CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,687; of 17,797 indexed, latest versions
Container images: 3,263; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,687 of 17,797 indexed charts deploy, on 3,263 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,484
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,164

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,687 by stars

Chart

Latest

Affected images

Radar Score

powerdnsfsdrw08

0.1.3

1 of 4 See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
pschiffe/pdns-mysql :alpine	d196c796cafb	stdlib@go1.21.5	1.23.7

Open the chart page →

1,959

aptlyg0dscookie

0.4.0

1 of 2 See more

aptly g0dscookie 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	stdlib@go1.18.3	1.23.7

Open the chart page →

3,482

icinga2g0dscookie

0.2.0

1 of 1 See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.18.1	0.36.0 1.23.7

Open the chart page →

4,429

passboltg0dscookie

0.5.2

2 of 2 See more

passbolt g0dscookie 0.5.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mariadb :10.7	9a48ac9f196f	stdlib@go1.16.7	1.23.7
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	stdlib@go1.14.4	1.23.7

Open the chart page →

7,994

borgmaticgabe565

0.10.1

1 of 1 See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/borgmatic-collective/borgmatic :1.9.9	835b72878606	stdlib@go1.23.5	1.23.7

Open the chart page →

2,438

castsponsorskipgabe565

0.8.1

1 of 1 See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

1,237

gotifygabe565

0.4.0

1 of 1 See more

gotify gabe565 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/gotify/server :2.6.1	04f4c4bb7cdd	golang.org/x/net@v0.25.0 stdlib@go1.23.3	0.36.0 1.23.7

Open the chart page →

763

hammondgabe565

0.6.4

1 of 1 See more

hammond gabe565 0.6.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.36.0 1.23.7

Open the chart page →

1,807

limogabe565

0.8.0

1 of 1 See more

limo gabe565 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	stdlib@go1.20.12	1.23.7

Open the chart page →

1,330

matrimonygabe565

0.7.0

1 of 1 See more

matrimony gabe565 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/matrimony :latest	d39a9d7c3e1b	stdlib@go1.22.0	1.23.7

Open the chart page →

1,136

podgrabgabe565

0.5.2

1 of 1 See more

podgrab gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/akhilrex/podgrab :1.0.0	bce133f3f511	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.2	0.36.0 1.23.7

Open the chart page →

2,401

scanservjsgabe565

0.9.2

1 of 1 See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	stdlib@go1.19.8	1.23.7

Open the chart page →

13,281

smarter-device-managergabe565

0.5.2

1 of 1 See more

smarter-device-manager gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.1	0.36.0 1.23.7

Open the chart page →

1,226

galoygaloymoney

0.34.7

4 of 24 See more

galoy galoymoney 0.34.7

4 of the 24 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.36.0 1.23.7
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.36.0 1.23.7
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

8,700

galoy-depsgaloymoney

0.10.20

8 of 9 See more

galoy-deps galoymoney 0.10.20

8 of the 9 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.36.0 1.23.7
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.36.0 1.23.7

Open the chart page →

11,982

lndgaloymoney

0.10.6

1 of 3 See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

2,161

monitoringgaloymoney

0.12.21

5 of 6 See more

monitoring galoymoney 0.12.21

5 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

5,316

galoygaloymoney2

0.34.7

4 of 24 See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.36.0 1.23.7
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.36.0 1.23.7
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

8,700

galoy-depsgaloymoney2

0.10.20

8 of 9 See more

galoy-deps galoymoney2 0.10.20

8 of the 9 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.36.0 1.23.7
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.36.0 1.23.7

Open the chart page →

11,982

lndgaloymoney2

0.10.6

1 of 3 See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

2,161

monitoringgaloymoney2

0.12.21

5 of 6 See more

monitoring galoymoney2 0.12.21

5 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

5,316

alertmanager-discordgeek-cookbook

1.3.2

1 of 1 See more

alertmanager-discord geek-cookbook 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rogerrum/alertmanager-discord :1.0.3	827593369625	stdlib@go1.17.4	1.23.7

Open the chart page →

1,045

anonaddygeek-cookbook

6.0.0

1 of 1 See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
anonaddy/anonaddy :0.12.3	957a95565166	stdlib@go1.18.3	1.23.7

Open the chart page →

4,790

apache-musicindexgeek-cookbook

2.4.2

1 of 1 See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	stdlib@go1.18.4	1.23.7

Open the chart page →

14,716

autobrrgeek-cookbook

1.1.3

1 of 1 See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

2,236

calibre-webgeek-cookbook

8.4.2

1 of 1 See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :version-0.6.12	938810eca3d3	stdlib@go1.16.7	1.23.7

