CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,691; of 17,787 indexed, latest versions
Container images: 3,269; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,691 of 17,787 indexed charts deploy, on 3,269 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,489
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,167

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,691 by stars

Chart

Latest

Affected images

Radar Score

argo-cdargo

10.9.1

1 of 3 See more

argo-cd argo 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.24.0	1.23.7

Open the chart page →

2,989

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

2,745

jupyterhubjupyterhub

4.4.2

1 of 7 See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	golang.org/x/net@v0.23.0	0.36.0

Open the chart page →

7,909

argo-cdargo-cd-oci

10.9.1

1 of 3 See more

argo-cd argo-cd-oci 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.24.0	1.23.7

Open the chart page →

2,989

mimir-distributedgrafana

6.2.0

2 of 6 See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

4,519

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	stdlib@go1.20.5	1.23.7

Open the chart page →

30,167

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	stdlib@go1.21.8	1.23.7

Open the chart page →

11,372

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.36.0 1.23.7

Open the chart page →

2,315

rook-cephrook

1.20.7

1 of 2 See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rook/ceph :v1.20.7	2f970c425617	stdlib@go1.22.10	1.23.7

Open the chart page →

1,447

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	golang.org/x/net@v0.2.0 stdlib@go1.19.5	0.36.0 1.23.7

Open the chart page →

1,445

openebsopenebs

4.6.1

12 of 35 See more

openebs openebs 4.6.1

12 of the 35 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.36.0 1.23.7
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.23.7
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.23.7
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.23.7
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.36.0 1.23.7

Open the chart page →

24,009

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

930

open-webuiopen-webui

16.5.0

1 of 4 See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.23.7

Open the chart page →

1,288

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	golang.org/x/net@v0.12.0 stdlib@go1.20.7	0.36.0 1.23.7
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.1	0.36.0 1.23.7

Open the chart page →

2,883

vpafairwinds-stable

5.0.1

1 of 4 See more

vpa fairwinds-stable 5.0.1

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.36.0 1.23.7

Open the chart page →

1,233

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.18.8	0.36.0 1.23.7

Open the chart page →

2,059

dagsterdagster

1.13.22

1 of 5 See more

dagster dagster 1.13.22

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.23.7

Open the chart page →

3,459

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

2,483

openfaasopenfaas

15.0.13

2 of 6 See more

openfaas openfaas 15.0.13

2 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.23.7
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.23.7

Open the chart page →

3,544

jaeger-operatorjaegertracing

2.57.0

1 of 1 See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	golang.org/x/net@v0.29.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

566

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	stdlib@go1.18.2	1.23.7

Open the chart page →

5,557

vault-secrets-operatorhashicorp

1.5.1

1 of 2 See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/net@v0.28.0 stdlib@go1.23.0	0.36.0 1.23.7

Open the chart page →

1,040

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7

Open the chart page →

1,367

rocketchatrocketchat-server

7.0.2

2 of 12 See more

rocketchat rocketchat-server 7.0.2

2 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.36.0 1.23.7
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.36.0 1.23.7

Open the chart page →

12,283

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

2,102

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.36.0 1.23.7
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.36.0 1.23.7

Open the chart page →

2,943

chaos-meshchaos-mesh

2.8.4

1 of 4 See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.36.0

Open the chart page →

6,362

atlantisatlantis

6.15.1

1 of 1 See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/net@v0.23.0 stdlib@go1.22.1	0.36.0 1.23.7

Open the chart page →

1,892

rabbitmqcloudpirates-rabbitmq

0.21.26

1 of 2 See more

rabbitmq cloudpirates-rabbitmq 0.21.26

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5-management	57bddb6fbc34	stdlib@go1.22.2	1.23.7

Open the chart page →

849

grafana-agentgrafana

0.44.2

2 of 2 See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/net@v0.33.0 stdlib@go1.22.11	0.36.0 1.23.7
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.23.7

Open the chart page →

3,514

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

2,453

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.2	0.36.0 1.23.7
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/net@v0.10.0 stdlib@go1.18.3	0.36.0 1.23.7
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/net@v0.0.0-20220706163947-c90051bbdb60 stdlib@go1.16.15	0.36.0 1.23.7
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.36.0 1.23.7

