CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,690; of 17,803 indexed, latest versions
Container images: 3,267; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,690 of 17,803 indexed charts deploy, on 3,267 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,486
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+148 more	1.23.7	3,167

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,690 by stars

Chart

Latest

Affected images

Radar Score

lokikubeblocks

5.39.0

3 of 5 See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.34.1	045c9125634c	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.36.0 1.23.7
grafana/loki :2.9.2	6074e01dbe03	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7
grafana/loki-canary :2.9.2	4249db29b992	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

5,862

metallbkubeblocks

0.14.4

2 of 3 See more

metallb kubeblocks 0.14.4

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.14.4	bbef1ee3e7d3	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.36.0 1.23.7
quay.io/metallb/speaker :v0.14.4	37611bde45a2	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

2,600

metrics-serverkubeblocks

3.12.0

1 of 1 See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	golang.org/x/net@v0.20.0 stdlib@go1.21.6	0.36.0 1.23.7

Open the chart page →

1,145

nvidia-gpu-exporterkubeblocks

0.3.1

1 of 1 See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17	0.36.0 1.23.7

Open the chart page →

4,516

openebskubeblocks

3.10.0

3 of 3 See more

openebs kubeblocks 3.10.0

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.36.0 1.23.7

Open the chart page →

10,613

postgres-operatorkubeblocks

1.12.2

1 of 1 See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

1,555

prometheuskubeblocks

15.16.1

6 of 6 See more

prometheus kubeblocks 15.16.1

6 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.23.7
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.36.0 1.23.7
quay.io/prometheus/alertmanager :v0.24.0	088464f949de	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.8	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.3	0.36.0 1.23.7
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9 stdlib@go1.19.2	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

10,321

smartfs-csi-driverkubeblocks

0.1.2

1 of 6 See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.36.0 1.23.7

Open the chart page →

9,257

snapshot-controllerkubeblocks

1.7.2

1 of 1 See more

snapshot-controller kubeblocks 1.7.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v6.2.1	98bab4eaf23c	golang.org/x/net@v0.4.0 stdlib@go1.19	0.36.0 1.23.7

Open the chart page →

1,128

spiderpoolkubeblocks

1.2.0

2 of 4 See more

spiderpool kubeblocks 1.2.0

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	golang.org/x/net@v0.23.0 stdlib@go1.23.4	0.36.0 1.23.7
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	stdlib@go1.23.3	1.23.7

Open the chart page →

8,498

vaultkubeblocks

0.30.0

2 of 2 See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.19.0	bbb7f98dc67d	golang.org/x/net@v0.35.0 stdlib@go1.23.6	0.36.0 1.23.7
hashicorp/vault-k8s :1.6.2	103a2d817a74	golang.org/x/net@v0.35.0 stdlib@go1.23.6	0.36.0 1.23.7

Open the chart page →

3,042

victoria-metrics-alertkubeblocks

0.8.3-reload

3 of 3 See more

victoria-metrics-alert kubeblocks 0.8.3-reload

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.23.7
victoriametrics/vmalert :v1.95.1	a83e5db0897a	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.36.0 1.23.7
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

3,716

kubeclaritykubeclarity

2.23.3

3 of 5 See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/net@v0.14.0 stdlib@go1.20.4	0.36.0 1.23.7
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.36.0 1.23.7
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.36.0 1.23.7

Open the chart page →

5,521

listener-operatorkubedoop

0.4.0

4 of 6 See more

listener-operator kubedoop 0.4.0

4 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/sig-storage/csi-provisioner :v5.1.0	672e45d6a556	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.36.0 1.23.7
quay.io/zncdatadev/sig-storage/livenessprobe :v2.14.0	33692aed26aa	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.36.0 1.23.7
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

4,534

secret-operatorkubedoop

0.4.0

4 of 5 See more

secret-operator kubedoop 0.4.0

4 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/sig-storage/csi-provisioner :v5.1.0	672e45d6a556	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.36.0 1.23.7
quay.io/zncdatadev/sig-storage/livenessprobe :v2.14.0	33692aed26aa	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.36.0 1.23.7
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

