4be696707bd1	golang.org/x/net@v0.25.0 stdlib@go1.21.13	0.36.0 1.23.7

Open the chart page →

1,301

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/net@v0.17.0 stdlib@go1.21.10	0.36.0 1.23.7

Open the chart page →

3,451

kube-benchdeliveryhero

0.1.17

1 of 1 See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7

Open the chart page →

1,623

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.36.0 1.23.7

Open the chart page →

2,537

prometheus-locust-exporterdeliveryhero

1.2.3

1 of 1 See more

prometheus-locust-exporter deliveryhero 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.23.7

Open the chart page →

1,276

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	stdlib@go1.23.1	1.23.7

Open the chart page →

4,147

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.36.0 1.23.7

Open the chart page →

2,271

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

1 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7

Open the chart page →

14,546

openshift-secured-redisInsighteximiait

0.9.2

1 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7

Open the chart page →

13,874

keydbfinkinfridom

0.48.3

1 of 1 See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.23.7

Open the chart page →

5,264

frp-operatorfrp-operator

1.9.0

1 of 1 See more

frp-operator frp-operator 1.9.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/zufardhiyaulhaq/frp-operator :v0.11.0	cd25ee354df2	golang.org/x/net@v0.23.0	0.36.0

Open the chart page →

528

ascii-moviegabe565

0.16.4

1 of 1 See more

ascii-movie gabe565 0.16.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/ascii-movie :1.9.6	27f85bb98da3	stdlib@go1.24.0	1.23.7

Open the chart page →

986

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.36.0 1.23.7

Open the chart page →

3,030

error-pagesgeek-cookbook

1.2.2

1 of 1 See more

error-pages geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/tarampampam/error-pages :2.6.0	13e73da04ee4	stdlib@go1.17.6	1.23.7

Open the chart page →

1,110

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.10	0.36.0 1.23.7

Open the chart page →

7,579

multusgeek-cookbook

3.5.2

2 of 3 See more

multus geek-cookbook 3.5.2

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/cni-plugins :v0.9.1	241592d93640	stdlib@go1.15.8	1.23.7
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

4,906

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	stdlib@go1.15	1.23.7

Open the chart page →

13,950

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	stdlib@go1.18.4	1.23.7

Open the chart page →

9,627

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.17.8	0.36.0 1.23.7

Open the chart page →

10,154

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.16.4	0.36.0 1.23.7

Open the chart page →

2,330

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.36.0 1.23.7

Open the chart page →

3,371

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.17	0.36.0 1.23.7

Open the chart page →

2,610

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	stdlib@go1.16.7	1.23.7

Open the chart page →

10,628

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.36.0 1.23.7

Open the chart page →

2,234

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	stdlib@go1.20.4	1.23.7

Open the chart page →

11,839

nzbhydra2halkeye

2.30.1

1 of 2 See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	stdlib@go1.14	1.23.7

Open the chart page →

6,711

unifi-pollerhalkeye

0.1.2

1 of 1 See more

unifi-poller halkeye 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
golift/unifi-poller :2.0.0	cafac968b540	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.13.7	0.36.0 1.23.7

Open the chart page →

1,654

monitoring-stackhaukitech

0.1.11

3 of 3 See more

monitoring-stack haukitech 0.1.11

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.36.0 1.23.7

Open the chart page →

2,164

prometheus-operatorhaukitech

0.1.4

1 of 1 See more

prometheus-operator haukitech 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.77.1	dde69a8b6f4b	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.36.0 1.23.7

Open the chart page →

561

headscaleheadscale

1.0.19

1 of 3 See more

headscale headscale 1.0.19

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.36.2	44ef4942e171	stdlib@go1.24.0	1.23.7

Open the chart page →

3,383

health-exporterhealth-exporter

0.3.4

1 of 1 See more

health-exporter health-exporter 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.2	0.36.0 1.23.7

Open the chart page →

1,558

home-assistanthome-assistant

0.5.10

1 of 3 See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	stdlib@go1.23.3	1.23.7

