CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,746; of 17,805 indexed, latest versions
Container images: 3,305; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,746 of 17,805 indexed charts deploy, on 3,305 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,515
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+148 more	1.23.7	3,203

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,746 by stars

Chart

Latest

Affected images

Radar Score

posteetrivy-operator

2.14.0

2 of 3 See more

postee trivy-operator 2.14.0

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
aquasec/postee :2.12.0-amd64	0795cba777e7	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

4,817

trivy-webhook-elasticsearchtrivy-webhook-elasticsearch

0.1.4

1 of 1 See more

trivy-webhook-elasticsearch trivy-webhook-elasticsearch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/lbi22/trivy-webhook-elasticsearch :v0.1.4	b51b824e4f19	stdlib@go1.22.8	1.23.7

Open the chart page →

755

trouw-servicetrouw-service

1.0.0

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,521

monitorortrozz

0.0.1

1 of 1 See more

monitoror trozz 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14.6	0.36.0 1.23.7

Open the chart page →

3,110

clickhouse-operatortruefoundry

0.1.1

2 of 3 See more

clickhouse-operator truefoundry 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.23.3	4baec90b20cd	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.36.0 1.23.7
altinity/metrics-exporter :0.23.3	2912a6c15b44	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.36.0 1.23.7

Open the chart page →

1,432

tfy-cloudflaredtruefoundry

0.6.0

1 of 2 See more

tfy-cloudflared truefoundry 0.6.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/caddy :2.6.3	87cbd356af2e	golang.org/x/net@v0.5.0 stdlib@go1.20	0.36.0 1.23.7

Open the chart page →

2,035

tfy-distributortruefoundry

0.0.1

3 of 4 See more

tfy-distributor truefoundry 0.0.1

3 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	stdlib@go1.21.5	1.23.7
natsio/nats-server-config-reloader :0.14.0	8c28b75bc416	stdlib@go1.20.5	1.23.7
natsio/prometheus-nats-exporter :0.13.0	2adf791d9f9f	stdlib@go1.21.3	1.23.7

Open the chart page →

17,459

tfy-inferentia-operatortruefoundry

0.2.8

3 of 3 See more

tfy-inferentia-operator truefoundry 0.2.8

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	golang.org/x/net@v0.24.0 stdlib@go1.22.12	0.36.0 1.23.7
public.ecr.aws/neuron/neuron-device-plugin :2.23.30.0	75a6d5ce3bd3	golang.org/x/net@v0.23.0 stdlib@go1.20.4	0.36.0 1.23.7
public.ecr.aws/neuron/neuron-scheduler :2.23.30.0	4cd274463e6b	golang.org/x/net@v0.23.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

2,926

tfy-kservetruefoundry

0.1.1

1 of 2 See more

tfy-kserve truefoundry 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kserve/kserve-controller :v0.10.0	22ff858b57c1	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

1,178

tfy-llm-gateway-infratruefoundry

0.2.10

2 of 3 See more

tfy-llm-gateway-infra truefoundry 0.2.10

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.23.7	74315beb57db	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.36.0 1.23.7
altinity/metrics-exporter :0.23.7	a4d7ff0c727e	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.36.0 1.23.7

Open the chart page →

1,210

tfy-lokitruefoundry

0.1.6

2 of 2 See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/loki :2.9.10	35b02acc6765	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7
grafana/promtail :2.9.10	63a2e57a5b14	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

2,828

aws-eks-asg-rolling-update-handlertwin

1.5.0

1 of 1 See more

aws-eks-asg-rolling-update-handler twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
twinproduction/aws-eks-asg-rolling-update-handler :v1.7.0	8f38c206972e	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

1,119

lighthousetwin

1.0.2

1 of 1 See more

lighthouse twin 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/twin/lighthouse :v0.0.4	5aeda2ea2ba2	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

544

twitter-apptwitter-helm

0.1.12

4 of 8 See more

twitter-app twitter-helm 0.1.12

4 of the 8 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.36.0 1.23.7
stakkato95/twitter-service-graphql :0.1.1	3cbe857234f2	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.36.0 1.23.7
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	stdlib@go1.18.3	1.23.7
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

6,150

kafkatwomartens

0.2.1

1 of 2 See more

kafka twomartens 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.7.0	e90b7ba06d97	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