4,453

cephfs-csikubegems

1.0.8

1 of 6 See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.5	0.36.0 1.23.7

Open the chart page →

4,452

chartmuseumkubegems

3.8.0

1 of 1 See more

chartmuseum kubegems 3.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba stdlib@go1.17.6	0.36.0 1.23.7

Open the chart page →

3,527

gatewaykubegems

0.3.2

2 of 2 See more

gateway kubegems 0.3.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.22.5	0.36.0 1.23.7
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.13.15	0.36.0 1.23.7

Open the chart page →

3,506

giteakubegems

5.0.8

1 of 2 See more

gitea kubegems 5.0.8

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
gitea/gitea :1.16.8	b0bdf102b485	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.36.0 1.23.7

Open the chart page →

3,400

juicefs-csi-driverkubegems

0.19.2

2 of 6 See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.23.0	3e4daf9626d5	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.36.0 1.23.7
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	golang.org/x/net@v0.9.0 stdlib@go1.19.11	0.36.0 1.23.7

Open the chart page →

4,865

juicefs-tenantkubegems

1.0.1

1 of 3 See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kubegems/redis :7.2.5-debian-12-r2	870ee3a77add	stdlib@go1.21.11	1.23.7

Open the chart page →

4,333

knative-servingkubegems

1.0.1

7 of 8 See more

knative-serving kubegems 1.0.1

7 of the 8 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourierdigest-pinned	197fbb71d1f1	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.36.0 1.23.7
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	08315309da4b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.36.0 1.23.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	105bdd14ecaa	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.36.0 1.23.7
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	bac158dfb0c7	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.36.0 1.23.7
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mappingdigest-pinned	e384a295069b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.36.0 1.23.7
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhookdigest-pinned	15f1ce7f35b4	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.36.0 1.23.7
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	1282a399cbb9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

10,469

kubegems-edgekubegems

1.24.10

1 of 1 See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/net@v0.19.0	0.36.0

Open the chart page →

3,397

kubegems-multus-cnikubegems

2.4.1

1 of 2 See more

kubegems-multus-cni kubegems 2.4.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.2.1	6bebbda31416	golang.org/x/net@v0.28.0	0.36.0

Open the chart page →

1,404

kubegems-paikubegems

1.0.18

1 of 1 See more

kubegems-pai kubegems 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kubegems/mysql :8.0.33-debian-11-r0	19cb195b9a50	stdlib@go1.19.8	1.23.7

Open the chart page →

1,053

logging-operatorkubegems

3.17.6

1 of 1 See more

logging-operator kubegems 3.17.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.9	0.36.0 1.23.7

Open the chart page →

1,801

prometheus-adapterkubegems

4.14.1

1 of 1 See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

945

prometheus-blackbox-exporterkubegems

7.1.3

1 of 1 See more

prometheus-blackbox-exporter kubegems 7.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/net@v0.0.0-20220728211354-c7608f3a8462 stdlib@go1.18.5	0.36.0 1.23.7

Open the chart page →

1,635

volcanokubegems

1.12.1

1 of 3 See more

volcano kubegems 1.12.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.36.0 1.23.7

Open the chart page →

5,045

xpai-schedulerkubegems

1.12.1

1 of 2 See more

xpai-scheduler kubegems 1.12.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

2,324

gptchat-api-feishubotkubegemsapp

0.1.1

3 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api :latest	f3c492a938ad	stdlib@go1.19.3	1.23.7
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

8,491

kubeintellectkubeintellect

2.5.0

1 of 2 See more

kubeintellect kubeintellect 2.5.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/mskazemi/kubeintellect :2.5.0	b5d7681d1b9d	golang.org/x/net@v0.30.0 stdlib@go1.23.6	0.36.0 1.23.7

Open the chart page →

1,909

kubelet-summary-exporterkubelet-summary-exporter

1.0.0

1 of 1 See more

kubelet-summary-exporter kubelet-summary-exporter 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/salesforce/kubelet-summary-exporter :sha-c2bf90d	377e09d2dd72	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

