CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,746; of 17,805 indexed, latest versions
Container images: 3,305; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,746 of 17,805 indexed charts deploy, on 3,305 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,515
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+148 more	1.23.7	3,203

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,746 by stars

Chart

Latest

Affected images

Radar Score

shopwarerobjuz

2.0.0

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	stdlib@go1.20.7	1.23.7

Open the chart page →

2,972

krr-enforcerrobusta

0.3.5

1 of 2 See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.0	bd01dae02676	golang.org/x/net@v0.23.0 stdlib@go1.21.1	0.36.0 1.23.7

Open the chart page →

4,048

kubewatchrobusta

3.5.0

1 of 1 See more

kubewatch robusta 3.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
robustadev/kubewatch :v2.9.0	0457a51e36e8	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.36.0 1.23.7

Open the chart page →

1,856

bastillion-upstreamrock8s

0.1.0

1 of 1 See more

bastillion-upstream rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
iamdorsah/bastillion :v0.1	db83a0254d81	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.17.13	0.36.0 1.23.7

Open the chart page →

3,040

easy-olm-operatorrock8s

0.0.1

1 of 1 See more

easy-olm-operator rock8s 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/easy-olm-operator :0.0.1	779454fea06c	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.10	0.36.0 1.23.7

Open the chart page →

953

fleet-vendoredrock8s

6.5.1

1 of 1 See more

fleet-vendored rock8s 6.5.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
fleetdm/fleet :v4.66.0	12e644b7f40e	stdlib@go1.23.4	1.23.7

Open the chart page →

1,742

gitlab-operatorrock8s

0.7.0

1 of 2 See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.16.14	0.36.0 1.23.7

Open the chart page →

5,432

imgproxyrock8s

0.8.30

1 of 1 See more

imgproxy rock8s 0.8.30

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.15.0	40f6eb807444	golang.org/x/net@v0.7.0 stdlib@go1.20	0.36.0 1.23.7

Open the chart page →

2,039

mailserverrock8s

0.1.2

1 of 1 See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.36.0 1.23.7

Open the chart page →

1,955

matrix-stackrock8s

0.8.1

2 of 7 See more

matrix-stack rock8s 0.8.1

2 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.127.1	c3c4a9de2a0b	stdlib@go1.19.8	1.23.7
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7

Open the chart page →

9,492

resource-binding-operatorrock8s

0.1.0

1 of 1 See more

resource-binding-operator rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/resource-binding-operator :0.1.0	63cf51392ce7	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.13	0.36.0 1.23.7

Open the chart page →

917

reviewboardrock8s

0.0.1

1 of 3 See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
beanbag/reviewboard :latest	6b840f546e1c	stdlib@go1.18.1	1.23.7

Open the chart page →

6,248

zentaorock8s

0.0.1

1 of 1 See more

zentao rock8s 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
easysoft/quickon-zentao :18.5	592ad5df1f8b	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.20.3	0.36.0 1.23.7

Open the chart page →

1,535

ai-agentromholdings

0.0.1

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/net@v0.23.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

9,771

argocdromholdings

1.8.1

2 of 3 See more

argocd romholdings 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127 stdlib@go1.14.12	0.36.0 1.23.7
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.9	0.36.0 1.23.7

Open the chart page →

10,486

argocd-certificate-refreshromholdings

0.10.8

1 of 1 See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.17.13	0.36.0 1.23.7

Open the chart page →

13,204

argo-workflowromholdings

0.1.6

1 of 1 See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.36.0 1.23.7

Open the chart page →

1,587

calertromholdings

0.0.1

1 of 1 See more

calert romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	stdlib@go1.18	1.23.7

Open the chart page →

4,712

calicoromholdings

0.1.1

4 of 4 See more

calico romholdings 0.1.1

4 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.36.0 1.23.7
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.36.0 1.23.7
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.36.0 1.23.7
quay.io/devtron/calico-networking :pod2daemon-flexvol-v3.19.1	c1f36b6e18e0	stdlib@go1.15.2	1.23.7