1,570

simple-mongodbtyk-helm

0.1.1

1 of 1 See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.23.7

Open the chart page →

4,147

tyk-bootstraptyk-helm

5.3.0

3 of 3 See more

tyk-bootstrap tyk-helm 5.3.0

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.23.7

Open the chart page →

1,374

tyk-control-planetyk-helm

5.3.0

3 of 7 See more

tyk-control-plane tyk-helm 5.3.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.23.7

Open the chart page →

3,265

tyk-stacktyk-helm

5.3.0

3 of 7 See more

tyk-stack tyk-helm 5.3.0

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0 stdlib@go1.22.7	0.36.0 1.23.7
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.23.7

Open the chart page →

3,199

typhoontyphoon

0.2.3

2 of 2 See more

typhoon typhoon 0.2.3

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/zeiss/typhoon/controller :0.2.3	4fdf4edfda45	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.36.0 1.23.7
ghcr.io/zeiss/typhoon/typhoon-webhook :0.2.3	78f9b82050bc	golang.org/x/net@v0.35.0 stdlib@go1.24.0	0.36.0 1.23.7

Open the chart page →

1,686

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30	1249fc292e84	golang.org/x/net@v0.23.0 stdlib@go1.22.9	0.36.0 1.23.7

Open the chart page →

8,698

miniouninettsigma2

1.2.0

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.36.0 1.23.7

Open the chart page →

4,995

kenerunxwares

2026.2.5

1 of 1 See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rajnandan1/kener :3.2.19	30407afca731	stdlib@go1.20.7	1.23.7

Open the chart page →

5,287

phonebook-chartusuladams2

0.2.1

1 of 3 See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.23.7

Open the chart page →

3,176

kiamuswitch

6.1.2

1 of 1 See more

kiam uswitch 6.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/uswitch/kiam :v4.0	be3a5846922d	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.13.8	0.36.0 1.23.7

Open the chart page →

2,972

utho-app-operator-chartutho-operator

0.1.6

1 of 2 See more

utho-app-operator-chart utho-operator 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
utho/utho-app-operator :0.1.4	6e8a690e8b7a	golang.org/x/net@v0.26.0 stdlib@go1.22.8	0.36.0 1.23.7

Open the chart page →

491

gohttpserverutkuozdemir

0.2.0

1 of 1 See more

gohttpserver utkuozdemir 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
codeskyblue/gohttpserver :latest	caa862590e34	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.3	0.36.0 1.23.7

Open the chart page →

1,899

transmission-exporterutkuozdemir

1.1.0

1 of 1 See more

transmission-exporter utkuozdemir 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
metalmatze/transmission-exporter :0.3.0	90d6acb6d47d	stdlib@go1.13	1.23.7

Open the chart page →

1,647

openldap-havcnngr

1.0.0

1 of 3 See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.36.0 1.23.7

Open the chart page →

5,517

verhuis-serviceverhuis-service

1.0.0

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,521

verzoekconversieserviceverzoekconversieservice

1.0.0

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,538

verzoekregistratiecomponentverzoekregistratiecomponent

1.1.0

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,441

verzoektypecatalogusverzoektypecatalogus

1.1.0

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,441

homarrvhdirk

0.1.5

1 of 1 See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/ajnart/homarr :latest	e103abadfb52	stdlib@go1.22.5	1.23.7

Open the chart page →

2,799

scrutinyvhdirk

0.1.3

1 of 1 See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/analogj/scrutiny :master-omnibus	18689773150d	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.20.14	0.36.0 1.23.7

Open the chart page →

4,438

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.7	0.36.0 1.23.7

Open the chart page →

69,328

kube-monitoring-telegram-botviento-repository

1.0.0

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.36.0 1.23.7

Open the chart page →

7,905

vineyard-operatorvineyard

0.24.2

2 of 2 See more

vineyard-operator vineyard 0.24.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vineyardcloudnative/vineyard-operator :latest	9d419aa18faa	golang.org/x/net@v0.23.0 stdlib@go1.19.13	0.36.0 1.23.7
ghcr.io/v6d-io/v6d/kube-rbac-proxy :v0.13.0	a2523c532c0c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

4,575

calibre-webvista

0.1.3

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	stdlib@go1.17.8	1.23.7

Open the chart page →

7,779

vm-console-proxyvm-console-proxy

0.2.0

1 of 1 See more

vm-console-proxy vm-console-proxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/vm-console-proxy :v0.8.0	8d6b4b6e99bd	golang.org/x/net@v0.34.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

