CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,691; of 17,787 indexed, latest versions
Container images: 3,269; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,691 of 17,787 indexed charts deploy, on 3,269 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,489
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,167

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,691 by stars

Chart

Latest

Affected images

Radar Score

oncallgrafana

1.16.5

7 of 12 See more

oncall grafana 1.16.5

7 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
quay.io/jetstack/cert-manager-ctl :v1.8.0	595c548dee6f	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
quay.io/jetstack/cert-manager-webhook :v1.8.0	fd798a5a773e	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.8	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.36.0 1.23.7

Open the chart page →

16,251

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.3	f09282d281f6	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.36.0 1.23.7

Open the chart page →

11,402

aws-cloudwatch-metricsaws

0.0.11

1 of 1 See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

1,556

zabbixcetic

3.1.3

2 of 5 See more

zabbix cetic 3.1.3

2 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.1	0.36.0 1.23.7
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	stdlib@go1.18.1	1.23.7

Open the chart page →

33,907

chatwootchatwoot

2.0.24

2 of 3 See more

chatwoot chatwoot 2.0.24

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	stdlib@go1.18.2	1.23.7
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	stdlib@go1.16.7	1.23.7

Open the chart page →

9,204

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

4,918

home-assistantgeek-cookbook

13.5.0

1 of 1 See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	stdlib@go1.17.1	1.23.7

Open the chart page →

7,706

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.23.7

Open the chart page →

6,550

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.23.7
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	stdlib@go1.22.7	1.23.7

Open the chart page →

5,278

hostpath-provisionerrimusz

0.2.13

1 of 1 See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.7	0.36.0 1.23.7

Open the chart page →

2,039

daskdask

2024.1.1

1 of 2 See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

12,830

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

3,031

openldaphelm-openldap

2.0.4

1 of 3 See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.13.4	0.36.0 1.23.7

Open the chart page →

6,219

kube-starrockskube-starrocks

1.11.7

1 of 1 See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
starrocks/operator :v1.11.7	8c20435a7579	golang.org/x/net@v0.17.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

556

linkerd-jaegerlinkerd2

30.12.11

2 of 4 See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.36.0 1.23.7
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.36.0 1.23.7

Open the chart page →

4,405

outlineoutline

0.0.9

1 of 4 See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.23.7

Open the chart page →

4,431

homeassistantvolker-raschek

0.2.3

1 of 1 See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.12.4	8d000332b09b	stdlib@go1.17.1	1.23.7

Open the chart page →

6,040

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7

Open the chart page →

1,023

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.36.0 1.23.7

Open the chart page →

6,853

edge-stackdatawire

7.1.8-ea

1 of 2 See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/aes :2.0.3-ea	07f8fe4f4f8e	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

5,173

glasskube-operatorglasskube

0.12.2

3 of 3 See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.36.0 1.23.7

Open the chart page →

11,971

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	stdlib@go1.20.12	1.23.7

Open the chart page →

5,364

linkerd-vizlinkerd2-edge

30.14.11-edge

1 of 5 See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

1,346

plane-cemakeplane

1.8.1

1 of 11 See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.23.7

Open the chart page →

4,854

milvusmilvus-helm

5.0.28

1 of 4 See more

milvus milvus-helm 5.0.28

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

10,764

mssqlmssql

1.10.3

1 of 1 See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql :1.10.3	f923d842bc47	stdlib@go1.23.1	1.23.7

Open the chart page →

642

spirespiffe

0.30.2

1 of 10 See more

spire spiffe 0.30.2

1 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/spiffe-csi-driver :0.2.7	9dfe4f0caff0	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.36.0 1.23.7

Open the chart page →

1,640

ansible-semaphorecloudhippie

15.2.10

1 of 1 See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.19.14	98ad9bc7a2a0	stdlib@go1.23.3	1.23.7

Open the chart page →

1,235

zookeepercloudpirates-zookeeper

0.13.11

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	cab8944a33a1	stdlib@go1.18.1	1.23.7

Open the chart page →

2,963

vertical-pod-autoscalercluster-autoscaler

0.12.0

1 of 4 See more

vertical-pod-autoscaler cluster-autoscaler 0.12.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

1,062

codefreshcodefresh-onprem

2.12.13

1 of 42 See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	golang.org/x/net@v0.27.0 stdlib@go1.21.12	0.36.0 1.23.7

