CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,691; of 17,787 indexed, latest versions
Container images: 3,269; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,691 of 17,787 indexed charts deploy, on 3,269 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,489
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,167

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,691 by stars

Chart

Latest

Affected images

Radar Score

fpga-cloudinaccel

1.2.2

3 of 3 See more

fpga-cloud inaccel 1.2.2

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
inaccel/cloud-init :latest	a5d3d0af05c1	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.36.0 1.23.7
inaccel/device-selector :latest	44b4f274f40b	golang.org/x/net@v0.21.0 stdlib@go1.21.9	0.36.0 1.23.7
inaccel/kubevirt-hack :latest	bdfd61803a70	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7

Open the chart page →

3,152

fpga-operatorinaccel

2.8.2

3 of 7 See more

fpga-operator inaccel 2.8.2

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.36.0 1.23.7
inaccel/mkrt :latest	187fd448b6f2	stdlib@go1.21.5	1.23.7
inaccel/reef :latest	c967218739f3	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.36.0 1.23.7

Open the chart page →

5,759

infisical-csi-providerinfisical-charts

0.2.3

1 of 1 See more

infisical-csi-provider infisical-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
infisical/infisical-csi-provider :v0.0.9	e3390e677db6	golang.org/x/net@v0.33.0	0.36.0

Open the chart page →

630

chronografinfluxdata

1.2.6

1 of 1 See more

chronograf influxdata 1.2.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/chronograf :1.9.4	96d8a3f65a4f	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.36.0 1.23.7

Open the chart page →

2,198

dtlinfradao

0.0.1

1 of 1 See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ethereumoptimism/data-transport-layer :0.5.56	e07968a0e686	stdlib@go1.19.3	1.23.7

Open the chart page →

4,944

erigoninfradao

0.0.5

1 of 2 See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
testinprod/op-erigon :latest	0a125bd77a2d	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

2,784

l2gethinfradao

0.0.1

1 of 1 See more

l2geth infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ethereumoptimism/l2geth :0.5.31	5577036dc36d	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18	0.36.0 1.23.7

Open the chart page →

2,659

cloudshellinseefrlab

4.3.0

1 of 2 See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
inseefrlab/shelly :cloudshell	31f04ca7436b	golang.org/x/net@v0.13.0 stdlib@go1.15.7	0.36.0 1.23.7

Open the chart page →

10,542

lakefsinseefrlab

0.0.6

1 of 2 See more

lakefs inseefrlab 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
treeverse/lakefs :0.69.0	478f37a6cffc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.8	0.36.0 1.23.7

Open the chart page →

2,645

instemmingserviceinstemmingservice

1.0.0

1 of 3 See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/instemmingservice-php :latest	4ffe222b3e3a	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,510

consulintel

0.8.1

2 of 2 See more

consul intel 0.8.1

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.14.2	e38576edcdfd	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.36.0 1.23.7
hashicorp/consul-k8s-control-plane :1.0.2	538a3436398d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.2	0.36.0 1.23.7

Open the chart page →

5,389

evi-consulintel

3.0.3

2 of 2 See more

evi-consul intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.14.2	e38576edcdfd	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.36.0 1.23.7
hashicorp/consul-k8s-control-plane :1.0.2	538a3436398d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.2	0.36.0 1.23.7

Open the chart page →

5,389

evi-kesintel

3.0.3

1 of 1 See more

evi-kes intel 3.0.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
minio/kes :2023-04-03T16-41-28Z	f93c2d9088df	golang.org/x/net@v0.7.0 stdlib@go1.20.2	0.36.0 1.23.7

Open the chart page →

1,758

evi-miniointel

3.0.3

2 of 2 See more

evi-minio intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

7,457

evi-vaultintel

3.0.3

2 of 2 See more

evi-vault intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.12.1	8de4d5f31b38	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.36.0 1.23.7
hashicorp/vault-k8s :1.1.0	844337076b72	golang.org/x/net@v0.0.0-20221004154528-8021a29435af stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

4,478

intel-gaudi-resource-driverintel

0.3.0

1 of 1 See more

intel-gaudi-resource-driver intel 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
intel/intel-gaudi-resource-driver :v0.3.0	ac758c14c2de	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

559

intel-qat-resource-driverintel

0.1.0

1 of 1 See more

intel-qat-resource-driver intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
intel/intel-qat-resource-driver :v0.1.0	ac7616986a2b	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

602

kesintel

0.8.3

1 of 1 See more

kes intel 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
minio/kes :v0.22.2	55f3aef5803e	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

