CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,746; of 17,805 indexed, latest versions
Container images: 3,305; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,746 of 17,805 indexed charts deploy, on 3,305 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,515
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+148 more	1.23.7	3,203

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,746 by stars

Chart

Latest

Affected images

Radar Score

posteetrivy-operator

2.14.0

2 of 3 See more

postee trivy-operator 2.14.0

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
aquasec/postee :2.12.0-amd64	0795cba777e7	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

4,817

trivy-webhook-elasticsearchtrivy-webhook-elasticsearch

0.1.4

1 of 1 See more

trivy-webhook-elasticsearch trivy-webhook-elasticsearch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/lbi22/trivy-webhook-elasticsearch :v0.1.4	b51b824e4f19	stdlib@go1.22.8	1.23.7

Open the chart page →

755

trouw-servicetrouw-service

1.0.0

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,521

monitorortrozz

0.0.1

1 of 1 See more

monitoror trozz 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.6	0.36.0 1.23.7

Open the chart page →

3,110

clickhouse-operatortruefoundry

0.1.1

2 of 3 See more

clickhouse-operator truefoundry 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.23.3	4baec90b20cd	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.36.0 1.23.7
altinity/metrics-exporter :0.23.3	2912a6c15b44	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.36.0 1.23.7

Open the chart page →

1,432

tfy-cloudflaredtruefoundry

0.6.0

1 of 2 See more

tfy-cloudflared truefoundry 0.6.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/caddy :2.6.3	87cbd356af2e	golang.org/x/net@v0.5.0 stdlib@go1.20	0.36.0 1.23.7

Open the chart page →

2,035

tfy-distributortruefoundry

0.0.1

3 of 4 See more

tfy-distributor truefoundry 0.0.1

3 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	stdlib@go1.21.5	1.23.7
natsio/nats-server-config-reloader :0.14.0	8c28b75bc416	stdlib@go1.20.5	1.23.7
natsio/prometheus-nats-exporter :0.13.0	2adf791d9f9f	stdlib@go1.21.3	1.23.7

Open the chart page →

17,459

tfy-inferentia-operatortruefoundry

0.2.8

3 of 3 See more

tfy-inferentia-operator truefoundry 0.2.8

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	golang.org/x/net@v0.24.0 stdlib@go1.22.12	0.36.0 1.23.7
public.ecr.aws/neuron/neuron-device-plugin :2.23.30.0	75a6d5ce3bd3	golang.org/x/net@v0.23.0 stdlib@go1.20.4	0.36.0 1.23.7
public.ecr.aws/neuron/neuron-scheduler :2.23.30.0	4cd274463e6b	golang.org/x/net@v0.23.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

2,926

tfy-kservetruefoundry

0.1.1

1 of 2 See more

tfy-kserve truefoundry 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kserve/kserve-controller :v0.10.0	22ff858b57c1	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

1,178

tfy-llm-gateway-infratruefoundry

0.2.10

2 of 3 See more

tfy-llm-gateway-infra truefoundry 0.2.10

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.23.7	74315beb57db	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.36.0 1.23.7
altinity/metrics-exporter :0.23.7	a4d7ff0c727e	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.36.0 1.23.7

Open the chart page →

1,210

tfy-lokitruefoundry

0.1.6

2 of 2 See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/loki :2.9.10	35b02acc6765	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7
grafana/promtail :2.9.10	63a2e57a5b14	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

2,828

aws-eks-asg-rolling-update-handlertwin

1.5.0

1 of 1 See more

aws-eks-asg-rolling-update-handler twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
twinproduction/aws-eks-asg-rolling-update-handler :v1.7.0	8f38c206972e	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

1,119

lighthousetwin

1.0.2

1 of 1 See more

lighthouse twin 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/twin/lighthouse :v0.0.4	5aeda2ea2ba2	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

544

twitter-apptwitter-helm

0.1.12

4 of 8 See more

twitter-app twitter-helm 0.1.12

4 of the 8 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.36.0 1.23.7
stakkato95/twitter-service-graphql :0.1.1	3cbe857234f2	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.36.0 1.23.7
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	stdlib@go1.18.3	1.23.7
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

6,150

kafkatwomartens

0.2.1

1 of 2 See more

kafka twomartens 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.7.0	e90b7ba06d97	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