Open the chart page →

10,097

clairromholdings

0.1.14

1 of 2 See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.6	0.36.0 1.23.7

Open the chart page →

6,239

devtron-enterpriseromholdings

48.0.0

15 of 28 See more

devtron-enterprise romholdings 48.0.0

15 of the 28 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.36.0 1.23.7
quay.io/devtron/casbin :172ef62b-9450794d-464-39422	5bf041aacadd	stdlib@go1.24.0	1.23.7
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.23.7
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.36.0 1.23.7
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.15	0.36.0 1.23.7
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.36.0 1.23.7
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.36.0 1.23.7
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.23.7
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.19.2	0.36.0 1.23.7
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.23.7
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.23.7
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.36.0 1.23.7
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.23.7
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	golang.org/x/net@v0.28.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

69,641

devtron-in-clustercdromholdings

0.10.2

2 of 2 See more

devtron-in-clustercd romholdings 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.36.0 1.23.7
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.36.0 1.23.7

Open the chart page →

5,057

devtron-logs-dumpromholdings

0.1.0

1 of 1 See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

4,993

devtron-operatorromholdings

0.23.3

7 of 11 See more

devtron-operator romholdings 0.23.3

7 of the 11 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.36.0 1.23.7
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.23.7
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.36.0 1.23.7
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.36.0 1.23.7
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.36.0 1.23.7
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.23.7
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.36.0 1.23.7

Open the chart page →

33,387

dgraphromholdings

0.0.20

1 of 1 See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.17.3	0.36.0 1.23.7

Open the chart page →

12,000

discord-alertmanagerromholdings

0.10.0

1 of 1 See more

discord-alertmanager romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/discord-alertmanager :ceceb475-65-352	03586419ca31	stdlib@go1.18.1	1.23.7

Open the chart page →

951

jcmhproxy-ingressromholdings

0.14.6

1 of 1 See more

jcmhproxy-ingress romholdings 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.36.0 1.23.7

Open the chart page →

1,379

kube-prometheus-stackromholdings

19.3.0

3 of 6 See more

kube-prometheus-stack romholdings 19.3.0

3 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.36.0 1.23.7

Open the chart page →

8,661

migration-incluster-cdromholdings

0.10.0

1 of 1 See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.23.7

Open the chart page →

3,951

securityromholdings

0.2.2

1 of 1 See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.16.10	0.36.0 1.23.7

Open the chart page →

2,442

winter-soldierromholdings

0.10.6

1 of 1 See more

winter-soldier romholdings 0.10.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

1,176

zincromholdings

0.1.2

1 of 1 See more

zinc romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.7	0.36.0 1.23.7

Open the chart page →

1,514

controllerrookout

0.2.56

1 of 1 See more

controller rookout 0.2.56

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

1,970

datastorerookout

0.1.48

1 of 1 See more

datastore rookout 0.1.48

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rookout/data-on-prem :latest	51c0fce64467	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

1,951

operatorrookout

0.0.20

1 of 2 See more

operator rookout 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rookout/k8s-operator :latest	0d083f3ef1a7	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.36.0 1.23.7

Open the chart page →

2,210

rookout-hybridrookout

0.3.1

2 of 2 See more

rookout-hybrid rookout 0.3.1

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.36.0 1.23.7
rookout/data-on-prem :latest	51c0fce64467	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

3,921

routehub-serverroutehub-helm

1.0.1

1 of 3 See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
eqalpha/keydb :latest	6537505c4235	stdlib@go1.16.7	1.23.7

Open the chart page →

7,012

routr-connectroutr

0.4.3

1 of 10 See more

routr-connect routr 0.4.3

1 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
fonoster/routr-edgeport :2.13.6	d08a8a574a50	golang.org/x/net@v0.7.0 stdlib@go1.21.0	0.36.0 1.23.7

