CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,692; of 17,790 indexed, latest versions
Container images: 3,270; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,692 of 17,790 indexed charts deploy, on 3,270 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,490
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,169

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,692 by stars

Chart

Latest

Affected images

Radar Score

opscruiseopenshift

0.35.100

3 of 11 See more

opscruise openshift 0.35.100

3 of the 11 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.36.0 1.23.7
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.36.0 1.23.7
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

8,224

osm-edgeopenshift

1.2.1-ubi8

4 of 7 See more

osm-edge openshift 1.2.1-ubi8

4 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.36.0 1.23.7
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.36.0 1.23.7
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.36.0 1.23.7
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.36.0 1.23.7

Open the chart page →

19,471

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/net@v0.11.0 stdlib@go1.20.8	0.36.0 1.23.7

Open the chart page →

8,643

openshift-integration-operatoropenshift-integration-operator

0.8.2

1 of 2 See more

openshift-integration-operator openshift-integration-operator 0.8.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/integration-console-plugin :v0.8.2	270ed23a9afd	stdlib@go1.22.9	1.23.7

Open the chart page →

2,063

openvscode-serveropenvscode-server-helm

2.7.37

1 of 2 See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.36.0 1.23.7

Open the chart page →

4,298

open-webconceptopen-webconcept

0.1.0

1 of 3 See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.23.7

Open the chart page →

3,423

gitlab-proxyopslevel

0.0.8

1 of 1 See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/caddy :2.6	60fb54d36b4b	golang.org/x/net@v0.7.0 stdlib@go1.20	0.36.0 1.23.7

Open the chart page →

1,879

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	golang.org/x/net@v0.28.0 stdlib@go1.22.6	0.36.0 1.23.7

Open the chart page →

1,739

opslevelopslevel

2025.1.22

2 of 10 See more

opslevel opslevel 2025.1.22

2 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.36.0 1.23.7
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/net@v0.23.0 stdlib@go1.23.2	0.36.0 1.23.7

Open the chart page →

5,658

agentoptimizely-agent

1.4.0

1 of 1 See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.36.0 1.23.7

Open the chart page →

1,220

orderregistratiecomponentorderregistratiecomponent

1.0.0

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,501

prometheusosc

0.26.2

2 of 12 See more

prometheus osc 0.26.2

2 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.36.0 1.23.7

Open the chart page →

3,381

grrosdfir-infrastructure

1.0.3

2 of 5 See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.23.7
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

11,021

osdfir-infrastructureosdfir-infrastructure

2.15.0

8 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

8 of the 40 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	stdlib@go1.21.5	1.23.7
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.23.7
library/postgres :17.5-alpine	6567bca8d7bc	stdlib@go1.18.2	1.23.7
library/postgres :17.2-alpine	7e5df973a748	stdlib@go1.18.2	1.23.7
library/redis :7.4.2-alpine	02419de7eddf	stdlib@go1.18.2	1.23.7
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.36.0 1.23.7
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

72,547

yetiosdfir-infrastructure

1.0.5

1 of 4 See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	stdlib@go1.21.5	1.23.7

Open the chart page →

6,679

osm-edgeosm-edge

1.3.9

4 of 7 See more

osm-edge osm-edge 1.3.9

4 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
flomesh/osm-edge-bootstrap :1.3.9	b188e128cbfe	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.36.0 1.23.7
flomesh/osm-edge-controller :1.3.9	add7a4da4622	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.36.0 1.23.7
flomesh/osm-edge-injector :1.3.9	47287e3ad324	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.36.0 1.23.7
flomesh/osm-edge-preinstall :1.3.9	bd224d55ed0f	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.36.0 1.23.7

Open the chart page →

5,610

logging-operatorot-container-kit

0.4.0

1 of 1 See more

logging-operator ot-container-kit 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/opstree/logging-operator :v0.4.0	fd8bb57ef3cf	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.10	0.36.0 1.23.7

Open the chart page →

1,802

lokiot-container-kit

1.0.1

3 of 5 See more

loki ot-container-kit 1.0.1

3 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.36.0 1.23.7
grafana/promtail :3.0.0	d3de3da9431c	golang.org/x/net@v0.22.0 stdlib@go1.21.9	0.36.0 1.23.7
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

