CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,691; of 17,787 indexed, latest versions
Container images: 3,269; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,691 of 17,787 indexed charts deploy, on 3,269 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,489
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,167

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,691 by stars

Chart

Latest

Affected images

Radar Score

argo-cdargo

10.9.1

1 of 3 See more

argo-cd argo 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.24.0	1.23.7

Open the chart page →

2,989

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

2,745

jupyterhubjupyterhub

4.4.2

1 of 7 See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	golang.org/x/net@v0.23.0	0.36.0

Open the chart page →

7,909

argo-cdargo-cd-oci

10.9.1

1 of 3 See more

argo-cd argo-cd-oci 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.24.0	1.23.7

Open the chart page →

2,989

mimir-distributedgrafana

6.2.0

2 of 6 See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

4,519

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	stdlib@go1.20.5	1.23.7

Open the chart page →

30,167

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	stdlib@go1.21.8	1.23.7

Open the chart page →

11,372

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.36.0 1.23.7

Open the chart page →

2,315

rook-cephrook

1.20.7

1 of 2 See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rook/ceph :v1.20.7	2f970c425617	stdlib@go1.22.10	1.23.7

Open the chart page →

1,447

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	golang.org/x/net@v0.2.0 stdlib@go1.19.5	0.36.0 1.23.7

Open the chart page →

1,445

openebsopenebs

4.6.1

12 of 35 See more

openebs openebs 4.6.1

12 of the 35 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.36.0 1.23.7
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.23.7
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.23.7
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.23.7
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.36.0 1.23.7

Open the chart page →

24,009

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

930

open-webuiopen-webui

16.5.0

1 of 4 See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.23.7

Open the chart page →

1,288

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	golang.org/x/net@v0.12.0 stdlib@go1.20.7	0.36.0 1.23.7
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.1	0.36.0 1.23.7

Open the chart page →

2,883

vpafairwinds-stable

5.0.1

1 of 4 See more

vpa fairwinds-stable 5.0.1

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.36.0 1.23.7

Open the chart page →

1,233

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.18.8	0.36.0 1.23.7

Open the chart page →

2,059

dagsterdagster

1.13.22

1 of 5 See more

dagster dagster 1.13.22

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.23.7

Open the chart page →

3,459

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

2,483

openfaasopenfaas

15.0.13

2 of 6 See more

openfaas openfaas 15.0.13

2 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.23.7
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.23.7

Open the chart page →

3,544

jaeger-operatorjaegertracing

2.57.0

1 of 1 See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	golang.org/x/net@v0.29.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

566

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	stdlib@go1.18.2	1.23.7

Open the chart page →

5,557

vault-secrets-operatorhashicorp

1.5.1

1 of 2 See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/net@v0.28.0 stdlib@go1.23.0	0.36.0 1.23.7

Open the chart page →

1,040

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7

Open the chart page →

1,367

rocketchatrocketchat-server

7.0.2

2 of 12 See more

rocketchat rocketchat-server 7.0.2

2 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.36.0 1.23.7
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.36.0 1.23.7

Open the chart page →

12,283

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

2,102

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.36.0 1.23.7
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.36.0 1.23.7

Open the chart page →

2,943

chaos-meshchaos-mesh

2.8.4

1 of 4 See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.36.0

Open the chart page →

6,362

atlantisatlantis

6.15.1

1 of 1 See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/net@v0.23.0 stdlib@go1.22.1	0.36.0 1.23.7

Open the chart page →

1,892

rabbitmqcloudpirates-rabbitmq

0.21.26

1 of 2 See more

rabbitmq cloudpirates-rabbitmq 0.21.26

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5-management	57bddb6fbc34	stdlib@go1.22.2	1.23.7

Open the chart page →

849

grafana-agentgrafana

0.44.2

2 of 2 See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/net@v0.33.0 stdlib@go1.22.11	0.36.0 1.23.7
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.23.7

