CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,692; of 17,790 indexed, latest versions
Container images: 3,270; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,692 of 17,790 indexed charts deploy, on 3,270 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,490
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,169

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,692 by stars

Chart

Latest

Affected images

Radar Score

argo-cdargo

10.9.1

1 of 3 See more

argo-cd argo 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.24.0	1.23.7

Open the chart page →

3,003

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

2,745

argo-cdargo-cd-oci

10.9.1

1 of 3 See more

argo-cd argo-cd-oci 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.24.0	1.23.7

Open the chart page →

3,003

jupyterhubjupyterhub

4.4.2

1 of 7 See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	golang.org/x/net@v0.23.0	0.36.0

Open the chart page →

7,937

mimir-distributedgrafana

6.2.0

2 of 6 See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

4,548

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	stdlib@go1.20.5	1.23.7

Open the chart page →

30,217

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	stdlib@go1.21.8	1.23.7

Open the chart page →

11,394

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.16.2	0.36.0 1.23.7

Open the chart page →

2,315

rook-cephrook

1.20.7

1 of 2 See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rook/ceph :v1.20.7	2f970c425617	stdlib@go1.22.10	1.23.7

Open the chart page →

1,454

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	golang.org/x/net@v0.2.0 stdlib@go1.19.5	0.36.0 1.23.7

Open the chart page →

1,445

openebsopenebs

4.6.1

12 of 35 See more

openebs openebs 4.6.1

12 of the 35 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/net@v0.34.0 stdlib@go1.23.6	0.36.0 1.23.7
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.23.7
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.23.7
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.23.7
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.36.0 1.23.7
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/net@v0.31.0 stdlib@go1.23.1	0.36.0 1.23.7

Open the chart page →

24,128

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

937

open-webuiopen-webui

16.5.0

1 of 4 See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.23.7

Open the chart page →

1,288

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	golang.org/x/net@v0.12.0 stdlib@go1.20.7	0.36.0 1.23.7
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.1	0.36.0 1.23.7

Open the chart page →

2,890

vpafairwinds-stable

5.0.1

1 of 4 See more

vpa fairwinds-stable 5.0.1

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.36.0 1.23.7

Open the chart page →

1,233

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.18.8	0.36.0 1.23.7

Open the chart page →

2,059

dagsterdagster

1.13.22

1 of 5 See more

dagster dagster 1.13.22

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.23.7

Open the chart page →

3,510

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

2,497

openfaasopenfaas

15.0.13

2 of 6 See more

openfaas openfaas 15.0.13

2 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.23.7
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.23.7

Open the chart page →

3,558

jaeger-operatorjaegertracing

2.57.0

1 of 1 See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	golang.org/x/net@v0.29.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

566

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	stdlib@go1.18.2	1.23.7

Open the chart page →

5,560

vault-secrets-operatorhashicorp

1.5.1

1 of 2 See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/net@v0.28.0 stdlib@go1.23.0	0.36.0 1.23.7

Open the chart page →

1,054

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7

Open the chart page →

1,374

rocketchatrocketchat-server

7.0.2

2 of 12 See more

rocketchat rocketchat-server 7.0.2

2 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.36.0 1.23.7
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.36.0 1.23.7

Open the chart page →

12,286

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

2,109

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	golang.org/x/net@v0.33.0 stdlib@go1.22.12	0.36.0 1.23.7
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.36.0 1.23.7

Open the chart page →

2,944

chaos-meshchaos-mesh

2.8.4

1 of 4 See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.36.0

Open the chart page →

6,415

atlantisatlantis

6.15.1

1 of 1 See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/net@v0.23.0 stdlib@go1.22.1	0.36.0 1.23.7

Open the chart page →

1,899

rabbitmqcloudpirates-rabbitmq

0.21.27

1 of 2 See more

rabbitmq cloudpirates-rabbitmq 0.21.27

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5-management	57bddb6fbc34	stdlib@go1.22.2	1.23.7

Open the chart page →

854

grafana-agentgrafana

0.44.2

2 of 2 See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/net@v0.33.0 stdlib@go1.22.11	0.36.0 1.23.7
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.23.7