3,570

multimodal-data-visualizationintel

3.0.0

1 of 2 See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
intel/multimodal-data-visualization :3.0	3426deb77337	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.11	0.36.0 1.23.7

Open the chart page →

11,123

tcs-issuerintel

0.5.0

1 of 2 See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	golang.org/x/net@v0.7.0 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

5,996

vaultintel

0.8.1

2 of 2 See more

vault intel 0.8.1

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.12.1	8de4d5f31b38	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.36.0 1.23.7
hashicorp/vault-k8s :1.1.0	844337076b72	golang.org/x/net@v0.0.0-20221004154528-8021a29435af stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

4,478

gravity-initinvisibl

1.0.9

1 of 1 See more

gravity-init invisibl 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
invisibl/gravity-init :v1.0.9	1a970f84178b	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.12	0.36.0 1.23.7

Open the chart page →

2,006

identity-managerinvisibl

1.0.0

1 of 1 See more

identity-manager invisibl 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
invisibl/identity-manager :1.0.0	1029f4fe20eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.11	0.36.0 1.23.7

Open the chart page →

2,162

identity-manager-demoinvisibl

0.1.1

1 of 1 See more

identity-manager-demo invisibl 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
invisibl/identity-manager-demo :v1.0.0	cf5400cb935a	stdlib@go1.19.2	1.23.7

Open the chart page →

1,006

karpenteriomete

0.19.3

1 of 1 See more

karpenter iomete 0.19.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/karpenter/controller :v0.19.3	f0e5ab60b2df	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

1,548

istio-aws-private-ingress-customizedistio-aws-private-ingress-customized

1.0.0

1 of 1 See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.18.0	757d28c24100	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

5,570

istio-azure-private-ingress-customizedistio-azure-private-ingress-customized

1.0.0

1 of 1 See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.18.0	757d28c24100	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

5,570

istio-ratelimit-operatoristio-ratelimit-operator

2.16.1

1 of 1 See more

istio-ratelimit-operator istio-ratelimit-operator 2.16.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/istio-ratelimit-operator :v2.15.0	692cfc9d6614	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.36.0 1.23.7

Open the chart page →

745

hetzner-dyndnsitsmethemojo

1.4.0

1 of 1 See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/terraform :1.9.7	b77efab1a448	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7

Open the chart page →

1,836

adguard-homejacobcolvin

0.4.0

1 of 2 See more

adguard-home jacobcolvin 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.38	43ec119419a9	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7

Open the chart page →

1,605

inlets-clientjacobcolvin

0.1.2

1 of 1 See more

inlets-client jacobcolvin 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/cubed-it/inlets :4.0.0	f02325f099bc	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.13.15	0.36.0 1.23.7

Open the chart page →

1,753

inlets-serverjacobcolvin

0.1.1

1 of 1 See more

inlets-server jacobcolvin 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/cubed-it/inlets :4.0.0	f02325f099bc	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.13.15	0.36.0 1.23.7

Open the chart page →

1,753

osrs-ge-exporterjacobcolvin

0.4.0

1 of 1 See more

osrs-ge-exporter jacobcolvin 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
macropower/osrs_ge_exporter :v0.3	c77ab5ea955c	stdlib@go1.21.0	1.23.7

Open the chart page →

607

rclonejacobcolvin

1.0.1

1 of 1 See more

rclone jacobcolvin 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rclone/rclone :1.63.0	08e1af3c8814	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

2,143

twitch-predictions-recorderjacobcolvin

0.1.0

1 of 1 See more

twitch-predictions-recorder jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
macropower/twitch_predictions_recorder :v0.2	1e9c4fb89787	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.36.0 1.23.7

Open the chart page →

2,669

wakatime-exporterjacobcolvin

0.1.1

1 of 1 See more

wakatime-exporter jacobcolvin 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
macropower/wakatime-exporter :0.1.0	dbb05debb785	stdlib@go1.14.6	1.23.7

Open the chart page →

1,313

wireguard-operatorjacobcolvin

0.2.0

1 of 2 See more

wireguard-operator jacobcolvin 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/jodevsa/wireguard-operator/manager :v2.0.28	39412bdd403b	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

840

koptimizejaconi

0.5.4

2 of 2 See more

koptimize jaconi 0.5.4

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.27.3	21b24e6bf801	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.20.4	0.36.0 1.23.7
ghcr.io/jaconi-io/koptimize :1.2.5	aca1bbd609b6	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.36.0 1.23.7

Open the chart page →

5,716

mini-infrajaeki

0.1.0

1 of 4 See more

mini-infra jaeki 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.13.10	1b33357b3595	golang.org/x/net@v0.8.0 stdlib@go1.19.5	0.36.0 1.23.7