4,844

mongodb-operatorot-container-kit

0.3.1

1 of 1 See more

mongodb-operator ot-container-kit 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/opstree/mongodb-operator :v0.3.0	879b9bead838	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.8	0.36.0 1.23.7

Open the chart page →

1,873

ot-karpenterot-container-kit

0.3.0

1 of 1 See more

ot-karpenter ot-container-kit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/karpenter/controller :1.1.1	fe383abf1dbc	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.36.0 1.23.7

Open the chart page →

495

pgaot-container-kit

1.0.3

4 of 6 See more

pga ot-container-kit 1.0.3

4 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.0	079600c9517b	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-operator :v0.75.1	a7cc63108511	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

5,143

vmot-container-kit

0.0.3

4 of 7 See more

vm ot-container-kit 0.0.3

4 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7
victoriametrics/operator :v0.47.2	71be93cfafb6	golang.org/x/net@v0.26.0 stdlib@go1.23.0	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

5,418

kubernetes-taggeroxyno-zeta

1.1.2

1 of 1 See more

kubernetes-tagger oxyno-zeta 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
oxynozeta/kubernetes-tagger :1.3.0	a153c386f5af	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17	0.36.0 1.23.7

Open the chart page →

1,826

arpap2p-avs

0.1.3

1 of 2 See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/arpa-network/node-client :latest	657a2c9f6e6d	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

1,987

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/automata-network/multi-prover-avs/operator :v0.6.0	752f1aa02438	golang.org/x/net@v0.26.0 stdlib@go1.22.1	0.36.0 1.23.7

Open the chart page →

3,670

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

3,327

eigendap2p-avs

0.1.1

2 of 3 See more

eigenda p2p-avs 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	golang.org/x/net@v0.24.0 stdlib@go1.21.1	0.36.0 1.23.7
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	golang.org/x/net@v0.24.0 stdlib@go1.21.1	0.36.0 1.23.7

Open the chart page →

2,334

predicatep2p-avs

0.1.4

1 of 1 See more

predicate p2p-avs 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/predicatelabs/operator :v1.0.5	b62113fe1b27	golang.org/x/net@v0.33.0 stdlib@go1.23.5	0.36.0 1.23.7

Open the chart page →

892

p4p4

0.1.0

1 of 7 See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

27,702

pacmanpacman-mh

0.1.28

1 of 2 See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mongo :7.0.28-jammy	88785f6f665a	stdlib@go1.24.0	1.23.7

Open the chart page →

3,604

Parpar

0.1.0

1 of 1 See more

Par par 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/jmcgrath207/par :v0.1.0	9977511cb142	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.36.0 1.23.7

Open the chart page →

889

parcaparca

4.19.0

2 of 2 See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	golang.org/x/net@v0.17.0 stdlib@go1.21.1	0.36.0 1.23.7
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	golang.org/x/net@v0.19.0 stdlib@go1.21.4	0.36.0 1.23.7

Open the chart page →

3,364

parcaparca-chart

0.1.0

1 of 1 See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	golang.org/x/net@v0.17.0 stdlib@go1.21.1	0.36.0 1.23.7

Open the chart page →

1,985

istio-operatorparticuleio

1.7.0

1 of 1 See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
gcr.io/istio-testing/operator :latest	8d4576f7b98f	golang.org/x/net@v0.27.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

4,172

scaleway-webhookparticuleio

0.0.1

1 of 1 See more

scaleway-webhook particuleio 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.36.0 1.23.7

Open the chart page →

2,353

hammondpascaliske

2.0.0

1 of 2 See more

hammond pascaliske 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.36.0 1.23.7

Open the chart page →

1,807

home-assistantpascaliske

0.1.1

1 of 1 See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	stdlib@go1.23.3	1.23.7

Open the chart page →

4,805

plausible-exporterpascaliske

1.0.0

1 of 1 See more

plausible-exporter pascaliske 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/riesinger/plausible-exporter :1.1.0	61112cda1be5	stdlib@go1.19.7	1.23.7

