CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,689; of 17,792 indexed, latest versions
Container images: 3,266; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,689 of 17,792 indexed charts deploy, on 3,266 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,486
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,166

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,689 by stars

Chart

Latest

Affected images

Radar Score

brpservicebrpservice

1.1.0

1 of 4 See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/brpservice-php :latest	c17f1ba17d36	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,840

bucket-backup-restorebucket-backup-restore

0.1.0

1 of 2 See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
abohatyrenko/bucket-backup-restore :latest	fa98af15a13e	golang.org/x/net@v0.17.0 stdlib@go1.21.4	0.36.0 1.23.7

Open the chart page →

2,049

agentbuildkite

0.6.4

1 of 1 See more

agent buildkite 0.6.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
buildkite/agent :3.25.0	aec38cfaae0e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.7	0.36.0 1.23.7

Open the chart page →

2,670

blackbox-exportercamptocamp3

1.0.0

1 of 1 See more

blackbox-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.25.0	b04a9fef4fa0	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

913

capsulecapsule

0.14.6

1 of 2 See more

capsule capsule 0.14.6

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

1,238

capsule-proxycapsule-proxy

0.14.1

1 of 2 See more

capsule-proxy capsule-proxy 0.14.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

1,226

fluxcd-webuiccowley

0.0.2

1 of 2 See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
adrianberger/fluxcd-webui :latest	76848c0d2780	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.2	0.36.0 1.23.7

Open the chart page →

3,511

celestia-nodecelestia-node

0.1.7

1 of 1 See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.16.0	41177982c584	golang.org/x/net@v0.27.0 stdlib@go1.23.0	0.36.0 1.23.7

Open the chart page →

1,810

finops-stackcert-manager

0.0.5

7 of 12 See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.3	b23b588cf7cb	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7
ghcr.io/kyverno/background-controller :v1.12.5	06ed5db6cd33	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.36.0 1.23.7
ghcr.io/kyverno/cleanup-controller :v1.12.5	b914032ef9ad	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.36.0 1.23.7
ghcr.io/kyverno/kyverno :v1.12.5	a61c7022abcf	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.36.0 1.23.7
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.36.0 1.23.7
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.36.0 1.23.7
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	golang.org/x/net@v0.22.0 stdlib@go1.21.12	0.36.0 1.23.7

Open the chart page →

12,611

cert-manager-webhook-arvancloudcert-manager-webhook-arvancloud

0.1.1

1 of 1 See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud :latest	179bee5ef8b2	golang.org/x/net@v0.9.0	0.36.0

Open the chart page →

1,074

cert-manager-webhook-gandicert-manager-webhook-gandi

0.6.0

1 of 1 See more

cert-manager-webhook-gandi cert-manager-webhook-gandi 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/sintef/cert-manager-webhook-gandi :0.6.0	6819b34ccac8	golang.org/x/net@v0.26.0 stdlib@go1.22.0	0.36.0 1.23.7

Open the chart page →

1,031

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	golang.org/x/net@v0.33.0	0.36.0

Open the chart page →

16,124

chatclichatcli

1.205.0

1 of 2 See more

chatcli chatcli 1.205.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.31.10	e0b2d217d1d2	golang.org/x/net@v0.26.0	0.36.0

Open the chart page →

1,028

passbolt-hachristianhuth

6.0.1

1 of 4 See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	stdlib@go1.14.4	1.23.7

Open the chart page →

10,964

challengerchronicle

0.1.1

1 of 1 See more

challenger chronicle 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/chronicleprotocol/challenger-go :0.1.2	c8d5a3c0e966	stdlib@go1.22.12	1.23.7

Open the chart page →

978

access-managerckotzbauer

0.14.3

1 of 1 See more

access-manager ckotzbauer 0.14.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/ckotzbauer/access-managerdigest-pinned	dd584fcda0ff	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.36.0 1.23.7

