CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,685; of 17,790 indexed, latest versions
Container images: 3,260; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,685 of 17,790 indexed charts deploy, on 3,260 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,486
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,160

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,685 by stars

Chart

Latest

Affected images

Radar Score

clickhousesignoz

24.1.18

3 of 3 See more

clickhouse signoz 24.1.18

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.36.0 1.23.7
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.36.0 1.23.7
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.23.7

Open the chart page →

4,697

cosignedsigstore

0.1.23

2 of 2 See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
gcr.io/projectsigstore/cosigneddigest-pinned	784518ff3ee7	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.36.0 1.23.7
gcr.io/projectsigstore/policy-webhookdigest-pinned	82940e8c3e0d	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.36.0 1.23.7

Open the chart page →

5,118

scaffoldsigstore

0.6.115

2 See more

scaffold sigstore 0.6.115

2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.23.7
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.23.7

Open the chart page →

—

mongodb-backupsinextra

1.1.0

1 of 1 See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	golang.org/x/net@v0.27.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

4,250

postgresql-singlesinextra

1.15.1

1 of 1 See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	stdlib@go1.16.15	1.23.7

Open the chart page →

4,920

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.36.0 1.23.7
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.36.0 1.23.7

Open the chart page →

6,420

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.18	0.36.0 1.23.7

Open the chart page →

2,200

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.36.0 1.23.7

Open the chart page →

2,301

smallest-self-hostsmallest-self-host

0.2.2

6 of 12 See more

smallest-self-host smallest-self-host 0.2.2

6 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.36.0 1.23.7
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	golang.org/x/net@v0.25.0 stdlib@go1.22.8	0.36.0 1.23.7
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

7,684

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

1,144

yopasssoftizy

1.0.1

1 of 2 See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.4.6	9516e3b3e88c	stdlib@go1.19.1	1.23.7

Open the chart page →

1,461

artifact-hubsoftonic

1.19.0

5 of 8 See more

artifact-hub softonic 1.19.0

5 of the 8 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	golang.org/x/net@v0.11.0 stdlib@go1.19.10	0.36.0 1.23.7
artifacthub/db-migrator :v1.19.0	2a746b289fcd	stdlib@go1.22.4	1.23.7
artifacthub/hub :v1.19.0	111918d8c399	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7
artifacthub/scanner :v1.19.0	323d026e78c3	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.36.0 1.23.7
artifacthub/tracker :v1.19.0	6596c8c4d955	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

14,504

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.13.12	0.36.0 1.23.7

Open the chart page →

2,637

go-ratelimitsoftonic

1.0.7

2 of 3 See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14	0.36.0 1.23.7
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.23.7

Open the chart page →

5,098

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.6	0.36.0 1.23.7

Open the chart page →

2,591

redis-shardedsoftonic

0.5.0

1 of 2 See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.23.7

Open the chart page →

2,320

rabbitmqsolidcharts

0.7.5

1 of 2 See more

rabbitmq solidcharts 0.7.5

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5-management	ffd1b50c522a	stdlib@go1.22.2	1.23.7

Open the chart page →

1,040

gloosolo-gloo-edge

0.0.0-fork

4 of 5 See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7

Open the chart page →

9,224

sp-otel-collectorsp-otel-collector

1.1.6

1 of 1 See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

2,022

sql-operatorsql-operator

0.11.2

1 of 1 See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.36.0 1.23.7

Open the chart page →

1,594

gitwebhookproxystakater

0.2.79

1 of 1 See more

gitwebhookproxy stakater 0.2.79

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
stakater/gitwebhookproxy :v0.2.79	c1226e5270cd	stdlib@go1.13.1	1.23.7

Open the chart page →

1,503

splunk-operatorstakater

0.0.6

1 of 2 See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb stdlib@go1.17.12	0.36.0 1.23.7

Open the chart page →

11,459

graph-nodestakewise

3.1.0

1 of 3 See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.24.0	e3de33bd746b	golang.org/x/net@v0.17.0 stdlib@go1.19.8	0.36.0 1.23.7

Open the chart page →

4,673

mayastorstartechnica

0.2.0

3 of 13 See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.36.0 1.23.7
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.36.0 1.23.7

Open the chart page →

4,348

statpingstatping

0.1.14

1 of 1 See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.36.0 1.23.7

Open the chart page →

3,371

stornxstornx

1.1.1

1 of 9 See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0	0.36.0

Open the chart page →

11,683

hlf-k8ssubstra

10.2.4

3 of 7 See more

hlf-k8s substra 10.2.4

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.36.0 1.23.7
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.36.0 1.23.7
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

12,006

Grafanasurajwarbhe-grafana

0.1.0

1 of 1 See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
surajwarbhe/grafana :v1	85248611e9f1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.36.0 1.23.7

Open the chart page →

2,597

hello-appsysintelligent

2.0.1

1 of 1 See more

hello-app sysintelligent 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
sysintelligent/hello-app :2.0.1	77fb30df847d	golang.org/x/net@v0.19.0 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