645

go-devvoid-xmh

1.0.1

1 of 1 See more

go-dev void-xmh 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
voidxmh/golang :1.19-alpine-dev	423c6195fab2	stdlib@go1.19	1.23.7

Open the chart page →

1,154

volantmqvolantmq

0.1.2

1 of 1 See more

volantmq volantmq 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
volantmq/volantmq :v0.4.0-rc.6	9bfe7857ebc3	stdlib@go1.13.6	1.23.7

Open the chart page →

2,551

vpa-managervpa-manager

0.4.9

1 of 1 See more

vpa-manager vpa-manager 0.4.9

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/jcluppnow/vpa-manager :0.6.4	e459d2fba277	golang.org/x/net@v0.27.0 stdlib@go1.22.7	0.36.0 1.23.7

Open the chart page →

491

cert-manager-webhook-vultrvultr

1.0.0

1 of 1 See more

cert-manager-webhook-vultr vultr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vultr/cert-manager-webhook-vultr :v0.1.0	541c3e0aec58	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.16.3	0.36.0 1.23.7

Open the chart page →

2,508

vultr-csivultr

2.0.0

1 of 4 See more

vultr-csi vultr 2.0.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vultr/vultr-csi :v0.3.0	41d26735d437	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf stdlib@go1.16.8	0.36.0 1.23.7

Open the chart page →

2,354

websitewaldo-vision

0.33.0

1 of 2 See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/waldo-vision/migrate :v0.3.6	ae31923312ed	stdlib@go1.20.2	1.23.7

Open the chart page →

3,479

kongwallarm

4.6.3

3 of 7 See more

kong wallarm 4.6.3

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wallarm/ingress-python :4.6.0-1	5cb2ae08b40f	stdlib@go1.18.2	1.23.7
wallarm/ingress-ruby :4.6.0-1	aecdb35c4def	stdlib@go1.18.3	1.23.7
wallarm/kong-kubernetes-ingress-controller :2.8	b55ff6cecbd5	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

74,809

kong-previewwallarm

4.2.3

2 of 5 See more

kong-preview wallarm 4.2.3

2 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kong/kubernetes-ingress-controller :2.1.1	60e4102ab2da	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.5	0.36.0 1.23.7
wallarm/ingress-ruby :4.2.1-1	95ea2632326c	stdlib@go1.18.3	1.23.7

Open the chart page →

2,907

wallarm-ingress-rcwallarm

4.8.4

2 of 2 See more

wallarm-ingress-rc wallarm 4.8.4

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wallarm/ingress-controller :4.8.0-1	a591b9c91570	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.36.0 1.23.7

Open the chart page →

2,635

wallarm-node-nextwallarm

0.5.3

2 of 2 See more

wallarm-node-next wallarm 0.5.3

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :5.0.2-1	097cadc42336	golang.org/x/net@v0.26.0 stdlib@go1.22.7	0.36.0 1.23.7
wallarm/node-next :0.5.2	4314f3d2b918	golang.org/x/net@v0.28.0 stdlib@go1.22.7	0.36.0 1.23.7