Open the chart page →

11,072

chainrss3

0.1.28

5 of 8 See more

chain rss3 0.1.28

5 of the 8 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rss3/op-batcher :d2c5ced00901227473fc196fda838191f0cb4e02	e8adc09d9c07	stdlib@go1.21.3	1.23.7
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/net@v0.18.0 stdlib@go1.21.7	0.36.0 1.23.7
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7
rss3/op-proposer :d2c5ced00901227473fc196fda838191f0cb4e02	96672897ba9e	stdlib@go1.21.3	1.23.7
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	stdlib@go1.21.3	1.23.7

Open the chart page →

8,683

noderss3

0.7.2

1 of 3 See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.23.7

Open the chart page →

4,798

op-batcherrss3

0.1.0

1 of 2 See more

op-batcher rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	stdlib@go1.21.3	1.23.7

Open the chart page →

1,252

op-proposerrss3

0.1.0

1 of 2 See more

op-proposer rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	stdlib@go1.21.3	1.23.7

Open the chart page →

1,252

proxydrss3

0.1.0

1 of 1 See more

proxyd rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	stdlib@go1.21.3	1.23.7

Open the chart page →

2,111

vsl-chainrss3

0.1.0

4 of 7 See more

vsl-chain rss3 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	stdlib@go1.21.3	1.23.7
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/net@v0.18.0 stdlib@go1.21.7	0.36.0 1.23.7
rss3/op-node :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	45b91380bbe7	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	stdlib@go1.21.3	1.23.7

Open the chart page →

6,198

vsl-rpcrss3

0.3.4

2 of 4 See more

vsl-rpc rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/net@v0.18.0 stdlib@go1.21.7	0.36.0 1.23.7
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

4,764

vsl-sequencerrss3

0.3.4

2 of 4 See more

vsl-sequencer rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/net@v0.18.0 stdlib@go1.21.7	0.36.0 1.23.7
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

4,764

karakeeprtomik-helm-charts

0.0.1

1 of 3 See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/karakeep-app/karakeep :0.26.0	f575a34ed3f8	stdlib@go1.20.7	1.23.7

Open the chart page →

5,362

recipyartomik-helm-charts

0.0.2

1 of 2 See more

recipya rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
reaper99/recipya :v1.2.2	7f7ec3aeb88c	golang.org/x/net@v0.27.0 stdlib@go1.22.0	0.36.0 1.23.7

Open the chart page →

2,220

komgarubxkube

0.1.3

1 of 1 See more

komga rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
gotson/komga :1.26.3	6c2a967bbe9a	stdlib@go1.17.8	1.23.7

Open the chart page →

34,712

plex-exporterrubxkube

0.1.1

1 of 1 See more

plex-exporter rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/jsclayton/prometheus-plex-exporter :latest	18ef1b2197ef	stdlib@go1.23.0	1.23.7

