CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,691; of 17,787 indexed, latest versions
Container images: 3,269; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,691 of 17,787 indexed charts deploy, on 3,269 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,489
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,167

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,691 by stars

Chart

Latest

Affected images

Radar Score

oncallgrafana

1.16.5

7 of 12 See more

oncall grafana 1.16.5

7 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
quay.io/jetstack/cert-manager-ctl :v1.8.0	595c548dee6f	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
quay.io/jetstack/cert-manager-webhook :v1.8.0	fd798a5a773e	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.36.0 1.23.7

Open the chart page →

16,251

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.3	f09282d281f6	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.36.0 1.23.7

Open the chart page →

11,402

aws-cloudwatch-metricsaws

0.0.11

1 of 1 See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

1,556

zabbixcetic

3.1.3

2 of 5 See more

zabbix cetic 3.1.3

2 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.1	0.36.0 1.23.7
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	stdlib@go1.18.1	1.23.7

Open the chart page →

33,907

chatwootchatwoot

2.0.24

2 of 3 See more

chatwoot chatwoot 2.0.24

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	stdlib@go1.18.2	1.23.7
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	stdlib@go1.16.7	1.23.7

Open the chart page →

9,204

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

4,918

home-assistantgeek-cookbook

13.5.0

1 of 1 See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	stdlib@go1.17.1	1.23.7

Open the chart page →

7,706

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.23.7

Open the chart page →

6,550

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.23.7
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	stdlib@go1.22.7	1.23.7

Open the chart page →

5,278

hostpath-provisionerrimusz

0.2.13

1 of 1 See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.7	0.36.0 1.23.7

Open the chart page →

2,039

daskdask

2024.1.1

1 of 2 See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

12,830

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

3,031

openldaphelm-openldap

2.0.4

1 of 3 See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.13.4	0.36.0 1.23.7

Open the chart page →

6,219

kube-starrockskube-starrocks

1.11.7

1 of 1 See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
starrocks/operator :v1.11.7	8c20435a7579	golang.org/x/net@v0.17.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

556

linkerd-jaegerlinkerd2

30.12.11

2 of 4 See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.36.0 1.23.7
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.36.0 1.23.7

Open the chart page →

4,405

outlineoutline

0.0.9

1 of 4 See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.23.7

Open the chart page →

4,431

homeassistantvolker-raschek

0.2.3

1 of 1 See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.12.4	8d000332b09b	stdlib@go1.17.1	1.23.7

Open the chart page →

6,040

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7

Open the chart page →

1,023

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.36.0 1.23.7

Open the chart page →

6,853

edge-stackdatawire

7.1.8-ea

1 of 2 See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/aes :2.0.3-ea	07f8fe4f4f8e	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

5,173

glasskube-operatorglasskube

0.12.2

3 of 3 See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.36.0 1.23.7

Open the chart page →

11,971

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	stdlib@go1.20.12	1.23.7

Open the chart page →

5,364

linkerd-vizlinkerd2-edge

30.14.11-edge

1 of 5 See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

1,346

plane-cemakeplane

1.8.1

1 of 11 See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.23.7

Open the chart page →

4,854

milvusmilvus-helm

5.0.28

1 of 4 See more

milvus milvus-helm 5.0.28

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

10,764

mssqlmssql

1.10.3

1 of 1 See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql :1.10.3	f923d842bc47	stdlib@go1.23.1	1.23.7

Open the chart page →

642

spirespiffe

0.30.2

1 of 10 See more

spire spiffe 0.30.2

1 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/spiffe-csi-driver :0.2.7	9dfe4f0caff0	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.36.0 1.23.7

Open the chart page →

1,640

ansible-semaphorecloudhippie

15.2.10

1 of 1 See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.19.14	98ad9bc7a2a0	stdlib@go1.23.3	1.23.7

Open the chart page →

1,235

zookeepercloudpirates-zookeeper

0.13.11

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	cab8944a33a1	stdlib@go1.18.1	1.23.7

Open the chart page →

2,963

vertical-pod-autoscalercluster-autoscaler

0.12.0

1 of 4 See more

vertical-pod-autoscaler cluster-autoscaler 0.12.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

1,062

codefreshcodefresh-onprem

2.12.13

1 of 42 See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	golang.org/x/net@v0.27.0 stdlib@go1.21.12	0.36.0 1.23.7