1,570

simple-mongodbtyk-helm

0.1.1

1 of 1 See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.23.7

Open the chart page →

4,147

tyk-bootstraptyk-helm

5.3.0

3 of 3 See more

tyk-bootstrap tyk-helm 5.3.0

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.23.7

Open the chart page →

1,374

tyk-control-planetyk-helm

5.3.0

3 of 7 See more

tyk-control-plane tyk-helm 5.3.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.23.7

Open the chart page →

3,265

tyk-stacktyk-helm

5.3.0

3 of 7 See more

tyk-stack tyk-helm 5.3.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.23.7

Open the chart page →

3,199

typhoontyphoon

0.2.3

2 of 2 See more

typhoon typhoon 0.2.3

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/zeiss/typhoon/controller :0.2.3	4fdf4edfda45	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.36.0 1.23.7
ghcr.io/zeiss/typhoon/typhoon-webhook :0.2.3	78f9b82050bc	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.36.0 1.23.7

Open the chart page →

1,686

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30	1249fc292e84	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.36.0 1.23.7

Open the chart page →

8,698

miniouninettsigma2

1.2.0

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.36.0 1.23.7

Open the chart page →

4,995

kenerunxwares

2026.2.5

1 of 1 See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rajnandan1/kener :3.2.19	30407afca731	stdlib@go1.20.7	1.23.7

Open the chart page →

5,287

phonebook-chartusuladams2

0.2.1

1 of 3 See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.23.7

Open the chart page →

3,176

kiamuswitch

6.1.2

1 of 1 See more

kiam uswitch 6.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/uswitch/kiam :v4.0	be3a5846922d	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.13.8	0.36.0 1.23.7

Open the chart page →

2,972

utho-app-operator-chartutho-operator

0.1.6

1 of 2 See more

utho-app-operator-chart utho-operator 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
utho/utho-app-operator :0.1.4	6e8a690e8b7a	golang.org/x/net@v0.26.0 stdlib@go1.22.8	0.36.0 1.23.7

Open the chart page →

491

gohttpserverutkuozdemir

0.2.0

1 of 1 See more

gohttpserver utkuozdemir 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeskyblue/gohttpserver :latest	caa862590e34	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.3	0.36.0 1.23.7

Open the chart page →

1,899

transmission-exporterutkuozdemir

1.1.0

1 of 1 See more

transmission-exporter utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
metalmatze/transmission-exporter :0.3.0	90d6acb6d47d	stdlib@go1.13	1.23.7

Open the chart page →

1,647

openldap-havcnngr

1.0.0

1 of 3 See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.36.0 1.23.7

Open the chart page →

5,517

verhuis-serviceverhuis-service

1.0.0

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,521

verzoekconversieserviceverzoekconversieservice

1.0.0

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,538

verzoekregistratiecomponentverzoekregistratiecomponent

1.1.0

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,441

verzoektypecatalogusverzoektypecatalogus

1.1.0

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,441

homarrvhdirk

0.1.5

1 of 1 See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/ajnart/homarr :latest	e103abadfb52	stdlib@go1.22.5	1.23.7

Open the chart page →

2,799

scrutinyvhdirk

0.1.3

1 of 1 See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/analogj/scrutiny :master-omnibus	18689773150d	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.20.14	0.36.0 1.23.7

Open the chart page →

4,438

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.7	0.36.0 1.23.7

Open the chart page →

69,328

kube-monitoring-telegram-botviento-repository

1.0.0

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.36.0 1.23.7

Open the chart page →

7,905

vineyard-operatorvineyard

0.24.2

2 of 2 See more

vineyard-operator vineyard 0.24.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vineyardcloudnative/vineyard-operator :latest	9d419aa18faa	golang.org/x/net@v0.23.0 stdlib@go1.19.13	0.36.0 1.23.7
ghcr.io/v6d-io/v6d/kube-rbac-proxy :v0.13.0	a2523c532c0c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

4,575

calibre-webvista

0.1.3

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	stdlib@go1.17.8	1.23.7

Open the chart page →

7,779

vm-console-proxyvm-console-proxy

0.2.0

1 of 1 See more

vm-console-proxy vm-console-proxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/vm-console-proxy :v0.8.0	8d6b4b6e99bd	golang.org/x/net@v0.34.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