Open the chart page →

3,526

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

2,461

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.2	0.36.0 1.23.7
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/net@v0.10.0 stdlib@go1.18.3	0.36.0 1.23.7
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/net@v0.0.0-20220706163947-c90051bbdb60 stdlib@go1.16.15	0.36.0 1.23.7
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/net@v0.8.0 stdlib@go1.19.7	0.36.0 1.23.7

Open the chart page →

32,420

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.36.0 1.23.7

Open the chart page →

10,695

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	stdlib@go1.23.3	1.23.7

Open the chart page →

2,228

signozsignoz

0.141.1

3 of 5 See more

signoz signoz 0.141.1

3 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.36.0 1.23.7
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.36.0 1.23.7
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.23.7

Open the chart page →

7,607

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.36.0 1.23.7

Open the chart page →

716

bitcoin-corehirosystems

2.1.7

1 of 1 See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
dobtc/bitcoin :25.1	a870f7cb1105	stdlib@go1.19.8	1.23.7

Open the chart page →

4,819

nacosygqygq2

2.1.10

2 of 4 See more

nacos ygqygq2 2.1.10

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
nacos/nacos-peer-finder-plugin :latest	a9c769301fa6	stdlib@go1.13.5	1.23.7
ygqygq2/mysql-exec-sql :latest	54f30def1558	stdlib@go1.18.2	1.23.7

Open the chart page →

4,986

difydouban

0.10.0

3 of 6 See more

dify douban 0.10.0

3 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	stdlib@go1.21.9	1.23.7
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	stdlib@go1.23.3	1.23.7
langgenius/dify-web :1.10.1-fix.1	c306ac577912	stdlib@go1.23.5	1.23.7

Open the chart page →

19,544

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7

Open the chart page →

2,139

pulsarapache

4.7.0

2 of 10 See more

pulsar apache 4.7.0

2 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.19.0 stdlib@go1.24.0	0.36.0 1.23.7
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7

Open the chart page →

9,891

vertical-pod-autoscalercowboysysop

11.1.1

1 of 4 See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	golang.org/x/net@v0.19.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

6,960

difydify-helm

0.38.0

1 of 11 See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :7.0.11-debian-11-r12	1161dcd293a0	stdlib@go1.19.9	1.23.7

Open the chart page →

22,214

botkubeinfracloudio

1.14.0

1 of 1 See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	golang.org/x/net@v0.23.0 stdlib@go1.21.13	0.36.0 1.23.7

Open the chart page →

1,104

ambassadordatawire

6.9.5

1 of 2 See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

4,093

rabbitmqgroundhog2k

2.3.8

1 of 2 See more

rabbitmq groundhog2k 2.3.8

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5	1773ab33af6a	stdlib@go1.22.2	1.23.7

Open the chart page →

1,045

oktetookteto

0.0.0-2026-08-17

2 of 10 See more

okteto okteto 0.0.0-2026-08-17

2 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/okteto/buildkit :0.0.0-2026-08-17	14527ca5d2a9	golang.org/x/net@v0.35.0	0.36.0
ghcr.io/okteto/okteto :3.22.0	4585017f52f6	stdlib@go1.24.0	1.23.7

Open the chart page →

5,532

prometheus-msteamsprometheus-msteams

1.3.6

1 of 1 See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/prometheusmsteams/prometheus-msteams :v1.5.3	a9f4d31ab811	golang.org/x/net@v0.7.0	0.36.0

Open the chart page →

941

san-iscsi-csienix

4.0.2

1 of 7 See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
enix/san-iscsi-csi :v4.0.2	f963da81ecf7	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16.8	0.36.0 1.23.7