Open the chart page →

14,615

aws-ebs-csi-driverdeliveryhero

2.17.4

6 of 6 See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	golang.org/x/net@v0.4.0 stdlib@go1.19.6	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	golang.org/x/net@v0.4.0 stdlib@go1.19.7	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	golang.org/x/net@v0.4.0 stdlib@go1.19.8	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.36.0 1.23.7

Open the chart page →

6,485

loki-simple-scalablegrafana

1.8.11

2 of 3 See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.36.0 1.23.7
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.36.0 1.23.7

Open the chart page →

6,470

adguard-homerm3l

0.24.1

1 of 2 See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.51	3a143e6c071c	golang.org/x/net@v0.25.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

1,149

supabasetokens-studio

1.0.0

2 of 14 See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.36.0 1.23.7
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

23,263

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

2,107

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.23.7

Open the chart page →

8,530

nsqbeeinventor

1.3.0

1 of 1 See more

871

frigateblakeblackshear

7.8.0

1 of 1 See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	golang.org/x/net@v0.8.0 stdlib@go1.17.1	0.36.0 1.23.7

Open the chart page →

3,004

kube-prometheuschoerodon

9.3.1

4 of 7 See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.36.0 1.23.7
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e stdlib@go1.13.11	0.36.0 1.23.7
squareup/ghostunnel :v1.5.2	70f4cf270425	golang.org/x/net@v0.0.0-20191003171128-d98b1b443823 stdlib@go1.13.4	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.3	0.36.0 1.23.7

Open the chart page →

12,237

minifluxgabe565

0.9.2

1 of 2 See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.36.0 1.23.7

Open the chart page →

1,247

cubestoregadsme

1.2.0

1 of 3 See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.36.0 1.23.7

Open the chart page →

3,037

waypointhashicorp

0.1.21

1 of 2 See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

4,167

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.36.0 1.23.7

Open the chart page →

7,896

jaeger-all-in-onejaeger-all-in-one

0.1.12

1 of 1 See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.55	f6b5d09073f1	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.36.0 1.23.7

Open the chart page →

1,216

rabbitmqkubelauncher

0.2.11

1 of 1 See more

rabbitmq kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/rabbitmqdigest-pinned	ff5a36a457f1	stdlib@go1.22.2	1.23.7

Open the chart page →

1,118

purelbpurelb

0.0.0-106-ipv6-lbip-052cedab

1 of 2 See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.15	0.36.0 1.23.7

Open the chart page →

4,412

dex-k8s-authenticatorsagikazarmark

0.0.3

1 of 1 See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/net@v0.0.0-20190522155817-f3200d17e092 stdlib@go1.13.11	0.36.0 1.23.7

Open the chart page →

2,791

connaisseurconnaisseur

2.12.0

1 of 2 See more

connaisseur connaisseur 2.12.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	83edc2b8e9ff	stdlib@go1.18.2	1.23.7