Open the chart page →

2,331

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.19.5	0.36.0 1.23.7

Open the chart page →

2,622

coreinstill-ai

0.1.75

5 of 15 See more

core instill-ai 0.1.75

5 of the 15 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7
instill/artifact-backend :b28766a	c4a393e601ed	golang.org/x/net@v0.33.0	0.36.0
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd stdlib@go1.18.3	0.36.0 1.23.7
library/registry :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.23.7
temporalio/admin-tools :1.28	cfde8170c92f	golang.org/x/net@v0.35.0	0.36.0

Open the chart page →

30,816

intel-gpu-resource-driverintel

0.7.0

1 of 1 See more

intel-gpu-resource-driver intel 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
intel/intel-gpu-resource-driver :v0.7.0	e158711e32ce	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

559

jenkins-operatorjenkins

0.8.1

1 of 1 See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.36.0 1.23.7

Open the chart page →

2,211

calibre-webk8s-home-lab-repo

9.1.1

1 of 1 See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	stdlib@go1.17.8	1.23.7

Open the chart page →

4,477

home-assistantk8s-home-lab-repo

16.3.1

1 of 1 See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/home-assistant :2026.3.1	067e54e2e107	stdlib@go1.23.3	1.23.7

Open the chart page →

4,634

wireguardk8s-home-lab-repo

1.6.0

1 of 1 See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	stdlib@go1.18.5	1.23.7

Open the chart page →

7,337

k8s-sftp-gcsk8s-sftp-gcs

0.1.4

1 of 1 See more

k8s-sftp-gcs k8s-sftp-gcs 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
danuk/k8s-sftp-gcs :latest	dd0e6585c44f	stdlib@go1.18.4	1.23.7

Open the chart page →

1,606

k8statusk8status

0.17.0

1 of 1 See more

k8status k8status 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/k8status :0.17.0	93298e03089e	golang.org/x/net@v0.26.0	0.36.0

Open the chart page →

712

kraken-cikraken-ci

1.7.36

2 of 10 See more

kraken-ci kraken-ci 1.7.36

2 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.23.7
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.36.0 1.23.7

Open the chart page →

7,273

kubebadgeskubebadges

0.1.3

1 of 2 See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
neosu/kubebadges :v0.0.5	256530d8e5c6	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