Open the chart page →

14,615

aws-ebs-csi-driverdeliveryhero

2.17.4

6 of 6 See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	golang.org/x/net@v0.4.0 stdlib@go1.19.6	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	golang.org/x/net@v0.4.0 stdlib@go1.19.7	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	golang.org/x/net@v0.4.0 stdlib@go1.19.8	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.36.0 1.23.7

Open the chart page →

6,485

loki-simple-scalablegrafana

1.8.11

2 of 3 See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.36.0 1.23.7
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.36.0 1.23.7

Open the chart page →

6,470

adguard-homerm3l

0.24.1

1 of 2 See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.51	3a143e6c071c	golang.org/x/net@v0.25.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

1,149

supabasetokens-studio

1.0.0

2 of 14 See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.36.0 1.23.7
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

23,263

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

2,107

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.23.7

Open the chart page →

8,530

nsqbeeinventor

1.3.0

1 of 1 See more

871

frigateblakeblackshear

7.8.0

1 of 1 See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	golang.org/x/net@v0.8.0 stdlib@go1.17.1	0.36.0 1.23.7

Open the chart page →

3,004

kube-prometheuschoerodon

9.3.1

4 of 7 See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.36.0 1.23.7
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e stdlib@go1.13.11	0.36.0 1.23.7
squareup/ghostunnel :v1.5.2	70f4cf270425	golang.org/x/net@v0.0.0-20191003171128-d98b1b443823 stdlib@go1.13.4	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.3	0.36.0 1.23.7

Open the chart page →

12,237

minifluxgabe565

0.9.2

1 of 2 See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.36.0 1.23.7

Open the chart page →

1,247

cubestoregadsme

1.2.0

1 of 3 See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.36.0 1.23.7

Open the chart page →

3,037

waypointhashicorp

0.1.21

1 of 2 See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

4,167

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.36.0 1.23.7

Open the chart page →

7,896

jaeger-all-in-onejaeger-all-in-one

0.1.12

1 of 1 See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.55	f6b5d09073f1	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.36.0 1.23.7

Open the chart page →

1,216

rabbitmqkubelauncher

0.2.11

1 of 1 See more

rabbitmq kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/rabbitmqdigest-pinned	ff5a36a457f1	stdlib@go1.22.2	1.23.7

Open the chart page →

1,118

purelbpurelb

0.0.0-106-ipv6-lbip-052cedab

1 of 2 See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.15	0.36.0 1.23.7

Open the chart page →

4,412

dex-k8s-authenticatorsagikazarmark

0.0.3

1 of 1 See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/net@v0.0.0-20190522155817-f3200d17e092 stdlib@go1.13.11	0.36.0 1.23.7

Open the chart page →

2,791

connaisseurconnaisseur

2.12.0

1 of 2 See more

connaisseur connaisseur 2.12.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	83edc2b8e9ff	stdlib@go1.18.2	1.23.7