Open the chart page →

3,024

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.2	0.36.0 1.23.7

Open the chart page →

1,513

Container images carrying it

3,269 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
kubedb/kubedb-ui-server :v0.0.1_linux_amd64	7d27865514ee	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.8	0.36.0 1.23.7	1
kubedb/operator :v0.24.0	1a06ff0bda52	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.17.6	0.36.0 1.23.7	1
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.36.0 1.23.7	1
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.11	0.36.0 1.23.7	1
kubeflowkatib/katib-controller :v0.12.0	12a28c8a0b41	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.1	0.36.0 1.23.7	1
kubeflowkatib/katib-controller :v0.17.0	72f14e03b9e1	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7	1
kubeflowkatib/katib-db-manager :v0.17.0	916a7695b0dd	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7	1
kubeflowkatib/katib-db-manager :v0.12.0	db88bf09d88e	golang.org/x/net@v0.0.0-20191021144547-ec77196f6094 stdlib@go1.13.3	0.36.0 1.23.7	1
kubeflowkatib/katib-ui :v0.12.0	129f0aaba976	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.1	0.36.0 1.23.7	1
kubeflowkatib/katib-ui :v0.17.0	7a41c508deb1	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7	1
kubeflow/model-registry :v0.2.9	5783f6db428f	golang.org/x/net@v0.28.0 stdlib@go1.21.13	0.36.0 1.23.7	1
kubeflownotebookswg/kfam :v1.9.2	2060a2ede788	golang.org/x/net@v0.17.0 stdlib@go1.17.13	0.36.0 1.23.7	1
kubeflownotebookswg/kfam :v1.6.1	f226fb44db57	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.17.13	0.36.0 1.23.7	1
kubeflownotebookswg/notebook-controller :v1.9.2	0f14bd28fdd5	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.13	0.36.0 1.23.7	1
kubeflownotebookswg/notebook-controller :v1.6.1	85e2e685abd6	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.13	0.36.0 1.23.7	1
kubeflownotebookswg/poddefaults-webhook :v1.6.1	7d42600e1524	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.13	0.36.0 1.23.7	1
kubeflownotebookswg/poddefaults-webhook :v1.9.2	bde88d98ad74	golang.org/x/net@v0.13.0 stdlib@go1.21.13	0.36.0 1.23.7	1
kubeflownotebookswg/profile-controller :v1.6.1	9f01767a460f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.13	0.36.0 1.23.7	1
kubeflownotebookswg/profile-controller :v1.9.2	f05a5538ae7e	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.13	0.36.0 1.23.7	1
kubeflownotebookswg/pvcviewer-controller :v1.9.2	9815e9b1728f	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7	1
kubeflownotebookswg/tensorboard-controller :v1.9.2	6536a9f61193	golang.org/x/net@v0.17.0 stdlib@go1.17.13	0.36.0 1.23.7	1
kubeflownotebookswg/tensorboard-controller :v1.6.1	82ffdd2da285	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.13	0.36.0 1.23.7	1
kubeflow/training-operator :v1-04f9f13	dabb76dbda29	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7	1
kubeflow/training-operator :v1-e1434f6	ff847e2b6af0	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.17.11	0.36.0 1.23.7	1
kubegems/alertproxy :v0.4.2	eaee03055329	stdlib@go1.18.10	1.23.7	1
kubegems/chatgpt-api :latest	f3c492a938ad	stdlib@go1.19.3	1.23.7	1
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	1
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	1
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.22.5	0.36.0 1.23.7	1
kubegems/kubectl :latest	c3b4be9a54f5	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.20	0.36.0 1.23.7	1
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.13.15	0.36.0 1.23.7	1
kubegems/mysql :8.0.33-debian-11-r0	19cb195b9a50	stdlib@go1.19.8	1.23.7	1
kubegems/redis :7.2.5-debian-12-r2	870ee3a77add	stdlib@go1.21.11	1.23.7	1
kubemod/kubemod :v0.19.1	1f8154f7e80c	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.18	0.36.0 1.23.7	1
kubemod/kubemod :v0.13.0	cadca39288ad	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.14.7	0.36.0 1.23.7	1
kubemod/kubemod-crt :v1.3.0	028347c9fa77	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.18.1	0.36.0 1.23.7	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14	0.36.0 1.23.7	1
kuberay/operator :v1.0.0	4e6ac8a3a2c4	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.36.0 1.23.7	1
kubernetesui/dashboard :v2.6.1	290bebc3cd96	golang.org/x/net@v0.0.0-20220526153639-5463443f8c37 stdlib@go1.19	0.36.0 1.23.7	1
kubernetesui/dashboard :v2.7.0	2e500d29e9d5	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7	1
kubernetesui/dashboard-api :1.7.0	60595892c2cf	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7	1
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.36.0 1.23.7	1
kubernetesui/dashboard-metrics-scraper :1.2.2	5154b68252bd	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.36.0 1.23.7	1
kubernetesui/dashboard-metrics-scraper :1.1.1	7747d363c9fe	golang.org/x/net@v0.21.0 stdlib@go1.22.1	0.36.0 1.23.7	1
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7	1
kubernetesui/metrics-scraper :v1.0.8	76049887f07a	golang.org/x/net@v0.0.0-20220524220425-1d687d428aca stdlib@go1.18.2	0.36.0 1.23.7	1
kubesec/kubesec :latest	025a365d9f18	stdlib@go1.23.3	1.23.7	1
kubesec/kubesec :v2.13.0	c0f3b0673578	stdlib@go1.19.7	1.23.7	1
kubeshop/kube-webhook-certgen :0.0.7	866827c379ae	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.36.0 1.23.7	1
kubeshop/kusk-gateway :v1.5.4	8b5bfd57a3ce	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.4	0.36.0 1.23.7	1