Open the chart page →

16,221

dendritegeek-cookbook

6.4.0

1 of 1 See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.5	0.36.0 1.23.7

Open the chart page →

2,144

embygeek-cookbook

3.4.2

1 of 1 See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	stdlib@go1.15	1.23.7

Open the chart page →

8,597

gatusgeek-cookbook

1.1.2

1 of 1 See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7

Open the chart page →

1,881

gonicgeek-cookbook

6.4.2

1 of 1 See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.16.4	0.36.0 1.23.7

Open the chart page →

3,525

gotifygeek-cookbook

1.2.2

1 of 1 See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
gotify/server :2.1.4	09c79bc1e403	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16	0.36.0 1.23.7

Open the chart page →

3,132

haste-servergeek-cookbook

3.4.2

1 of 1 See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	stdlib@go1.15	1.23.7

Open the chart page →

11,060

jackettgeek-cookbook

11.7.2

1 of 1 See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	stdlib@go1.18.3	1.23.7

Open the chart page →

9,749

lidarrgeek-cookbook

14.2.2

1 of 1 See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	stdlib@go1.16.7	1.23.7

Open the chart page →

14,320

maddygeek-cookbook

3.2.0

1 of 1 See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/net@v0.0.0-20211011170408-caeb26a5c8c0 stdlib@go1.17.2	0.36.0 1.23.7

Open the chart page →

2,630

minifluxgeek-cookbook

5.2.0

1 of 2 See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/net@v0.0.0-20210916014120-12bc252f5db8 stdlib@go1.17.8	0.36.0 1.23.7

Open the chart page →

2,430

navidromegeek-cookbook

6.4.2

1 of 1 See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.36.0 1.23.7

Open the chart page →

3,597

nullservgeek-cookbook

2.4.2

1 of 1 See more

nullserv geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nullserv :v1.3.0	0792c7e6d814	stdlib@go1.16.5	1.23.7

Open the chart page →

1,118

nzbgetgeek-cookbook

12.4.2

1 of 1 See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	stdlib@go1.18.4	1.23.7

Open the chart page →

12,150

nzbhydra2geek-cookbook

10.4.2

1 of 1 See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	stdlib@go1.15	1.23.7

Open the chart page →

17,776

owncloud-ocisgeek-cookbook

2.4.2

1 of 1 See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.5	0.36.0 1.23.7

Open the chart page →

3,243

photoprismgeek-cookbook

7.2.0

1 of 1 See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
photoprism/photoprism :220629-jammy	2954334adbda	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

19,581

pod-gatewaygeek-cookbook

5.6.2

1 of 2 See more

pod-gateway geek-cookbook 5.6.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/gateway-admision-controller :v3.5.0	175512bb3f61	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

2,355

pod-gateway-settergeek-cookbook

1.0.0

1 of 1 See more

pod-gateway-setter geek-cookbook 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/gateway-admision-controller :v2.0.0	0d6d0df98fe4	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.4	0.36.0 1.23.7

Open the chart page →

1,641

qbittorrentgeek-cookbook

13.5.2

1 of 1 See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	stdlib@go1.16.8	1.23.7

Open the chart page →

11,873

radarrgeek-cookbook

16.3.2

1 of 1 See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	stdlib@go1.18.4	1.23.7

Open the chart page →

10,431

readarrgeek-cookbook

6.4.2

1 of 1 See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/readarr :v0.1.0.715	ad943e9309e4	stdlib@go1.15	1.23.7

Open the chart page →

7,818

rtsp-to-webgeek-cookbook

2.2.2

1 of 1 See more

rtsp-to-web geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.36.0

Open the chart page →

1,467

satisfactorygeek-cookbook

1.2.2

1 of 1 See more

satisfactory geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :latest	e103700ae6ae	stdlib@go1.18.1	1.23.7

Open the chart page →

3,476

searxgeek-cookbook

5.6.2

3 of 4 See more

searx geek-cookbook 5.6.2

3 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
dalf/filtron :latest	b19cbf5b2f37	stdlib@go1.18.2	1.23.7
dalf/morty :latest	248a4849c350	golang.org/x/net@v0.0.0-20220421235706-1d1ef9303861 stdlib@go1.18.2	0.36.0 1.23.7
library/caddy :2.2.0-alpine	7367adca165f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.36.0 1.23.7