1,016

log-generatorkube-logging

0.6.0

1 of 1 See more

log-generator kube-logging 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.6.0	8324bbc0ec08	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

1,269

logging-demokube-logging

4.0.3

1 of 1 See more

logging-demo kube-logging 4.0.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.4.1	05aa441b20aa	stdlib@go1.20.1	1.23.7

Open the chart page →

1,268

log-socketkube-logging

0.1.2

1 of 1 See more

log-socket kube-logging 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/log-socket :latest	a514736d2d4d	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.18.6	0.36.0 1.23.7

Open the chart page →

1,220

kubemacpoolkubemacpool

0.3.0

1 of 1 See more

kubemacpool kubemacpool 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubemacpool :v0.45.0	eebb65b8a12c	golang.org/x/net@v0.23.0 stdlib@go1.22.0	0.36.0 1.23.7

Open the chart page →

1,641

kube-netlagkube-netlag

1.1.0

1 of 1 See more

kube-netlag kube-netlag 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0	0.36.0

Open the chart page →

1,502

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	golang.org/x/net@v0.0.0-20220822230855-b0a4917ee28c stdlib@go1.18.2	0.36.0 1.23.7

Open the chart page →

7,221

lokikube-ops

1.7.3

1 of 1 See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/loki :2.2.1	4fbd63194674	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.3	0.36.0 1.23.7

Open the chart page →

2,653

promtailkube-ops

1.5.1

1 of 2 See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/promtail :2.2.1	34de6387233b	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.3	0.36.0 1.23.7

Open the chart page →

4,158

kubereportkubereport

1.1.0

1 of 1 See more

kubereport kubereport 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
kubesuite/kubereport :latest	0262424ee702	golang.org/x/net@v0.29.0 stdlib@go1.22.0	0.36.0 1.23.7

Open the chart page →

1,120

scrutinykubernetes-homelab-helm-charts

0.2.2

1 of 3 See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/influxdb :2.8	571eb4514977	golang.org/x/net@v0.25.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

5,588

tor-proxykubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
peterdavehello/tor-socks-proxy :latest	0cc12d36d312	golang.org/x/net@v0.35.0	0.36.0

Open the chart page →

1,474

uptime-kumakubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.2.1-slim	059b49d64739	stdlib@go1.20.5	1.23.7

Open the chart page →

6,408

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/net@v0.15.0 stdlib@go1.19.13	0.36.0 1.23.7

Open the chart page →

3,632

harbor-operatorkubernetes-replicator

1.6.3

1 of 1 See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

1,205

kubernetes-secret-generatorkubernetes-replicator

3.4.1

1 of 1 See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.36.0 1.23.7

Open the chart page →

855

servicegatewaykubernetes-replicator

2.3.3

1 of 1 See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/mittwald/servicegateway :v2.3.3	fa948df30d44	stdlib@go1.21.5	1.23.7

Open the chart page →

739

kubernetesweeklykubernetesweekly

2.1.0

1 of 1 See more

kubernetesweekly kubernetesweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/kubernetesweekly :v2.1.0	a287ada277c6	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.16.15	0.36.0 1.23.7