Open the chart page →

32,353

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.36.0 1.23.7

Open the chart page →

10,648

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	stdlib@go1.23.3	1.23.7

Open the chart page →

2,221

signozsignoz

0.141.1

3 of 5 See more

signoz signoz 0.141.1

3 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.36.0 1.23.7
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.36.0 1.23.7
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.23.7

Open the chart page →

7,582

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.36.0 1.23.7

Open the chart page →

716

bitcoin-corehirosystems

2.1.7

1 of 1 See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
dobtc/bitcoin :25.1	a870f7cb1105	stdlib@go1.19.8	1.23.7

Open the chart page →

4,808

nacosygqygq2

2.1.10

2 of 4 See more

nacos ygqygq2 2.1.10

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
nacos/nacos-peer-finder-plugin :latest	a9c769301fa6	stdlib@go1.13.5	1.23.7
ygqygq2/mysql-exec-sql :latest	54f30def1558	stdlib@go1.18.2	1.23.7

Open the chart page →

4,984

difydouban

0.10.0

3 of 6 See more

dify douban 0.10.0

3 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	stdlib@go1.21.9	1.23.7
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	stdlib@go1.23.3	1.23.7
langgenius/dify-web :1.10.1-fix.1	c306ac577912	stdlib@go1.23.5	1.23.7

Open the chart page →

19,497

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7

Open the chart page →

2,138

pulsarapache

4.7.0

2 of 10 See more

pulsar apache 4.7.0

2 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.19.0 stdlib@go1.24.0	0.36.0 1.23.7
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7

Open the chart page →

9,869

vertical-pod-autoscalercowboysysop

11.1.1

1 of 4 See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	golang.org/x/net@v0.19.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

6,949

difydify-helm

0.38.0

1 of 11 See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.11-debian-11-r12	1161dcd293a0	stdlib@go1.19.9	1.23.7

Open the chart page →

22,115

botkubeinfracloudio

1.14.0

1 of 1 See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	golang.org/x/net@v0.23.0 stdlib@go1.21.13	0.36.0 1.23.7

Open the chart page →

1,097

ambassadordatawire

6.9.5

1 of 2 See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

4,086

rabbitmqgroundhog2k

2.3.8

1 of 2 See more

rabbitmq groundhog2k 2.3.8

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5	1773ab33af6a	stdlib@go1.22.2	1.23.7

Open the chart page →

1,040

oktetookteto

0.0.0-2026-08-17

2 of 10 See more

okteto okteto 0.0.0-2026-08-17

2 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/okteto/buildkit :0.0.0-2026-08-17	14527ca5d2a9	golang.org/x/net@v0.35.0	0.36.0
ghcr.io/okteto/okteto :3.22.0	4585017f52f6	stdlib@go1.24.0	1.23.7

Open the chart page →

5,491

prometheus-msteamsprometheus-msteams

1.3.6

1 of 1 See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/prometheusmsteams/prometheus-msteams :v1.5.3	a9f4d31ab811	golang.org/x/net@v0.7.0	0.36.0

Open the chart page →

941

san-iscsi-csienix

4.0.2

1 of 7 See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
enix/san-iscsi-csi :v4.0.2	f963da81ecf7	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16.8	0.36.0 1.23.7