Open the chart page →

3,514

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

2,453

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.2	0.36.0 1.23.7
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/net@v0.10.0 stdlib@go1.18.3	0.36.0 1.23.7
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/net@v0.0.0-20220706163947-c90051bbdb60 stdlib@go1.16.15	0.36.0 1.23.7
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.36.0 1.23.7

Open the chart page →

32,353

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.36.0 1.23.7

Open the chart page →

10,648

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	stdlib@go1.23.3	1.23.7

Open the chart page →

2,221

signozsignoz

0.141.1

3 of 5 See more

signoz signoz 0.141.1

3 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.36.0 1.23.7
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.36.0 1.23.7
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.23.7

Open the chart page →

7,582

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.36.0 1.23.7

Open the chart page →

716

bitcoin-corehirosystems

2.1.7

1 of 1 See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
dobtc/bitcoin :25.1	a870f7cb1105	stdlib@go1.19.8	1.23.7

Open the chart page →

4,808

nacosygqygq2

2.1.10

2 of 4 See more

nacos ygqygq2 2.1.10

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
nacos/nacos-peer-finder-plugin :latest	a9c769301fa6	stdlib@go1.13.5	1.23.7
ygqygq2/mysql-exec-sql :latest	54f30def1558	stdlib@go1.18.2	1.23.7

Open the chart page →

4,984

difydouban

0.10.0

3 of 6 See more

dify douban 0.10.0

3 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	stdlib@go1.21.9	1.23.7
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	stdlib@go1.23.3	1.23.7
langgenius/dify-web :1.10.1-fix.1	c306ac577912	stdlib@go1.23.5	1.23.7

Open the chart page →

19,497

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7

Open the chart page →

2,138

pulsarapache

4.7.0

2 of 10 See more

pulsar apache 4.7.0

2 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.19.0 stdlib@go1.24.0	0.36.0 1.23.7
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7

Open the chart page →

9,869

vertical-pod-autoscalercowboysysop

11.1.1

1 of 4 See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	golang.org/x/net@v0.19.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

6,949

difydify-helm

0.38.0

1 of 11 See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.11-debian-11-r12	1161dcd293a0	stdlib@go1.19.9	1.23.7

Open the chart page →

22,115

botkubeinfracloudio

1.14.0

1 of 1 See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	golang.org/x/net@v0.23.0 stdlib@go1.21.13	0.36.0 1.23.7

Open the chart page →

1,097

ambassadordatawire

6.9.5

1 of 2 See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

4,086

rabbitmqgroundhog2k

2.3.8

1 of 2 See more

rabbitmq groundhog2k 2.3.8

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5	1773ab33af6a	stdlib@go1.22.2	1.23.7

Open the chart page →

1,040

oktetookteto

0.0.0-2026-08-17

2 of 10 See more

okteto okteto 0.0.0-2026-08-17

2 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/okteto/buildkit :0.0.0-2026-08-17	14527ca5d2a9	golang.org/x/net@v0.35.0	0.36.0
ghcr.io/okteto/okteto :3.22.0	4585017f52f6	stdlib@go1.24.0	1.23.7

Open the chart page →

5,491

prometheus-msteamsprometheus-msteams

1.3.6

1 of 1 See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/prometheusmsteams/prometheus-msteams :v1.5.3	a9f4d31ab811	golang.org/x/net@v0.7.0	0.36.0

Open the chart page →

941

san-iscsi-csienix

4.0.2

1 of 7 See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
enix/san-iscsi-csi :v4.0.2	f963da81ecf7	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16.8	0.36.0 1.23.7