Open the chart page →

1,746

deconzjanip81-helm-charts

0.1.1

1 of 1 See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.29.2	062de2362641	stdlib@go1.19.8	1.23.7

Open the chart page →

10,816

ghostjanip81-helm-charts

0.1.2

1 of 1 See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/ghost :6.37.0	1ef2e532ca4d	stdlib@go1.20.12	1.23.7

Open the chart page →

3,448

n8njanip81-helm-charts

0.1.4

1 of 1 See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
n8nio/n8n :1.86.0	8b39ed5a2de9	stdlib@go1.24.0	1.23.7

Open the chart page →

5,826

janus-shieldjanus-shield

1.0.0

1 of 2 See more

janus-shield janus-shield 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/cilium/tetragon :v1.1.0	96fac2482898	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

2,377

javascriptweeklyjavascriptweekly

2.1.0

1 of 1 See more

javascriptweekly javascriptweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/javascriptweekly :v2.1.0	86424bd0b2a4	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.36.0 1.23.7

Open the chart page →

1,237

sql-exporterjdstone

0.2.1

1 of 1 See more

sql-exporter jdstone 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
burningalchemist/sql_exporter :0.16.0	b8e4757c7def	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.36.0 1.23.7

Open the chart page →

885

jx-app-athensjenkins-x

0.0.18

1 of 1 See more

jx-app-athens jenkins-x 0.0.18

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
gomods/athens :v0.8.1	d714c7ff0231	golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a stdlib@go1.13.4	0.36.0 1.23.7

Open the chart page →

4,225

jx-app-datadogjenkins-x

0.0.10

1 of 2 See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datadog/agent :6	aad9994de6a7	golang.org/x/net@v0.33.0 stdlib@go1.21.11	0.36.0 1.23.7

Open the chart page →

4,038

jx-app-flaggerjenkins-x

0.0.5

2 of 2 See more

jx-app-flagger jenkins-x 0.0.5

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :6.5.1	befcd84da2c1	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.36.0 1.23.7
weaveworks/flagger :1.0.0-rc.5	174307de1b36	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.2	0.36.0 1.23.7

Open the chart page →

6,028

knative-servingjenkins-x

0.19.12

4 of 4 See more

knative-serving jenkins-x 0.19.12

4 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	1e3db4f2eeed	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.36.0 1.23.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	db6ceff2aab4	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.36.0 1.23.7
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	b2cd45b8a8a4	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.36.0 1.23.7
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	d27b4495ccc3	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.10	0.36.0 1.23.7

Open the chart page →

9,699

ingress-nginxjfrog

4.5.2

2 of 2 See more

ingress-nginx jfrog 4.5.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.6.4	15be4666c530	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.36.0 1.23.7

Open the chart page →

3,798

Container images carrying it

3,269 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.36.0 1.23.7	5
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.36.0 1.23.7	4
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.36.0 1.23.7	4
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.36.0 1.23.7	4
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.36.0 1.23.7	4
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.36.0 1.23.7	4
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.36.0 1.23.7	4
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.36.0 1.23.7	4
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	4
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.23.7	4
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	4
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	4
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.23.7	4
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.23.7	4
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.23.7	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	stdlib@go1.15.6	1.23.7	4
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/net@v0.18.0 stdlib@go1.21.7	0.36.0 1.23.7	4
ghcr.io/curium-rocks/docker-kubectl :main	d04c003d7593	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7	4
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.36.0 1.23.7	4
ghcr.io/synapsecns/sanguine/omnirpc :latest	5217e3d1fc70	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.36.0 1.23.7	4
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7	4
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7	4
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7	4
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7	4
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	4
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.36.0 1.23.7	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.36.0 1.23.7	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.36.0 1.23.7	4
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7	4
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7	4
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.36.0 1.23.7	4
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	4
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.36.0 1.23.7	4
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.36.0 1.23.7	3
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127 stdlib@go1.14.12	0.36.0 1.23.7	3
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.36.0 1.23.7	3
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7	3
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/net@v0.0.0-20220526153639-5463443f8c37 stdlib@go1.19.2	0.36.0 1.23.7	3
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.36.0 1.23.7	3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.36.0 1.23.7	3
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.36.0 1.23.7	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.17.3	0.36.0 1.23.7	3
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.36.0 1.23.7	3
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.36.0 1.23.7	3
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.36.0 1.23.7	3
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.36.0 1.23.7	3
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.36.0 1.23.7	3
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7	3
hashicorp/http-echo :1.0.0 :latest	fcb75f691c8b	stdlib@go1.21.1	1.23.7	3