1,880

terraform-controllerterraform-controller

0.0.20

1 of 1 See more

terraform-controller terraform-controller 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
absaoss/terraform-controller :v0.0.20	ad538a1285a0	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.14.8	0.36.0 1.23.7

Open the chart page →

3,538

jenkinstestchart

0.1.9

1 of 2 See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	golang.org/x/net@v0.7.0 stdlib@go1.20.6	0.36.0 1.23.7

Open the chart page →

9,108

jenkinstest-jenkins

9.1.0

1 of 2 See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	golang.org/x/net@v0.7.0 stdlib@go1.20.6	0.36.0 1.23.7

Open the chart page →

9,108

tocktock

0.6.3

1 of 9 See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.5-debian-11-r6	6fe59ed5d79f	golang.org/x/net@v0.19.0 stdlib@go1.20.12	0.36.0 1.23.7

Open the chart page →

12,910

goalerttokens-studio

0.0.5

1 of 2 See more

goalert tokens-studio 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
goalert/goalert :v0.32.0	08d57388b0cb	golang.org/x/net@v0.20.0 stdlib@go1.22.1	0.36.0 1.23.7

Open the chart page →

1,469

tor-snowflake-proxytor-snowflake-proxy

1.2.0

1 of 1 See more

tor-snowflake-proxy tor-snowflake-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
thetorproject/snowflake-proxy :v2.11.0	1ddc5069d354	golang.org/x/net@v0.35.0	0.36.0

Open the chart page →

740

spa-reloadertoucan

0.1.0

1 of 1 See more

spa-reloader toucan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
toucansoftware/spa-reloader :latest	c187b1fba501	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.36.0 1.23.7

Open the chart page →

2,245

traefik-hubtraefik

4.2.0

1 of 1 See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/traefik/traefik-hub :v2.11.0	322f5f8cc105	golang.org/x/net@v0.17.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

3,165

atlantistrozz

3.12.11

1 of 1 See more

atlantis trozz 3.12.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
runatlantis/atlantis :v0.16.1	45fbaf7e207c	golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a stdlib@go1.14.7	0.36.0 1.23.7

Open the chart page →

5,280

guardrails-agent-kubernetesturbot

0.3.0

1 of 1 See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	golang.org/x/net@v0.26.0 stdlib@go1.22.8	0.36.0 1.23.7

Open the chart page →

4,061

boundaryundergrid

0.1.0

2 of 3 See more

boundary undergrid 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v1.6	84edcf796267	stdlib@go1.18.1	1.23.7
hashicorp/boundary :0.8.1	fb70bd9210ff	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.10	0.36.0 1.23.7

Open the chart page →

4,957

upbot-operatorupbot-operator

0.0.20

1 of 2 See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.28.13	e5c0b053fed7	golang.org/x/net@v0.12.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

4,461

user-componentuser-component

1.2.0

1 of 4 See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/user-component-php :latest	198db44fabb5	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,303

phonebook-chartusuladams

0.1.5

1 of 3 See more

phonebook-chart usuladams 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.23.7

Open the chart page →

3,176

v2ray-proxyv2ray-proxy

0.2.4

1 of 1 See more

v2ray-proxy v2ray-proxy 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
pinclr/v2ray-proxy :latest	f37f250b7091	golang.org/x/net@v0.7.0 stdlib@go1.20.2	0.36.0 1.23.7

Open the chart page →

1,954

vault-gcp-secretsvault-gcp-secrets

1.19.5

1 of 1 See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/tjm/vault-gcp-secrets :v1.19.5	9f157fe035f1	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

2,291

vearchvearch

3.3.4

2 of 4 See more

vearch vearch 3.3.4

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.36.0 1.23.7
vearch/vearch :3.3.4	0768af33f9d9	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.36.0 1.23.7

Open the chart page →

5,008

devportal-admin-uiveecode-platform

0.5.4

1 of 1 See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
veecode/devportal-admin-ui :0.4.30	c69fd286b489	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

5,239

riveruivirtualroot

0.1.3

1 of 1 See more

riverui virtualroot 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/riverqueue/riverui :0.5.3	2dc54179b25a	golang.org/x/net@v0.23.0 stdlib@go1.23.0	0.36.0 1.23.7

Open the chart page →

1,135

go-egvoid-xmh

1.1.1

3 of 3 See more

go-eg void-xmh 1.1.1

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
voidxmh/xmh-auther :v1	93e42a569ca8	stdlib@go1.16.5	1.23.7
voidxmh/xmh-cacher :v1	1b7397412320	stdlib@go1.16.5	1.23.7
voidxmh/xmh-ui :v1	2ff3f2146547	stdlib@go1.16.5	1.23.7

Open the chart page →

7,464

phpipamvquie

1.0.3

1 of 3 See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mariadb :10.11.2	1c33370a599c	stdlib@go1.16.7	1.23.7