Open the chart page →

1,489

Container images carrying it

3,267 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7	1
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.4	0.36.0 1.23.7	1
prom/prometheus :v2.16.0	e4ca62c0d62f	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.8	0.36.0 1.23.7	1
prom/prometheus :v2.22.2	f7ffebdd428b	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.5	0.36.0 1.23.7	1
prom/pushgateway :v1.5.1	28fe26c8b8b1	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.36.0 1.23.7	1
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.36.0 1.23.7	1
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.15.8	0.36.0 1.23.7	1
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.36.0 1.23.7	1
prom/statsd-exporter :v0.22.4	8be660470961	stdlib@go1.17.3	1.23.7	1
promzeus/redis-sentinel-gateway :v1	82f6d56e280b	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.36.0 1.23.7	1
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	stdlib@go1.21.5	1.23.7	1
pschiffe/pdns-mysql :alpine	d196c796cafb	stdlib@go1.21.5	1.23.7	1
pschiffe/pdns-pgsql :5.0	a227d41bc665	stdlib@go1.21.5	1.23.7	1
pysga1996/redis :latest	3af6d0c7db19	stdlib@go1.18.2	1.23.7	1
qichenxu4pd/mysqlweb :1.2	d758d41d9c6b	stdlib@go1.18.2	1.23.7	1
qmcgaw/gluetun :v3.40.0	2b42bfa04675	golang.org/x/net@v0.31.0 stdlib@go1.23.4	0.36.0 1.23.7	1
qonstrukt/php :8.4-v8-apache	089af7925aa1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.2	0.36.0 1.23.7	1
qoveryrd/digital-mobius :0.1.4	b30a9398a83c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.5	0.36.0 1.23.7	1
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.18	0.36.0 1.23.7	1
qumine/ingress-controller :v0.8.5	f2c8a2148381	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7	1
qumine/minecraft-server :v0.1.15	c0b650d51132	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.4	0.36.0 1.23.7	1
rabbitmqoperator/cluster-operator :1.8.3	231e7ce0e905	golang.org/x/net@v0.0.0-20210510120150-4163338589ed stdlib@go1.17	0.36.0 1.23.7	1
rabbitmqoperator/cluster-operator :2.6.0	8651dd3cec51	golang.org/x/net@v0.18.0 stdlib@go1.20.11	0.36.0 1.23.7	1
rahulbhiwagade122/desishowbiz :latest	08490b70998c	stdlib@go1.23.5	1.23.7	1
ralexstokes/eth2-fork-mon :latest	c0d4bbefd31f	stdlib@go1.16.7	1.23.7	1
rancher/hardened-calico :v3.13.3	6d2cd61a338b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.36.0	1
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.36.0	1
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.36.0	1
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.36.0	1
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.36.0	1
rancher/k3s :v1.28.2-k3s1	8c2599ecfca8	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.36.0 1.23.7	1
rancher/k3s :v1.25.3-k3s1	eaa270df79cc	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.2	0.36.0 1.23.7	1
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7	1
rancher/local-path-provisioner :v0.0.30	9b9148811700	golang.org/x/net@v0.27.0 stdlib@go1.23.1	0.36.0 1.23.7	1
rancher/local-path-provisioner :v0.0.20	d5999b20a1b1	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.6	0.36.0 1.23.7	1
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.15	0.36.0 1.23.7	1
rancher/mirrored-cloud-provider-vsphere :v1.31.1	febfd0517838	golang.org/x/net@v0.26.0 stdlib@go1.22.8	0.36.0 1.23.7	1
rancher/pushprox-client :v0.1.0-rancher2-client	a41cd716c412	stdlib@go1.16.4	1.23.7	1
rancher/pushprox-proxy :v0.1.0-rancher2-proxy	3126395b966c	stdlib@go1.16.4	1.23.7	1
rclone/rclone :1.63.0	08e1af3c8814	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.36.0 1.23.7	1
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.2	0.36.0 1.23.7	1
rclone/rclone :1.56.0	f2fc45c8bc57	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d stdlib@go1.16.6	0.36.0 1.23.7	1
reaper99/recipya :v1.2.2	7f7ec3aeb88c	golang.org/x/net@v0.27.0 stdlib@go1.22.0	0.36.0 1.23.7	1
redislabs/redisearch :2.4.14	33561794c5c8	stdlib@go1.16.7	1.23.7	1
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/net@v0.23.0 stdlib@go1.23.2	0.36.0 1.23.7	1
reportportal/migrations :5.7.0	da5d8e1395fe	golang.org/x/net@v0.0.0-20190424112056-4829fb13d2c6 stdlib@go1.13.6	0.36.0 1.23.7	1
reportportal/service-index :5.0.11	2b27a2d7a87d	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.17.1	0.36.0 1.23.7	1
restic/restic :0.15.2	579e4e6a4931	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.36.0 1.23.7	1
resurfaceio/resurface :3.7.84	d5cda2f64109	stdlib@go1.23.0	1.23.7	1
rezachalak/bzen-mongo :1.0.0	34f694325191	stdlib@go1.19.12	1.23.7	1