Open the chart page →

643

cloudbees-sidecar-injectorcloudbees

2.3.3

2 of 2 See more

cloudbees-sidecar-injector cloudbees 2.3.3

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
cloudbees/cert-requester :2.3.3	1d44fb4f799b	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728 stdlib@go1.20.1	0.36.0 1.23.7
cloudbees/sidecar-injector :2.3.3	8f102ef0383a	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728 stdlib@go1.20.1	0.36.0 1.23.7

Open the chart page →

3,268

cloudflow-enterprise-componentscloudflow-helm-charts

0.0.0-NIGHTLY01122020

2 of 9 See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

2 of the 9 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.23.7
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.15.2	0.36.0 1.23.7

Open the chart page →

4,265

cnpg-sandboxcloudnative-pg

0.6.1

3 of 6 See more

cnpg-sandbox cloudnative-pg 0.6.1

3 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :8.3.5	cd7cb4345aa7	golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f stdlib@go1.17.6	0.36.0 1.23.7
ghcr.io/cloudnative-pg/cloudnative-pg :1.17.1	4dd365800b62	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.18.6	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-operator :v0.54.0	be2aef39a2f8	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.36.0 1.23.7

Open the chart page →

7,597

pgbenchcloudnative-pg

0.1.0

1 of 1 See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/postgresql :14.5	b3b30d04b362	stdlib@go1.16.7	1.23.7

Open the chart page →

2,714

bastioncloudposse

0.2.0

1 of 2 See more

bastion cloudposse 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
cloudposse/bastion :latest	0d9507e8a760	stdlib@go1.13.3	1.23.7

Open the chart page →

1,579

cloudttycloudtty

0.8.9

1 of 2 See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/cloudtty/cloudshell-operator :v0.8.9	e43ad91f0684	golang.org/x/net@v0.25.0 stdlib@go1.21.11	0.36.0 1.23.7

Open the chart page →

3,994

cluster-setupcluster-setup

1.5.0

2 of 8 See more

cluster-setup cluster-setup 1.5.0

2 of the 8 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.23.7
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	golang.org/x/net@v0.33.0 stdlib@go1.22.7	0.36.0 1.23.7

Open the chart page →

10,121

istio-allcode4devs

1.2.0

4 of 6 See more

istio-all code4devs 1.2.0

4 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/kiali/kiali :v1.89.3	0dcdb1c1e747	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/net@v0.27.0 stdlib@go1.22.6	0.36.0 1.23.7

Open the chart page →

4,812

istio-control-planecode4devs

1.0.0

2 of 3 See more

istio-control-plane code4devs 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7

Open the chart page →

2,374

maintenancecodewithemad

0.1.6

1 of 1 See more

maintenance codewithemad 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/caddy :2.9-alpine	b4e3952384eb	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

1,477

contactcataloguscontact-catalogus

1.0.0

1 of 3 See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/contactcatalogus-php :latest	eeb625bd660c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,313

cosmo-controller-managercosmo

0.9.0

1 of 2 See more

cosmo-controller-manager cosmo 0.9.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-workspace/cosmo-controller-manager :v0.9.0	8c7fa5552028	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

1,926

cosmo-dashboardcosmo

0.9.1

1 of 1 See more

cosmo-dashboard cosmo 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-workspace/cosmo-dashboard :v0.9.1	6a1c4a81a924	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

1,938

sops-operatorcraftypath

0.8.0

1 of 1 See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
craftypath/sops-operator :v0.8.0	402a0024c732	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.16.5	0.36.0 1.23.7

Open the chart page →

6,480

duplicaticronce

0.1.0

1 of 1 See more

duplicati cronce 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
duplicati/duplicati :2.0.5.111_canary_2020-09-26	8660f0eda7c9	stdlib@go1.14.4	1.23.7

Open the chart page →

3,026

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	stdlib@go1.19.8	1.23.7

Open the chart page →

13,816

revadcs3org

1.6.1

1 of 1 See more

revad cs3org 1.6.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.36.0 1.23.7

Open the chart page →

1,711

cubefscubefs

3.2.0

6 of 10 See more

cubefs cubefs 3.2.0

6 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.36.0 1.23.7
ghcr.io/cubefs/cfs-csi-driver :3.2.0.150.0	8723616a976a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.4	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-attacher :v3.4.0	8b9c313c05f5	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.0	4fd21f36075b	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-resizer :v1.3.0	6e0546563b18	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.2	0.36.0 1.23.7