Open the chart page →

7,069

Container images carrying it

3,260 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
huangchengwu6904/hi-app :cac-1691047806	1b932f8221a9	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.36.0 1.23.7	1
huseyinbabal/demory :0.0.0-rc.20	ae8eb4053c60	golang.org/x/net@v0.0.0-20210907225631-ff17edfbf26d stdlib@go1.17.2	0.36.0 1.23.7	1
huzafach/aws-cli-k8 :1.0.0	6e271d43ea48	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.36.0 1.23.7	1
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.36.0 1.23.7	1
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.36.0 1.23.7	1
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.36.0 1.23.7	1
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.36.0 1.23.7	1
hyperledgerk8s/bc-explorer :v20230504	1f1a06b61f18	golang.org/x/net@v0.8.0 stdlib@go1.20.2	0.36.0 1.23.7	1
hyperledgerk8s/bc-saas :v0.0.1-20230524	d8bc31176257	golang.org/x/net@v0.8.0 stdlib@go1.20.2	0.36.0 1.23.7	1
hyperledgerk8s/fabric-operator :7776e71	29a8af8be270	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.4	0.36.0 1.23.7	1
hyperledgerk8s/minio-mc :RELEASE.2023-01-28T20-29-38Z	729b3d128487	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	1
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.36.0 1.23.7	1
hyperledgerk8s/tektoncd-operator :v0.64.0	d0a3a35a138d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.18.7	0.36.0 1.23.7	1
hyperledgerk8s/tekton-operator-webhook :v0.64.0	2237cb80f52b	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.18.7	0.36.0 1.23.7	1
iamdorsah/bastillion :v0.1	db83a0254d81	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.13	0.36.0 1.23.7	1
ianw/quickchart :v1.7.1	dc49dd460c37	stdlib@go1.13.1	1.23.7	1
ibarreche/cloud-reporting-ci :latest	1f45af91da6a	stdlib@go1.16.15	1.23.7	1
igrantio/bb-consent-api :2023.12.2	2d2ea6546ffe	golang.org/x/net@v0.17.0 stdlib@go1.18.8	0.36.0 1.23.7	1
ildarmukhametzyanov/priceapp :0.1	15d23720a3ee	stdlib@go1.21.1	1.23.7	1
inaccel/cloud-init :latest	a5d3d0af05c1	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.36.0 1.23.7	1
inaccel/device-selector :latest	44b4f274f40b	golang.org/x/net@v0.21.0 stdlib@go1.21.9	0.36.0 1.23.7	1
inaccel/kubevirt-hack :latest	bdfd61803a70	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7	1
inbucket/inbucket :3.0.0	1f10a0efea69	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.1	0.36.0 1.23.7	1
indevlab/ejabberd :24.12-k8s	8bc689d093a7	golang.org/x/net@v0.30.0 stdlib@go1.23.6	0.36.0 1.23.7	1
infisical/infisical-csi-provider :v0.0.9	e3390e677db6	golang.org/x/net@v0.33.0	0.36.0	1
inseefrlab/shelly :cloudshell	31f04ca7436b	golang.org/x/net@v0.13.0 stdlib@go1.15.7	0.36.0 1.23.7	1
instill/artifact-backend :b28766a	c4a393e601ed	golang.org/x/net@v0.33.0	0.36.0	1
intel/intel-gaudi-resource-driver :v0.3.0	ac758c14c2de	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.36.0 1.23.7	1
intel/intel-gpu-plugin :0.20.0	143f0a45e174	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.10	0.36.0 1.23.7	1
intel/intel-gpu-resource-driver :v0.7.0	e158711e32ce	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.36.0 1.23.7	1
intel/intel-qat-resource-driver :v0.1.0	ac7616986a2b	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7	1
intel/multimodal-data-visualization :3.0	3426deb77337	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.11	0.36.0 1.23.7	1
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	golang.org/x/net@v0.7.0 stdlib@go1.19.3	0.36.0 1.23.7	1
invisibl/gravity-init :v1.0.9	1a970f84178b	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.12	0.36.0 1.23.7	1
invisibl/identity-manager :1.0.0	1029f4fe20eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.11	0.36.0 1.23.7	1
invisibl/identity-manager-demo :v1.0.0	cf5400cb935a	stdlib@go1.19.2	1.23.7	1
iofog/router :2.0.1	7260cf861479	stdlib@go1.15	1.23.7	1
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.5	0.36.0 1.23.7	1
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.20.3	0.36.0 1.23.7	1
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.5	0.36.0 1.23.7	1
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.20.3	0.36.0 1.23.7	1
iomesh/csi-driver :v2.8.0	1a151f602451	golang.org/x/net@v0.8.0 stdlib@go1.21.11	0.36.0 1.23.7	1
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.7	0.36.0 1.23.7	1
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/net@v0.19.0 stdlib@go1.22.6	0.36.0 1.23.7	1
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/net@v0.17.0 stdlib@go1.21.10	0.36.0 1.23.7	1
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/net@v0.19.0 stdlib@go1.21.10	0.36.0 1.23.7	1
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/net@v0.19.0 stdlib@go1.22.6	0.36.0 1.23.7	1
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.36.0 1.23.7	1
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.36.0 1.23.7	1
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.36.0 1.23.7	1