645

go-devvoid-xmh

1.0.1

1 of 1 See more

go-dev void-xmh 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
voidxmh/golang :1.19-alpine-dev	423c6195fab2	stdlib@go1.19	1.23.7

Open the chart page →

1,154

volantmqvolantmq

0.1.2

1 of 1 See more

volantmq volantmq 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
volantmq/volantmq :v0.4.0-rc.6	9bfe7857ebc3	stdlib@go1.13.6	1.23.7

Open the chart page →

2,551

vpa-managervpa-manager

0.4.9

1 of 1 See more

vpa-manager vpa-manager 0.4.9

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/jcluppnow/vpa-manager :0.6.4	e459d2fba277	golang.org/x/net@v0.27.0 stdlib@go1.22.7	0.36.0 1.23.7

Open the chart page →

491

cert-manager-webhook-vultrvultr

1.0.0

1 of 1 See more

cert-manager-webhook-vultr vultr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vultr/cert-manager-webhook-vultr :v0.1.0	541c3e0aec58	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.16.3	0.36.0 1.23.7

Open the chart page →

2,508

vultr-csivultr

2.0.0

1 of 4 See more

vultr-csi vultr 2.0.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vultr/vultr-csi :v0.3.0	41d26735d437	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.16.8	0.36.0 1.23.7

Open the chart page →

2,354

websitewaldo-vision

0.33.0

1 of 2 See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/waldo-vision/migrate :v0.3.6	ae31923312ed	stdlib@go1.20.2	1.23.7

Open the chart page →

3,479

kongwallarm

4.6.3

3 of 7 See more

kong wallarm 4.6.3

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wallarm/ingress-python :4.6.0-1	5cb2ae08b40f	stdlib@go1.18.2	1.23.7
wallarm/ingress-ruby :4.6.0-1	aecdb35c4def	stdlib@go1.18.3	1.23.7
wallarm/kong-kubernetes-ingress-controller :2.8	b55ff6cecbd5	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

74,809

kong-previewwallarm

4.2.3

2 of 5 See more

kong-preview wallarm 4.2.3

2 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kong/kubernetes-ingress-controller :2.1.1	60e4102ab2da	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.5	0.36.0 1.23.7
wallarm/ingress-ruby :4.2.1-1	95ea2632326c	stdlib@go1.18.3	1.23.7

Open the chart page →

2,907

wallarm-ingress-rcwallarm

4.8.4

2 of 2 See more

wallarm-ingress-rc wallarm 4.8.4

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wallarm/ingress-controller :4.8.0-1	a591b9c91570	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.36.0 1.23.7

Open the chart page →

2,635

wallarm-node-nextwallarm

0.5.3

2 of 2 See more

wallarm-node-next wallarm 0.5.3

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :5.0.2-1	097cadc42336	golang.org/x/net@v0.26.0 stdlib@go1.22.7	0.36.0 1.23.7
wallarm/node-next :0.5.2	4314f3d2b918	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.36.0 1.23.7