Open the chart page →

434

Container images carrying it

3,305 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ralexstokes/eth2-fork-mon :latest	c0d4bbefd31f	stdlib@go1.16.7	1.23.7	1
rancher/hardened-calico :v3.13.3	6d2cd61a338b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.36.0	1
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.36.0	1
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.36.0	1
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.36.0	1
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.36.0	1
rancher/k3s :v1.28.2-k3s1	8c2599ecfca8	golang.org/x/net@v0.13.0 stdlib@go1.20.8	0.36.0 1.23.7	1
rancher/k3s :v1.25.3-k3s1	eaa270df79cc	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.2	0.36.0 1.23.7	1
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7	1
rancher/local-path-provisioner :v0.0.30	9b9148811700	golang.org/x/net@v0.27.0 stdlib@go1.23.1	0.36.0 1.23.7	1
rancher/local-path-provisioner :v0.0.20	d5999b20a1b1	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.6	0.36.0 1.23.7	1
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.16.15	0.36.0 1.23.7	1
rancher/mirrored-cloud-provider-vsphere :v1.31.1	febfd0517838	golang.org/x/net@v0.26.0 stdlib@go1.22.8	0.36.0 1.23.7	1
rancher/pushprox-client :v0.1.0-rancher2-client	a41cd716c412	stdlib@go1.16.4	1.23.7	1
rancher/pushprox-proxy :v0.1.0-rancher2-proxy	3126395b966c	stdlib@go1.16.4	1.23.7	1
raspbernetes/csi-node-driver-registrar :2.0.1	a552705225fd	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.13.15	0.36.0 1.23.7	1
rclone/rclone :1.63.0	08e1af3c8814	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.36.0 1.23.7	1
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.2	0.36.0 1.23.7	1
rclone/rclone :1.56.0	f2fc45c8bc57	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d stdlib@go1.16.6	0.36.0 1.23.7	1
reaper99/recipya :v1.2.2	7f7ec3aeb88c	golang.org/x/net@v0.27.0 stdlib@go1.22.0	0.36.0 1.23.7	1
redislabs/redisearch :2.4.14	33561794c5c8	stdlib@go1.16.7	1.23.7	1
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/net@v0.23.0 stdlib@go1.23.2	0.36.0 1.23.7	1
reportportal/migrations :5.7.0	da5d8e1395fe	golang.org/x/net@v0.0.0-20190424112056-4829fb13d2c6 stdlib@go1.13.6	0.36.0 1.23.7	1
reportportal/service-index :5.0.11	2b27a2d7a87d	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980 stdlib@go1.17.1	0.36.0 1.23.7	1
restic/restic :0.15.2	579e4e6a4931	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.36.0 1.23.7	1
resurfaceio/resurface :3.7.84	d5cda2f64109	stdlib@go1.23.0	1.23.7	1
rezachalak/bzen-mongo :1.0.0	34f694325191	stdlib@go1.19.12	1.23.7	1
ribbybibby/s3-exporter :v0.5.0	998184c51a00	stdlib@go1.15.15	1.23.7	1
richardjennings/opa-nginx :0.0.3	66424aca125d	stdlib@go1.20.5	1.23.7	1
rimusz/security-sample-app :0.2.0	b9a178ca76ef	stdlib@go1.14.4	1.23.7	1
robjuz/postgresql-nominatim :latest	805c7bab76df	stdlib@go1.16.5	1.23.7	1
robotshop/rs-dispatch :latest	de81f1d07b02	stdlib@go1.17	1.23.7	1
robotshop/rs-mongodb :latest	119b545823cd	stdlib@go1.16.3	1.23.7	1
robustadev/kubewatch :v2.9.0	0457a51e36e8	golang.org/x/net@v0.26.0 stdlib@go1.23.1	0.36.0 1.23.7	1
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7	1
rogerrum/alertmanager-discord :1.0.3	827593369625	stdlib@go1.17.4	1.23.7	1
rokk42/seashells :1.0-k8s	dfc850a5db9e	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7	1
rook/ceph :v1.20.7	2f970c425617	stdlib@go1.22.10	1.23.7	1
rook/ceph :v1.19.2	944a1dd70496	stdlib@go1.22.10	1.23.7	1
rookout/k8s-operator :latest	0d083f3ef1a7	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.15	0.36.0 1.23.7	1
rss3/op-batcher :d2c5ced00901227473fc196fda838191f0cb4e02	e8adc09d9c07	stdlib@go1.21.3	1.23.7	1
rss3/op-node :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	45b91380bbe7	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7	1
rss3/op-proposer :d2c5ced00901227473fc196fda838191f0cb4e02	96672897ba9e	stdlib@go1.21.3	1.23.7	1
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	stdlib@go1.21.3	1.23.7	1
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	stdlib@go1.21.3	1.23.7	1
rtuszik/photon-docker :2.4.0	21549c60f9e6	stdlib@go1.22.2	1.23.7	1
runatlantis/atlantis :v0.16.1	45fbaf7e207c	golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a stdlib@go1.14.7	0.36.0 1.23.7	1
ruslanguns/metadata-injector-operator :v0.0.1	6c77e4675e07	golang.org/x/net@v0.26.0 stdlib@go1.22.11	0.36.0 1.23.7	1
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3	ce9ce8293e4e	stdlib@go1.20.1	1.23.7	1
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9	bb64bf14467d	stdlib@go1.20.1	1.23.7	1