Open the chart page →

15,933

CubeUniversecubeuniverse

0.1.0

1 of 1 See more

CubeUniverse cubeuniverse 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tksky1/cubeuniverse :0.1alpha	ec7b889f380f	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.20.3	0.36.0 1.23.7

Open the chart page →

1,837

aibrixdanchev

0.7.0

2 of 5 See more

aibrix danchev 0.7.0

2 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
aibrix/controller-manager :v0.7.0	76aabbbfda79	golang.org/x/net@v0.34.0 stdlib@go1.22.12	0.36.0 1.23.7
aibrix/gateway-plugins :v0.7.0	5b93ea4c753a	golang.org/x/net@v0.34.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

5,365

data-fairdata354-helm

1.1.2

1 of 12 See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.23.7

Open the chart page →

38,495

datacube-explorerdatacube-charts

0.5.32

1 of 1 See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
opendatacube/explorer :latest	120457ffcd69	stdlib@go1.22.2	1.23.7

Open the chart page →

4,942

extendeddaemonsetdatadog

0.3.3

1 of 1 See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datadog/extendeddaemonset :v0.8.0	513a4377aed5	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.15	0.36.0 1.23.7

Open the chart page →

4,759

datadogdatadog-test

2.4.23

1 of 2 See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datadog/agent :7.22.0	8f20e56b5311	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.11	0.36.0 1.23.7

Open the chart page →

4,570

dbrepodbrepo

1.13.3

7 of 25 See more

dbrepo dbrepo 1.13.3

7 of the 25 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	stdlib@go1.22.5	1.23.7
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	golang.org/x/net@v0.17.0 stdlib@go1.21.12	0.36.0 1.23.7
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	golang.org/x/net@v0.27.0 stdlib@go1.22.8	0.36.0 1.23.7
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	golang.org/x/net@v0.27.0 stdlib@go1.22.8	0.36.0 1.23.7
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	golang.org/x/net@v0.17.0 stdlib@go1.22.8	0.36.0 1.23.7
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	golang.org/x/net@v0.27.0 stdlib@go1.22.7	0.36.0 1.23.7

Open the chart page →

53,282

dregsydeliveryhero

0.1.5

1 of 1 See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.36.0 1.23.7

Open the chart page →

2,977

gripmockdeliveryhero

1.1.3

1 of 1 See more

gripmock deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
tkpd/gripmock :1.10.1	74441dadcfbd	stdlib@go1.14.6	1.23.7

Open the chart page →

2,794

labelsmanager-controllerdeliveryhero

1.0.4

1 of 1 See more

labelsmanager-controller deliveryhero 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.36.0 1.23.7

Open the chart page →

2,305

weblatedeliveryhero

0.3.2

1 of 3 See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.13.5	0.36.0 1.23.7

Open the chart page →

7,987

snapshot-controllerdemocratic-csi

0.3.0

1 of 1 See more

snapshot-controller democratic-csi 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.2.1	472fa35a89da	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7

Open the chart page →

467

kube-bench-metricsdevopstales

0.1.0

1 of 1 See more

kube-bench-metrics devopstales 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
elastisys/kube-bench-metrics :0.1.6	509b94f1da55	stdlib@go1.15.7	1.23.7

Open the chart page →

2,112

kubedashdevopstales

4.0.0

1 of 8 See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.22.4	8be660470961	stdlib@go1.17.3	1.23.7

Open the chart page →

9,305

permission-managerdevopstales

1.8.0

1 of 1 See more

permission-manager devopstales 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.8	0.36.0 1.23.7

Open the chart page →

2,267

trivy-operatordevopstales

2.5.0

1 of 1 See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
devopstales/trivy-operator :2.5	75136aa7a26e	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