Open the chart page →

2,410

Container images carrying it

3,305 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
nvidia/dcgm-exporter :2.2.9-2.4.1-ubuntu20.04	91b20b66d1cd	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.2	0.36.0 1.23.7	1
oamdev/cluster-gateway :v1.9.0-alpha.2	5591e29d66a2	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.36.0 1.23.7	1
oamdev/cluster-gateway :v1.4.0	dc97164c4c1f	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.10	0.36.0 1.23.7	1
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.10	0.36.0 1.23.7	1
oamdev/kube-webhook-certgen :v2.3	31e0892f3583	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.9	0.36.0 1.23.7	1
oamdev/terraform-controller :v0.8.0	70447f4d360a	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.36.0 1.23.7	1
oamdev/vector-controller :v0.2.3	9dd8be44ffc9	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.13	0.36.0 1.23.7	1
oamdev/vela-prism :v1.6.0	6db6a937647d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.3	0.36.0 1.23.7	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	golang.org/x/net@v0.21.0 stdlib@go1.22.5	0.36.0 1.23.7	1
ofekmeister/csi-gcs :v0.9.0	30d70fa9211b	golang.org/x/net@v0.0.0-20220513224357-95641704303c stdlib@go1.18.2	0.36.0 1.23.7	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	golang.org/x/net@v0.21.0 stdlib@go1.21.10	0.36.0 1.23.7	1
okgolove/asprom :1.10.1	974d2e5eb150	stdlib@go1.14.11	1.23.7	1
okteto/civo-webhook :0.5.3	57cd51176538	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.36.0 1.23.7	1
oliver006/redis_exporter :v1.11.1	04d958d209ab	stdlib@go1.15	1.23.7	1
oliver006/redis_exporter :v1.67.0	120f7ec77293	stdlib@go1.23.4	1.23.7	1
oliver006/redis_exporter :v1.14.0	d55e056987af	stdlib@go1.15.6	1.23.7	1
oliver006/redis_exporter :v1.66.0	d98e6db8094f	stdlib@go1.23.2	1.23.7	1
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.3	0.36.0 1.23.7	1
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.2	0.36.0 1.23.7	1
opea/codegen-ui :1.0	2bee4eb66f3e	stdlib@go1.20.7	1.23.7	1
opea/codetrans-ui :1.0	3ef121f34610	stdlib@go1.20.12	1.23.7	1
opea/docsum-ui :1.0	7f854e9bffaf	stdlib@go1.20.12	1.23.7	1
opea/gmcmanager :1.0	514af17c495c	golang.org/x/net@v0.25.0 stdlib@go1.21.13	0.36.0 1.23.7	1
openbas/caldera-server :5.1.0	a277796d9724	golang-1.19@1.19.8-2 golang.org/x/net@v0.14.0 stdlib@go1.19.8	no fix listed 0.36.0 1.23.7	1
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.5	0.36.0 1.23.7	1
opencsghq/agenticflow :ee-v0.6.5-2	41cba9c366f1	stdlib@go1.19.8	1.23.7	1
opencsghq/csghub-portal :v2.5.0-ee	1cb36b49151e	golang.org/x/net@v0.28.0 stdlib@go1.23.3	0.36.0 1.23.7	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	golang.org/x/net@v0.29.0 stdlib@go1.22.7	0.36.0 1.23.7	1
opencsghq/lws :v0.6.1	de15437db41b	stdlib@go1.24.0	1.23.7	1
opendatacube/explorer :latest	120457ffcd69	stdlib@go1.22.2	1.23.7	1
openebs/provisioner-nfs :0.11.0	4f41dd782761	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.36.0 1.23.7	1
openenergyprojects/modbus_exporter :20230617_a144551	58990f24fb25	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.36.0 1.23.7	1
openkruise/kruise-game-manager :v1.1.0	d3c6d69d2c39	stdlib@go1.23.4	1.23.7	1
openkruise/kruise-manager :v1.8.3	0482722b4e56	golang.org/x/net@v0.33.0 stdlib@go1.22.11	0.36.0 1.23.7	1
openkruise/kruise-rollout :v0.6.2	a75e6739ea7d	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.36.0 1.23.7	1
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.36.0 1.23.7	1
openmined/syft-frontend :0.9.5	d11524a3854a	stdlib@go1.20.5	1.23.7	1
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/net@v0.21.0 stdlib@go1.22.1	0.36.0 1.23.7	1
opennms/sentinel :36.0.2	88869082a14f	golang.org/x/net@v0.29.0 stdlib@go1.22.2	0.36.0 1.23.7	1
openpolicyagent/gatekeeper :v3.17.1	b7b4d7cfdd52	golang.org/x/net@v0.27.0 stdlib@go1.22.7	0.36.0 1.23.7	1
openpolicyagent/gatekeeper-crds :v3.17.1	77bc9bf3d163	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7	1
openpolicyagent/opa :0.53.1	6a58dea59933	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.36.0 1.23.7	1
openproject/community :12.0.2	734743d11094	stdlib@go1.17	1.23.7	1
openruntimes/executor :0.11.4	2228f186dcbb	stdlib@go1.21.10	1.23.7	1
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	stdlib@go1.20.6	1.23.7	1
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	golang.org/x/net@v0.0.0-20200520182314-0ba52f642ac2 stdlib@go1.14.7	0.36.0 1.23.7	1
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.36.0 1.23.7	1
oranhack7/solidproject :77	c6453942223f	stdlib@go1.21.7	1.23.7	1
orbitalreg/orbitalreg-api :0.1.0	45f2620337af	golang.org/x/net@v0.28.0 stdlib@go1.22.12	0.36.0 1.23.7	1
oryd/hydra :v2.3.0	b94007e19a1f	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.36.0 1.23.7	1