Open the chart page →

4,159

headscalegabe565

0.16.0

1 of 2 See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

1,985

Container images carrying it

3,269 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
minio/kes :v0.22.2	55f3aef5803e	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b stdlib@go1.19.3	0.36.0 1.23.7	1
minio/kes :2023-04-03T16-41-28Z	f93c2d9088df	golang.org/x/net@v0.7.0 stdlib@go1.20.2	0.36.0 1.23.7	1
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.10	0.36.0 1.23.7	1
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.36.0 1.23.7	1
minio/mc :RELEASE.2022-05-09T04-08-26Z	4b415310d8d0	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.9	0.36.0 1.23.7	1
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.13.8	0.36.0 1.23.7	1
minio/mc :RELEASE.2024-01-16T16-06-34Z	591b097ea2d4	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.36.0 1.23.7	1
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.36.0 1.23.7	1
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.15.5	0.36.0 1.23.7	1
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.5	0.36.0 1.23.7	1
minio/minio :RELEASE.2025-01-20T14-49-07Z-cpuv1	14b7076ca85a	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.36.0 1.23.7	1
minio/minio :RELEASE.2024-05-28T17-19-04Z	391d1d45fdbe	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7	1
minio/minio :RELEASE.2025-03-12T18-04-18Z	46b3009bf704	golang.org/x/net@v0.35.0	0.36.0	1
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.36.0 1.23.7	1
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.36.0 1.23.7	1
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.36.0 1.23.7	1
minio/minio :RELEASE.2023-11-20T22-40-07Z	b833a1699b4f	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7	1
minio/minio :RELEASE.2020-09-17T04-49-20Z	e2b7b633c250	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.9	0.36.0 1.23.7	1
minio/minio :RELEASE.2020-01-03T19-12-21Z	f00aa6ef2b72	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.5	0.36.0 1.23.7	1
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.36.0 1.23.7	1
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.36.0 1.23.7	1
minio/operator :v5.0.9	170b154d2c61	golang.org/x/net@v0.13.0 stdlib@go1.21.1	0.36.0 1.23.7	1
minio/operator :v4.1.0	2adc5be088f5	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.16.3	0.36.0 1.23.7	1
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.13.12	0.36.0 1.23.7	1
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.36.0 1.23.7	1
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582 stdlib@go1.13.9	0.36.0 1.23.7	1
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa stdlib@go1.13.9	0.36.0 1.23.7	1
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.13.9	0.36.0 1.23.7	1
mirrorgitlabcontainers/kubectl :1.13.12	99931bd06b41	stdlib@go1.13.3	1.23.7	1
moby/buildkit :v0.31.0	a095b3d11ce1	golang.org/x/net@v0.35.0	0.36.0	1
moby/buildkit :v0.10.0	c2aeafaed434	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.8	0.36.0 1.23.7	1
moikot/basic-git-server :0.0.2	0d941bd30ffa	stdlib@go1.14.9	1.23.7	1
moikot/smartthings-metrics :0.1.0	8625f53aa9b7	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.13	0.36.0 1.23.7	1
moikot/smartthings-metrics :feat-log-details	fb8565140106	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.15	0.36.0 1.23.7	1
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.6	0.36.0 1.23.7	1
moonrailgun/tianji :1.11.2	b528c8f8fcc4	stdlib@go1.20.12	1.23.7	1
moul/sshportal :v1.19.3	332b603727c3	stdlib@go1.17.6	1.23.7	1
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.13	0.36.0 1.23.7	1
muonsoft/openapi-mock :latest	c9afe1295484	stdlib@go1.20.2	1.23.7	1
murtazashah46/helmfile :latest	4d11726cf803	golang.org/x/net@v0.5.0 stdlib@go1.22.8	0.36.0 1.23.7	1
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/net@v0.24.0 stdlib@go1.22.4	0.36.0 1.23.7	1
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.1	0.36.0 1.23.7	1
mziyabo/fargate-eks-sidecar-injector :latest	3067dce17983	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.36.0 1.23.7	1
n8nio/n8n :1.86.0	8b39ed5a2de9	stdlib@go1.24.0	1.23.7	1
nacos/nacos-peer-finder-plugin :latest	a9c769301fa6	stdlib@go1.13.5	1.23.7	1
nadoo/glider :0.16	38aadefbd607	golang.org/x/net@v0.28.0 stdlib@go1.20.14	0.36.0 1.23.7	1
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.36.0 1.23.7	1
natsio/nats-box :0.13.5	59cf2e949181	stdlib@go1.19.5	1.23.7	1
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	1
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7	1