Open the chart page →

3,024

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.2	0.36.0 1.23.7

Open the chart page →

1,513

Container images carrying it

3,269 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.36.0 1.23.7	1
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.36.0 1.23.7	1
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.7	0.36.0 1.23.7	1
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7	1
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7	1
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7	1
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.36.0 1.23.7	1
iotaledger/goshimmer :v0.8.6	b02a8f77474f	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.2	0.36.0 1.23.7	1
iotaledger/hornet :2.0	01206f1ba89c	golang.org/x/net@v0.14.0 stdlib@go1.21.10	0.36.0 1.23.7	1
iotaledger/inx-dashboard :1.0	12c669cb8748	golang.org/x/net@v0.14.0 stdlib@go1.21.1	0.36.0 1.23.7	1
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/net@v0.0.0-20220517181318-183a9ca12b87 stdlib@go1.18.3	0.36.0 1.23.7	1
ipfs/ipfs-cluster :1.0.2	1511f6d57994	golang.org/x/net@v0.0.0-20220517181318-183a9ca12b87 stdlib@go1.18.3	0.36.0 1.23.7	1
ipfs/kubo :v0.41.0	0661819c2e09	stdlib@go1.19.8	1.23.7	1
ipfs/kubo :latest	63f5502f7a01	stdlib@go1.19.8	1.23.7	1
ipfs/kubo :v0.17.0	803fac58ba15	golang.org/x/net@v0.1.0 stdlib@go1.19.1	0.36.0 1.23.7	1
ipfs/kubo :v0.24.0	e3de33bd746b	golang.org/x/net@v0.17.0 stdlib@go1.19.8	0.36.0 1.23.7	1
ipushc/cassandra-web :latest	fa3e0c66c289	golang.org/x/net@v0.8.0 stdlib@go1.20.2	0.36.0 1.23.7	1
irakli/ms-web-hello :latest	966a4bfefe27	stdlib@go1.19.2	1.23.7	1
istio/install-cni :1.10.3	2232f365aed6	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf stdlib@go1.16.6	0.36.0 1.23.7	1
istio/operator :1.10.3	655eefa11c84	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf stdlib@go1.16.6	0.36.0 1.23.7	1
istio/operator :1.12.0	6cfce8a071b9	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.17.3	0.36.0 1.23.7	1
istio/operator :1.18.2	70f9d1fe5fff	golang.org/x/net@v0.10.0 stdlib@go1.20.6	0.36.0 1.23.7	1
istio/pilot :1.10.0	294ca55bd1cc	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf stdlib@go1.16.4	0.36.0 1.23.7	1
istio/pilot :1.16.0	ac0284d75ec9	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9 stdlib@go1.19.3	0.36.0 1.23.7	1
istio/pilot :1.17.1	ce9d87606701	golang.org/x/net@v0.5.0 stdlib@go1.20.1	0.36.0 1.23.7	1
istio/pilot :1.15.2	db08d6963975	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.19.2	0.36.0 1.23.7	1
istio/pilot :1.10.3	e7e110a421c2	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf stdlib@go1.16.6	0.36.0 1.23.7	1
istio/proxyv2 :1.9.6	87a9db561d2e	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.13	0.36.0 1.23.7	1
istio/proxyv2 :1.10.0	88c6c693e67a	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf stdlib@go1.16.4	0.36.0 1.23.7	1
istio/proxyv2 :1.14.1	df69c1a7af7c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.2	0.36.0 1.23.7	1
itzg/mc-router :1.16.1	bb552b59fb53	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.18.4	0.36.0 1.23.7	1
itzg/minecraft-server :2026.9.0	4e29d14082d9	stdlib@go1.22.2	1.23.7	1
itzg/minecraft-server :latest	8672e335dbef	stdlib@go1.22.2	1.23.7	1
itzmanish/ecr-token-renew :latest	02154d1c05b5	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.6	0.36.0 1.23.7	1
j0113/haven-compliancy-dashboard :1.3	696cb8ca9f4e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.17.2	0.36.0 1.23.7	1
jacobalberty/unifi :v7.1.66	4a3616625dda	stdlib@go1.18	1.23.7	1
jacobalberty/unifi :v7.4.162	b3edc809a3ff	stdlib@go1.20.4	1.23.7	1
jaegertracing/all-in-one :1.29	42822be7888b	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.17.3	0.36.0 1.23.7	1
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	1
jaegertracing/all-in-one :1.42.0	7d32a4eddec7	golang.org/x/net@v0.5.0 stdlib@go1.19.5	0.36.0 1.23.7	1
jaegertracing/all-in-one :1.22.0	ca6b73330616	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15.8	0.36.0 1.23.7	1
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.4	0.36.0 1.23.7	1
jaegertracing/all-in-one :1.55	f6b5d09073f1	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.36.0 1.23.7	1
jaegertracing/jaeger-collector :1.41.0	ff81f0a9f63c	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	1
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	golang.org/x/net@v0.29.0 stdlib@go1.22.3	0.36.0 1.23.7	1
jaegertracing/jaeger-query :1.41.0	b636f0f464bc	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	1
jamesorlakin/cert-manager-cpanel-dns-webhook :v0.3.0	3894dc11b236	golang.org/x/net@v0.29.0 stdlib@go1.22.8	0.36.0 1.23.7	1
jdvalencia422/observabilitysec :latest	a80b6e47a7b8	stdlib@go1.18.4	1.23.7	1
jenkins/jenkins :2.462.2-jdk17	95313257a8cd	golang.org/x/net@v0.17.0 stdlib@go1.21.8	0.36.0 1.23.7	1