Open the chart page →

7,477

Container images carrying it

3,263 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.18.5	0.36.0 1.23.7	1
phntom/codimd :2.4.3	1b9aafbb62e6	stdlib@go1.16	1.23.7	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.2	0.36.0 1.23.7	1
phntom/goalert :0.0.29	8ca4df55499b	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.36.0 1.23.7	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	golang.org/x/net@v0.17.0 stdlib@go1.20.7	0.36.0 1.23.7	1
phntom/mindav :0.1.7-kix3	5695f546abbb	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.16.2	0.36.0 1.23.7	1
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/net@v0.0.0-20221012135044-0b7e1fb9d458 stdlib@go1.19.2	0.36.0 1.23.7	1
photoprism/photoprism :231128-ce	284de9cc4f9c	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.36.0 1.23.7	1
photoprism/photoprism :220629-jammy	2954334adbda	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.3	0.36.0 1.23.7	1
photoprism/photoprism :240711-ce	fc6fd632ca74	golang.org/x/net@v0.27.0 stdlib@go1.22.5	0.36.0 1.23.7	1
piblokto/backlokto-operator :v0.0.20	963cda71e393	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.36.0 1.23.7	1
pinclr/v2ray-proxy :latest	f37f250b7091	golang.org/x/net@v0.7.0 stdlib@go1.20.2	0.36.0 1.23.7	1
platform9community/admin-server :latest	de3fa9b70df1	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.36.0 1.23.7	1
platform9community/api-gateway :latest	40a4970de568	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.36.0 1.23.7	1
platform9community/customers-service :latest	2089811e5cc6	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.36.0 1.23.7	1
platform9community/vets-service :latest	d1165c94dfb3	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.15.11	0.36.0 1.23.7	1
platform9community/visits-service :latest	8d11b50368c6	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.4	0.36.0 1.23.7	1
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	stdlib@go1.21.2	1.23.7	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.12	0.36.0 1.23.7	1
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	stdlib@go1.13.10	1.23.7	1
pnnlmiscscripts/pixiecore :1.0.1-1	c6f17741a0d7	golang.org/x/net@v0.7.0	0.36.0	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.36.0 1.23.7	1
polyaxon/training-operator :2.1.0	b5b29deaec9a	golang.org/x/net@v0.17.0 stdlib@go1.20.13	0.36.0 1.23.7	1
pomerium/pomerium :v0.22.1	9c69b10a2126	golang.org/x/net@v0.9.0 stdlib@go1.20.3	0.36.0 1.23.7	1
portainer/portainer-ce :2.18.4-alpine	3e61aaee1341	golang.org/x/net@v0.7.0 stdlib@go1.19.4	0.36.0 1.23.7	1
postgis/postgis :17-3.4-alpine	5a1dbedac34e	stdlib@go1.18.2	1.23.7	1
postgis/postgis :11-2.5	f479f6c3435e	stdlib@go1.16.7	1.23.7	1
pozetroninc/liftbridge :v1.1.0	79fd6b9d93e6	golang.org/x/net@v0.0.0-20191021144547-ec77196f6094 stdlib@go1.13.12	0.36.0 1.23.7	1
pozetroninc/rethinkdb-cluster :v2.4.1	6b06a098f994	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.16.9	0.36.0 1.23.7	1
prathamkrishna/dicedb :v1	a7298180cd24	stdlib@go1.23.2	1.23.7	1
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.36.0 1.23.7	1
prodrigestivill/postgres-backup-local :12-alpine-8d72d2d	6ed2afadc326	stdlib@go1.16	1.23.7	1
prodrigestivill/postgres-backup-local :latest	f70742ebe42b	stdlib@go1.22.6	1.23.7	1
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.19.3	0.36.0 1.23.7	1
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/net@v0.0.0-20220728211354-c7608f3a8462 stdlib@go1.18.5	0.36.0 1.23.7	1
prom/blackbox-exporter :v0.25.0	b04a9fef4fa0	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7	1
prom/blackbox-exporter :v0.23.0	ca04aa9d9093	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.36.0 1.23.7	1
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7	1
prometheuscommunity/elasticsearch-exporter :v1.3.0	fe735268fbdc	stdlib@go1.16.9	1.23.7	1
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7	1
prom/graphite-exporter :v0.16.0	e54bca6645ea	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.36.0 1.23.7	1
prom/influxdb-exporter :v0.11.4	27e33e18634a	stdlib@go1.19.9	1.23.7	1
prom/influxdb-exporter :v0.9.0	f63fd77c05ee	stdlib@go1.17.8	1.23.7	1
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.2	0.36.0 1.23.7	1
prom/memcached-exporter :v0.15.0	bb01ad25e9fc	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.36.0 1.23.7	1
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.36.0 1.23.7	1
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.36.0 1.23.7	1
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.14.2	0.36.0 1.23.7	1
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7	1
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.36.0 1.23.7	1