Open the chart page →

700

vikunjapascaliske

5.1.0

1 of 1 See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

1,342

minecraftpaul1365972-mc

3.0.1

1 of 1 See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
itzg/minecraft-server :latest	8672e335dbef	stdlib@go1.22.2	1.23.7

Open the chart page →

4,303

pax-prometheuspaxtecnologia

0.7.1

1 of 8 See more

pax-prometheus paxtecnologia 0.7.1

1 of the 8 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

1,761

archive-analysispcp-helm-charts

1.0.1

1 of 1 See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/performancecopilot/archive-analysis :latest	8de11e2363fc	golang.org/x/net@v0.19.0	0.36.0

Open the chart page →

1,333

permission-managerpermission-manager

1.0.0-seal

1 of 1 See more

permission-manager permission-manager 1.0.0-seal

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.8	0.36.0 1.23.7

Open the chart page →

2,266

pet-battle-infrapetbattle

1.0.32

1 of 2 See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.16.12	0.36.0 1.23.7

Open the chart page →

15,474

pet-battle-tournamentpetbattle

1.0.40

1 of 3 See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.16.12	0.36.0 1.23.7

Open the chart page →

15,474

mariadbpetersandor

15.2.5

1 of 1 See more

mariadb petersandor 15.2.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnami/mariadb :11.7.2	16a7dae804fb	stdlib@go1.22.12	1.23.7

Open the chart page →

2,905

mongodbpetersandor

14.1.8

1 of 1 See more

mongodb petersandor 14.1.8

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnami/mongodb :8.0.8	b3bd5b6be9a0	golang.org/x/net@v0.33.0	0.36.0

Open the chart page →

4,151

whoamiphilippwaller

1.0.3

1 of 1 See more

whoami philippwaller 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.8.0	8d0f943abdbf	stdlib@go1.17.7	1.23.7

Open the chart page →

1,007

codimdphntom

0.1.12

1 of 3 See more

6,524

container-agentphntom

100.0.1

1 of 1 See more

container-agent phntom 100.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
circleci/container-agent :3	4d8d0ae5efc3	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.36.0 1.23.7

Open the chart page →

1,974

Container images carrying it

3,270 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.36.0 1.23.7	5
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.36.0 1.23.7	4
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.36.0 1.23.7	4
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.36.0 1.23.7	4
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.36.0 1.23.7	4
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.36.0 1.23.7	4
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.36.0 1.23.7	4
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.36.0 1.23.7	4
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	4
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.23.7	4
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	4
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	4
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.23.7	4
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.23.7	4
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.23.7	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	stdlib@go1.15.6	1.23.7	4
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/net@v0.18.0 stdlib@go1.21.7	0.36.0 1.23.7	4
ghcr.io/curium-rocks/docker-kubectl :main	d04c003d7593	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7	4
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0 stdlib@go1.18.10	0.36.0 1.23.7	4
ghcr.io/synapsecns/sanguine/omnirpc :latest	5217e3d1fc70	golang.org/x/net@v0.35.0 stdlib@go1.22.4	0.36.0 1.23.7	4
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7	4
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7	4
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7	4
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7	4
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	4
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.36.0 1.23.7	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.36.0 1.23.7	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.36.0 1.23.7	4
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7	4
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7	4
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.36.0 1.23.7	4
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	4
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.36.0 1.23.7	4
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.36.0 1.23.7	3
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127 stdlib@go1.14.12	0.36.0 1.23.7	3
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.36.0 1.23.7	3
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7	3
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/net@v0.0.0-20220526153639-5463443f8c37 stdlib@go1.19.2	0.36.0 1.23.7	3
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.36.0 1.23.7	3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11 stdlib@go1.15	0.36.0 1.23.7	3
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.36.0 1.23.7	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.17.3	0.36.0 1.23.7	3
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.36.0 1.23.7	3
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.36.0 1.23.7	3
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.36.0 1.23.7	3
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.36.0 1.23.7	3
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.36.0 1.23.7	3
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7	3
hashicorp/http-echo :1.0.0 :latest	fcb75f691c8b	stdlib@go1.21.1	1.23.7	3