Open the chart page →

2,410

Container images carrying it

3,305 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
moikot/basic-git-server :0.0.2	0d941bd30ffa	stdlib@go1.14.9	1.23.7	1
moikot/smartthings-metrics :0.1.0	8625f53aa9b7	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.13	0.36.0 1.23.7	1
moikot/smartthings-metrics :feat-log-details	fb8565140106	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.15	0.36.0 1.23.7	1
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.6	0.36.0 1.23.7	1
moonrailgun/tianji :1.11.2	b528c8f8fcc4	stdlib@go1.20.12	1.23.7	1
moul/sshportal :v1.19.3	332b603727c3	stdlib@go1.17.6	1.23.7	1
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.13	0.36.0 1.23.7	1
muonsoft/openapi-mock :latest	c9afe1295484	stdlib@go1.20.2	1.23.7	1
murtazashah46/helmfile :latest	4d11726cf803	golang.org/x/net@v0.5.0 stdlib@go1.22.8	0.36.0 1.23.7	1
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/net@v0.24.0 stdlib@go1.22.4	0.36.0 1.23.7	1
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.1	0.36.0 1.23.7	1
mziyabo/fargate-eks-sidecar-injector :latest	3067dce17983	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.36.0 1.23.7	1
n8nio/n8n :1.86.0	8b39ed5a2de9	stdlib@go1.24.0	1.23.7	1
nacos/nacos-peer-finder-plugin :latest	a9c769301fa6	stdlib@go1.13.5	1.23.7	1
nadoo/glider :0.16	38aadefbd607	golang.org/x/net@v0.28.0 stdlib@go1.20.14	0.36.0 1.23.7	1
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.36.0 1.23.7	1
natsio/nats-box :0.13.5	59cf2e949181	stdlib@go1.19.5	1.23.7	1
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	1
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7	1
natsio/nats-kafka :1.4.2	bb241956b0dc	golang.org/x/net@v0.18.0 stdlib@go1.20	0.36.0 1.23.7	1
natsio/nats-operator :0.8.3	1261dae38389	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.10	0.36.0 1.23.7	1
natsio/nats-server-config-reloader :0.14.1	0d50270fa374	stdlib@go1.20.5	1.23.7	1
natsio/nats-server-config-reloader :0.15.0	5b21830a9e9d	stdlib@go1.22.4	1.23.7	1
natsio/nats-server-config-reloader :0.8.0	6bdaceb63aa5	stdlib@go1.19.4	1.23.7	1
natsio/nats-server-config-reloader :0.14.0	8c28b75bc416	stdlib@go1.20.5	1.23.7	1
natsio/nats-server-config-reloader :0.11.0	c3a755eab2cc	stdlib@go1.20.5	1.23.7	1
natsio/prometheus-nats-exporter :0.13.0	2adf791d9f9f	stdlib@go1.21.3	1.23.7	1
natsio/prometheus-nats-exporter :0.10.1	bce728062c4f	stdlib@go1.19.3	1.23.7	1
ncabatoff/process-exporter	6f0549dc24e9	golang.org/x/net@v0.33.0 stdlib@go1.23.1	0.36.0 1.23.7	1
neosu/kubebadges :v0.0.5	256530d8e5c6	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7	1
nerzhul/mc-arm64 :2020.10.03	4215df511f31	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.15.2	0.36.0 1.23.7	1
netapp/trident-operator :21.10.0	49cfe552d9c2	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.36.0 1.23.7	1
netrisai/controller-grpc :4.6.0.007	53178bf173c2	golang.org/x/net@v0.23.0	0.36.0	1
netrisai/controller-web-session-generator :0.2.0	a030a31289f4	stdlib@go1.14.15	1.23.7	1
netrisai/mariadb :10.11.4-debian-11-r46	0aa742a0b906	stdlib@go1.19.11	1.23.7	1
netrisai/mongodb :4.4.4-debian-10-r0	95abfb776bb4	stdlib@go1.15.1	1.23.7	1
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.10	0.36.0 1.23.7	1
nginx/nginx-ingress :1.11.1	eb5b4fd73325	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.11	0.36.0 1.23.7	1
nineinfra/hdfs-operator :v0.7.0	debb1e3410e2	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7	1
nineinfra/kyuubi-operator :v0.7.0	8d8ed87ef77c	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.36.0 1.23.7	1
nineinfra/metastore-operator :v0.7.0	11259032fb04	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.36.0 1.23.7	1
nineinfra/nineinfra :v0.7.0	d4aad414eccd	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7	1
nineinfra/zookeeper-operator :v0.7.0	af6eb2f37bfc	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7	1
nmalhotr/webserver :v1.0.0	3419361fb0dd	stdlib@go1.13.10	1.23.7	1
nocodb/nocodb :0.258.0	6779a4ddedf2	golang.org/x/net@v0.19.0 stdlib@go1.21.10	0.36.0 1.23.7	1
nocodb/nocodb :0.100.2	b0b91ec2a2dd	golang.org/x/net@v0.0.0-20220805013720-a33c5aa5df48 stdlib@go1.18.2	0.36.0 1.23.7	1
nocodb/nocodb :0.84.15	f9b799933aa8	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.8	0.36.0 1.23.7	1
nsqio/nsq :v1.3.0	1a369c146af7	stdlib@go1.21.5	1.23.7	1
ntakashi/cole :1.2.3	f7b68bee2a68	golang.org/x/net@v0.10.0 stdlib@go1.20.11	0.36.0 1.23.7	1
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/net@v0.0.0-20210929161516-d455829e376d stdlib@go1.17.7	0.36.0 1.23.7	1