5,608

Container images carrying it

3,266 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/user-component-php :latest	198db44fabb5	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7	1
ghcr.io/cosmo-workspace/cosmo-controller-manager :v0.9.0	8c7fa5552028	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7	1
ghcr.io/cosmo-workspace/cosmo-dashboard :v0.9.1	6a1c4a81a924	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7	1
ghcr.io/crazy-max/samba :4.15.5	bed6f4ec2e82	stdlib@go1.17.2	1.23.7	1
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.36.0 1.23.7	1
ghcr.io/cubefs/cfs-csi-driver :3.2.0.150.0	8723616a976a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.4	0.36.0 1.23.7	1
ghcr.io/daocloud/crproxy/crproxy :v0.8.0	ee1eb3c9c9a1	golang.org/x/net@v0.26.0 stdlib@go1.21.11	0.36.0 1.23.7	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7	1
ghcr.io/dcristobalhmad/kube-secrets-exporter :latest	a9043737cb73	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7	1
ghcr.io/debridmediamanager/zurg-testing :v0.9.3-final	5c47ef99443a	golang.org/x/net@v0.20.0 stdlib@go1.22.5	0.36.0 1.23.7	1
ghcr.io/decayofmind/kube-better-node :master	ccd2ce03b682	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.6	0.36.0 1.23.7	1
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.36.0	1
ghcr.io/deliveryhero/field-exporter :v1.4.0	6b71ba4f9297	golang.org/x/net@v0.26.0 stdlib@go1.22.12	0.36.0 1.23.7	1
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	golang.org/x/net@v0.25.0 stdlib@go1.20.14	0.36.0 1.23.7	1
ghcr.io/devplayer0/lxd8s :0.3.1	e159ba41aede	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.17	0.36.0 1.23.7	1
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	stdlib@go1.16.6	1.23.7	1
ghcr.io/dexidp/dex :v2.35.3	13964b29d63e	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.2	0.36.0 1.23.7	1
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.36.0 1.23.7	1
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/net@v0.11.0 stdlib@go1.19.6	0.36.0 1.23.7	1
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/net@v0.0.0-20210908191846-a5e095526f91 stdlib@go1.17.5	0.36.0 1.23.7	1
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/net@v0.10.0 stdlib@go1.21.0	0.36.0 1.23.7	1
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	stdlib@go1.23.1	1.23.7	1
ghcr.io/dodevops/azure-advanced-backup :0.4.0	1041d4449e49	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.9	0.36.0 1.23.7	1
ghcr.io/dodevops/scalyr-k8snode-manager :latest	fc39fcdd3968	stdlib@go1.18.1	1.23.7	1
ghcr.io/donkie/spoolman :0.24.0	42135965c42d	stdlib@go1.19.8	1.23.7	1
ghcr.io/doodlescheduling/k8s-pause :v0.1.1	6b3215e37738	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.8	0.36.0 1.23.7	1
ghcr.io/doodlescheduling/k8svault-controller :v0.2.0	627e5e211766	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea stdlib@go1.16.15	0.36.0 1.23.7	1
ghcr.io/doodlescheduling/saml-exporter :v0.5.0	3d5a99841bc2	stdlib@go1.22.3	1.23.7	1
ghcr.io/douban/qiniu-exporter :main	d1da3bcfad7d	stdlib@go1.19.5	1.23.7	1
ghcr.io/dploeger/cloudflare-ddns-update :v0.1.0	ec06685b9ff4	golang.org/x/net@v0.25.0 stdlib@go1.22.4	0.36.0 1.23.7	1
ghcr.io/druggeri/nut_exporter :3.3.0	276460d141c7	golang.org/x/net@v0.35.0	0.36.0	1
ghcr.io/dysnix/bitnami/mongodb :4.4.11-debian-10-r5	073116e61007	stdlib@go1.16.12	1.23.7	1
ghcr.io/dysnix/docker-bitcoind :0.29.0	490ca8e3dd21	stdlib@go1.22.2	1.23.7	1
ghcr.io/edgelesssys/continuum/continuum-proxy	24c76f294a80	golang.org/x/net@v0.32.0 stdlib@go1.23.3	0.36.0 1.23.7	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.7	0.36.0 1.23.7	1
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.36.0 1.23.7	1
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.23.7	1