1,798

Container images carrying it

3,226 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	golang.org/x/net@v0.0.0-20220614195744-fb05da6f9022 stdlib@go1.17	0.36.0 1.23.7	1
bitnamilegacy/thanos :0.37.1-debian-12-r0	5bf82b98c82c	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.36.0 1.23.7	1
bitnamilegacy/zookeeper :3.7.2-debian-11-r5	cbf54314c401	stdlib@go1.21.5	1.23.7	1
bitnamilegacy/zookeeper :3.8.1-debian-11-r6	dba59d740e13	stdlib@go1.18.2	1.23.7	1
bitnami/mariadb :11.7.2	16a7dae804fb	stdlib@go1.22.12	1.23.7	1
bitnami/mongodb :8.0.8	b3bd5b6be9a0	golang.org/x/net@v0.33.0	0.36.0	1
bitnami/sealed-secrets-controller :v0.18.5	0516f987fae2	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18.6	0.36.0 1.23.7	1
bitpoke/stack-default-backend :latest	c5eed1ddf692	stdlib@go1.16.6	1.23.7	1
bitpoke/wordpress-operator :v0.12.4	21284d1df473	golang.org/x/net@v0.8.0 stdlib@go1.17.13	0.36.0 1.23.7	1
bitpoke/wordpress-operator :v0.12.2	7fb3aad37b5f	golang.org/x/net@v0.8.0 stdlib@go1.17.13	0.36.0 1.23.7	1
blackducksoftware/bdba-pgupgrader :2026.6.3	5c97f3a3f8b7	stdlib@go1.18.2	1.23.7	1
blipai/deckard :0.0.28	737d5d19a312	golang.org/x/net@v0.10.0 stdlib@go1.18.10	0.36.0 1.23.7	1
bloomberg/goldpinger :3.10.0	8520120f5598	golang.org/x/net@v0.17.0 stdlib@go1.21.9	0.36.0 1.23.7	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	golang.org/x/net@v0.29.0 stdlib@go1.22.11	0.36.0 1.23.7	1
breton/cool :dev	41b1bb483aa2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.36.0 1.23.7	1
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.15.12	0.36.0 1.23.7	1
btcpayserver/tor :0.4.8.10	e9585b68dc6b	stdlib@go1.16.5	1.23.7	1
buddyspencer/gickup :0.10.38	6b656f19b0c1	golang.org/x/net@v0.21.0 stdlib@go1.22.5	0.36.0 1.23.7	1
buddyspencer/gickup :0.10.30	9e7dbf923c12	golang.org/x/net@v0.24.0 stdlib@go1.21.9	0.36.0 1.23.7	1
buildkite/agent :3.25.0	aec38cfaae0e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.7	0.36.0 1.23.7	1
bulich/domain-exporter :latest	6d0b780f7c7b	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.36.0 1.23.7	1
burganbank/vault-initializer :v1	9259c34e4037	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.36.0 1.23.7	1
burningalchemist/sql_exporter :0.16.0	b8e4757c7def	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.36.0 1.23.7	1
bytesafe/bytesafe-ce :v1.0.4	ee287384c005	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7	1
caarlos0/domain_exporter :v1.23.0	d11dec138900	golang.org/x/net@v0.20.0 stdlib@go1.21.6	0.36.0 1.23.7	1
calico/cni :v3.28.0	cef0c907b8f4	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7	1
calico/cni :v3.28.1	e486870cfde8	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7	1
calico/kube-controllers :v3.28.0	8f04e4772a2b	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.36.0 1.23.7	1
calico/kube-controllers :v3.28.1	eadb3a25109a	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7	1
calico/node :v3.28.0	385bf6391fea	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.36.0 1.23.7	1
calico/node :v3.28.1	d8c644a8a3ee	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7	1
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d stdlib@go1.16.5	0.36.0 1.23.7	1
captnbp/freebox-exporter :1.0.0-r0	1600c5a253e0	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7	1
caroga/commentoplusplus :v1.8.7	f3233882b3bd	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.15	0.36.0 1.23.7	1
casbin/casdoor :v1.224.0	66f836ef778b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.5	0.36.0 1.23.7	1
casbin/casdoor :v1.753.0	770ad9ec3190	golang.org/x/net@v0.21.0 stdlib@go1.20.12	0.36.0 1.23.7	1
castopod/castopod :1.12.10	1fd37280cbb2	stdlib@go1.21.13	1.23.7	1
cbeneke/hcloud-fip-controller :v0.4.1	dc658078d7ba	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.15.3	0.36.0 1.23.7	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.3	0.36.0 1.23.7	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.4	0.36.0 1.23.7	1
cgtysylr/cluster-octopus :1.0.0	aec0f8a38a77	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.36.0 1.23.7	1
chaerr/kridge :demo-operator-v0.1.2	66833deec017	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.36.0 1.23.7	1
chainflag/eth-faucet :latest	ac642796bcb6	stdlib@go1.17.13	1.23.7	1
chainsafe/lodestar :latest	5593f6e97912	stdlib@go1.23.1	1.23.7	1
chainsafe/lodestar :v1.27.0	7b9fe4aa8073	stdlib@go1.20.12	1.23.7	1
chandanteekinavar/findery-market-payment-service :1.0	c96f759b6ce4	golang.org/x/net@v0.25.0 stdlib@go1.19.13	0.36.0 1.23.7	1
chaosnative/cle-auth-server :2.7.0	72ee352bc333	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.15	0.36.0 1.23.7	1
chaosnative/cle-license-module :2.7.0	62cf6adc355e	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.15	0.36.0 1.23.7	1
chaosnative/cle-server :2.7.0	e7bcff4a20c0	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.16.15	0.36.0 1.23.7	1
charmcli/soft-serve :v0.4.0	39523c1a6ba8	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.5	0.36.0 1.23.7	1