Open the chart page →

4,159

headscalegabe565

0.16.0

1 of 2 See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

1,985

Container images carrying it

3,269 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
grafana/grafana :9.4.3	76dcf36e7d2a	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	1
grafana/grafana :10.3.3	8640e5038e83	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	1
grafana/grafana :11.5.2	8b37a2f028f1	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.36.0 1.23.7	1
grafana/grafana :9.1.1	9746858c20e6	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de stdlib@go1.17.12	0.36.0 1.23.7	1
grafana/grafana :9.0.1	a738d0744784	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.11	0.36.0 1.23.7	1
grafana/grafana :11.1.3	b23b588cf7cb	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7	1
grafana/grafana :6.5.1	befcd84da2c1	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.36.0 1.23.7	1
grafana/grafana :8.3.5	cd7cb4345aa7	golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f stdlib@go1.17.6	0.36.0 1.23.7	1
grafana/grafana :8.3.4	cf81d2c753c8	golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f stdlib@go1.17.6	0.36.0 1.23.7	1
grafana/grafana :7.4.5	d322192ed2fa	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.6	0.36.0 1.23.7	1
grafana/grafana :8.5.3	ecc1b80b8ca2	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.36.0 1.23.7	1
grafana/grafana :10.4.0	f9811e4e687f	golang.org/x/net@v0.20.0 stdlib@go1.21.8	0.36.0 1.23.7	1
grafana/grafana :11.3.1	fa801ab6e1ae	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.36.0 1.23.7	1
grafana/kubernetes-diff-logger :0.0.5	98f6d1cd1e25	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.5	0.36.0 1.23.7	1
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	golang.org/x/net@v0.0.0-20210505214959-0714010a04ed stdlib@go1.16.2	0.36.0 1.23.7	1
grafana/loki :2.9.10	35b02acc6765	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7	1
grafana/loki :2.9.2	6074e01dbe03	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7	1
grafana/loki :2.9.6	6ca6e2cd3b6f	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7	1
grafana/loki :3.0.0	757b5fadf816	golang.org/x/net@v0.22.0 stdlib@go1.21.9	0.36.0 1.23.7	1
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.36.0 1.23.7	1
grafana/loki :3.2.0	882e30c20683	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.36.0 1.23.7	1
grafana/loki :3.3.2	8af2de1abbdd	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.36.0 1.23.7	1
grafana/loki :2.8.2	b1da1d23037e	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.36.0 1.23.7	1
grafana/loki :2.4.2	b3af8ead67d7	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.36.0 1.23.7	1
grafana/loki-canary :3.0.0	28d7c00588aa	golang.org/x/net@v0.22.0 stdlib@go1.21.9	0.36.0 1.23.7	1
grafana/loki-canary :3.1.0	39baf6d67f85	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.36.0 1.23.7	1
grafana/loki-canary :2.9.2	4249db29b992	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7	1
grafana/loki-canary :3.2.0	49e03f80d361	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.36.0 1.23.7	1
grafana/loki-canary :2.9.6	549a40203e97	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7	1
grafana/loki-canary :2.6.1	ab2a2569307b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.36.0 1.23.7	1
grafana/mimir :r292-5f01872	7476e456c738	golang.org/x/net@v0.24.0 stdlib@go1.22.3	0.36.0 1.23.7	1
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.8	0.36.0 1.23.7	1
grafana/mimir :2.15.0	85f55510e0d3	golang.org/x/net@v0.33.0 stdlib@go1.23.2	0.36.0 1.23.7	1
grafana/phlare :0.5.1	330f990cdad9	golang.org/x/net@v0.5.0 stdlib@go1.19.6	0.36.0 1.23.7	1
grafana/promtail :2.6.1	072527b12cdf	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.36.0 1.23.7	1
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.36.0 1.23.7	1
grafana/promtail :2.9.10	63a2e57a5b14	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7	1
grafana/promtail :2.7.0	c16c710f7333	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9 stdlib@go1.19.2	0.36.0 1.23.7	1
grafana/promtail :3.0.0	d3de3da9431c	golang.org/x/net@v0.22.0 stdlib@go1.21.9	0.36.0 1.23.7	1
grafana/pyroscope :1.10.0	319bf32ae06b	golang.org/x/net@v0.26.0 stdlib@go1.22.7	0.36.0 1.23.7	1
grafana/rollout-operator :v0.14.0	3409edfb45c7	golang.org/x/net@v0.21.0 stdlib@go1.22.1	0.36.0 1.23.7	1
grafana/snyk_exporter :v1.4.1	d3c9093401ca	stdlib@go1.21.0	1.23.7	1
grafana/tempo :2.6.0	f55a8a1937ff	golang.org/x/net@v0.27.0 stdlib@go1.22.6	0.36.0 1.23.7	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.11	0.36.0 1.23.7	1
gresearch/armada-operator :latest	6c43743e2b2d	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.36.0 1.23.7	1
gresearch/fasttrackml :latest	16d1228220fc	golang.org/x/net@v0.24.0 stdlib@go1.21.10	0.36.0 1.23.7	1
groundnuty/k8s-wait-for :v1.6	84edcf796267	stdlib@go1.18.1	1.23.7	1
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7	1
grpl/grapple-cli :0.2.127	c00aafee6629	golang.org/x/net@v0.26.0 stdlib@go1.18.10	0.36.0 1.23.7	1
gutmensch/podnat-controller :0.5.2	566979793fc4	golang.org/x/net@v0.4.0 stdlib@go1.22.3	0.36.0 1.23.7	1