Open the chart page →

4,168

headscalegabe565

0.16.0

1 of 2 See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

2,003

Container images carrying it

3,270 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
thecampagnards/trafficlight-api :main	7dca9d973837	stdlib@go1.16.4	1.23.7	1
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	stdlib@go1.20.7	1.23.7	1
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	stdlib@go1.17.13	1.23.7	1
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	stdlib@go1.19.3	1.23.7	1
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	stdlib@go1.20.7	1.23.7	1
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	stdlib@go1.20.7	1.23.7	1
thesisrobot/lnd :v0.16.4-beta-c	287129953689	golang.org/x/net@v0.8.0 stdlib@go1.21.0	0.36.0 1.23.7	1
thesisrobot/lnd :v0.14.1-beta	d94c8dbf6dac	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.1	0.36.0 1.23.7	1
thetorproject/snowflake-proxy :v2.11.0	1ddc5069d354	golang.org/x/net@v0.35.0	0.36.0	1
thmmniii/fbs-qcm-frontend :v1.27.1	a347f7f4d144	stdlib@go1.20.12	1.23.7	1
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.36.0 1.23.7	1
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.36.0 1.23.7	1
thomseddon/traefik-forward-auth :latest	b364aa6a4117	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.15	0.36.0 1.23.7	1
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.36.0 1.23.7	1
tile38/tile38 :1.33.4	afb7e82f9485	golang.org/x/net@v0.23.0 stdlib@go1.23.2	0.36.0 1.23.7	1
timescale/timescaledb :latest-pg12	645fd9e92d76	stdlib@go1.18.7	1.23.7	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	stdlib@go1.19.1	1.23.7	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	stdlib@go1.19.1	1.23.7	1
timescale/timescaledb-ha :pg16	d7db8f1085a3	golang.org/x/net@v0.26.0 stdlib@go1.23.0	0.36.0 1.23.7	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	golang.org/x/net@v0.33.0 stdlib@go1.21.13	0.36.0 1.23.7	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	stdlib@go1.15.6	1.23.7	1
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	stdlib@go1.14	1.23.7	1
timonwong/prometheus-webhook-dingtalk :v1.4.0	a0fcc028bd8d	stdlib@go1.13.5	1.23.7	1
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	golang.org/x/net@v0.21.0 stdlib@go1.22.2	0.36.0 1.23.7	1
tksky1/cubeuniverse :0.1alpha	ec7b889f380f	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.20.3	0.36.0 1.23.7	1
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/net@v0.0.0-20191109021931-daa7c04131f5 stdlib@go1.13.10	0.36.0 1.23.7	1
tobiasehlert/teslamateapi :1.20.2	cf09259ad0ea	stdlib@go1.24.0	1.23.7	1
tobirachel/node-project3 :v1	7d9f37154994	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.36.0 1.23.7	1
toucansoftware/spa-reloader :latest	c187b1fba501	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.36.0 1.23.7	1
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.19	0.36.0 1.23.7	1
traefik/whoami :v1.10.2	1474027c3166	golang.org/x/net@v0.25.0 stdlib@go1.22.2	0.36.0 1.23.7	1
traefik/whoami :v1.10	1699d99cb4b9	stdlib@go1.23.5	1.23.7	1
traefik/whoami :v1.6.1	2c52bb2c8480	stdlib@go1.15.6	1.23.7	1
traefik/whoami :v1.8.0	8d0f943abdbf	stdlib@go1.17.7	1.23.7	1
traefik/whoami :v1.6.0	d38496bf0900	stdlib@go1.15.2	1.23.7	1
traggo/server :0.2.3	f1ced637510e	stdlib@go1.13.1	1.23.7	1
tranhailong/nfs-server :4.2-2-gcsfuse	028662749be2	golang.org/x/net@v0.4.0 stdlib@go1.18.4	0.36.0 1.23.7	1
treeverse/lakefs :0.69.0	478f37a6cffc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.8	0.36.0 1.23.7	1
tundeficky/nodejs-app :v1.0.0	3cf9a9ce54e8	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.36.0 1.23.7	1
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.3	0.36.0 1.23.7	1
tusproject/tusd :v1.10.0	1e457b59fd5b	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.36.0 1.23.7	1
tusproject/tusd :v1.13.0	f8088058b80f	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.36.0 1.23.7	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.7	0.36.0 1.23.7	1
twinproduction/aws-eks-asg-rolling-update-handler :v1.7.0	8f38c206972e	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.36.0 1.23.7	1
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7	1
ubercadence/server :0.23.2	2ac5491d13bb	golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102 stdlib@go1.13.6	0.36.0 1.23.7	1
udhos/forward :1.1.3	12e120d39fdb	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7	1
udhos/lambdaping :1.0.4	6bd2cf2ac732	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.36.0 1.23.7	1
udhos/miniapi :1.3.2	8a7042db82ce	stdlib@go1.23.2	1.23.7	1
udhos/prime :1.0.0	e432012dd34a	stdlib@go1.20.4	1.23.7	1