CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,746; of 17,805 indexed, latest versions
Container images: 3,305; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,746 of 17,805 indexed charts deploy, on 3,305 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,515
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+148 more	1.23.7	3,203

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,746 by stars

Chart

Latest

Affected images

Radar Score

maxscalefour-allportal

4.1.16

2 of 3 See more

maxscale four-allportal 4.1.16

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb-galera :10.6.12-debian-11-r16	43a70df0e7c6	stdlib@go1.19.7	1.23.7
bitnamilegacy/mysqld-exporter :0.14.0-debian-11-r103	04768b637c94	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.8	0.36.0 1.23.7

Open the chart page →

6,613

readium-lcpserverfpetr

0.0.5

1 of 3 See more

readium-lcpserver fpetr 0.0.5

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver :1.9.0	324f9b7b689c	golang.org/x/net@v0.17.0 stdlib@go1.22.0	0.36.0 1.23.7

Open the chart page →

1,373

readium-lsdserverfpetr

0.0.1

1 of 2 See more

readium-lsdserver fpetr 0.0.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver :1.9.0	cdba39e3f3d0	golang.org/x/net@v0.17.0 stdlib@go1.22.0	0.36.0 1.23.7

Open the chart page →

1,373

free5gc-amffree5gc-amf

0.1.3

1 of 1 See more

free5gc-amf free5gc-amf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

903

free5gc-ausffree5gc-ausf

0.1.3

1 of 1 See more

free5gc-ausf free5gc-ausf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

911

free5gc-chffree5gc-chf

0.1.3

1 of 1 See more

free5gc-chf free5gc-chf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/net@v0.24.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

1,004

free5gc-nrffree5gc-nrf

0.1.3

1 of 1 See more

free5gc-nrf free5gc-nrf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

920

free5gc-nssffree5gc-nssf

0.1.3

1 of 1 See more

free5gc-nssf free5gc-nssf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

911

free5gc-pcffree5gc-pcf

0.1.3

1 of 1 See more

free5gc-pcf free5gc-pcf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

903

free5gc-smffree5gc-smf

0.1.3

1 of 1 See more

free5gc-smf free5gc-smf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

919

free5gc-udmfree5gc-udm

0.1.3

1 of 1 See more

free5gc-udm free5gc-udm 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

911

free5gc-udrfree5gc-udr

0.1.3

1 of 1 See more

free5gc-udr free5gc-udr 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

920

free5gc-upffree5gc-upf

0.1.3

1 of 1 See more

free5gc-upf free5gc-upf 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

1,075

free5gc-webuifree5gc-webui

0.1.3

1 of 1 See more

free5gc-webui free5gc-webui 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

1,256

powerdnsfsdrw08

0.1.3

1 of 4 See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
pschiffe/pdns-mysql :alpine	d196c796cafb	stdlib@go1.21.5	1.23.7

Open the chart page →

1,959

aptlyg0dscookie

0.4.0

1 of 2 See more

aptly g0dscookie 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	stdlib@go1.18.3	1.23.7

Open the chart page →

3,483

icinga2g0dscookie

0.2.0

1 of 1 See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.18.1	0.36.0 1.23.7

Open the chart page →

4,435

passboltg0dscookie

0.5.2

2 of 2 See more

passbolt g0dscookie 0.5.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mariadb :10.7	9a48ac9f196f	stdlib@go1.16.7	1.23.7
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	stdlib@go1.14.4	1.23.7

Open the chart page →

8,022

borgmaticgabe565

0.10.1

1 of 1 See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/borgmatic-collective/borgmatic :1.9.9	835b72878606	stdlib@go1.23.5	1.23.7

Open the chart page →

2,584

castsponsorskipgabe565

0.8.1

1 of 1 See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	golang.org/x/net@v0.32.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

1,383

gotifygabe565

0.4.0

1 of 1 See more

gotify gabe565 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/gotify/server :2.6.1	04f4c4bb7cdd	golang.org/x/net@v0.25.0 stdlib@go1.23.3	0.36.0 1.23.7

Open the chart page →

763

hammondgabe565

0.6.4

1 of 1 See more

hammond gabe565 0.6.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.36.0 1.23.7

Open the chart page →

1,807

limogabe565

0.8.0

1 of 1 See more

limo gabe565 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	stdlib@go1.20.12	1.23.7

Open the chart page →

1,331

matrimonygabe565

0.7.0

1 of 1 See more

matrimony gabe565 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/matrimony :latest	d39a9d7c3e1b	stdlib@go1.22.0	1.23.7

Open the chart page →

1,136

podgrabgabe565

0.5.2

1 of 1 See more

podgrab gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/akhilrex/podgrab :1.0.0	bce133f3f511	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.2	0.36.0 1.23.7

Open the chart page →

2,402

scanservjsgabe565

0.9.2

1 of 1 See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	stdlib@go1.19.8	1.23.7

Open the chart page →

13,370

smarter-device-managergabe565

0.5.2

1 of 1 See more

smarter-device-manager gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.1	0.36.0 1.23.7

Open the chart page →

1,227

galoygaloymoney

0.34.7

4 of 24 See more

galoy galoymoney 0.34.7

4 of the 24 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.36.0 1.23.7
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.36.0 1.23.7
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

8,731

galoy-depsgaloymoney

0.10.20

8 of 9 See more

galoy-deps galoymoney 0.10.20

8 of the 9 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.36.0 1.23.7
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.36.0 1.23.7

Open the chart page →

12,011

lndgaloymoney

0.10.6

1 of 3 See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

2,162

monitoringgaloymoney

0.12.21

5 of 6 See more

monitoring galoymoney 0.12.21

5 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

5,337

galoygaloymoney2

0.34.7

4 of 24 See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.36.0 1.23.7
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.36.0 1.23.7
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

8,731

galoy-depsgaloymoney2

0.10.20

8 of 9 See more

galoy-deps galoymoney2 0.10.20

8 of the 9 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.9	0.36.0 1.23.7
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.36.0 1.23.7

Open the chart page →

12,011

lndgaloymoney2

0.10.6

1 of 3 See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

2,162

monitoringgaloymoney2

0.12.21

5 of 6 See more

monitoring galoymoney2 0.12.21

5 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0 stdlib@go1.23.2	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0 stdlib@go1.23.2	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

5,337

alertmanager-discordgeek-cookbook

1.3.2

1 of 1 See more

alertmanager-discord geek-cookbook 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rogerrum/alertmanager-discord :1.0.3	827593369625	stdlib@go1.17.4	1.23.7

Open the chart page →

1,045

anonaddygeek-cookbook

6.0.0

1 of 1 See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
anonaddy/anonaddy :0.12.3	957a95565166	stdlib@go1.18.3	1.23.7

Open the chart page →

4,792

apache-musicindexgeek-cookbook

2.4.2

1 of 1 See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	stdlib@go1.18.4	1.23.7

Open the chart page →

14,888

autobrrgeek-cookbook

1.1.3

1 of 1 See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

2,237

calibre-webgeek-cookbook

8.4.2

1 of 1 See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :version-0.6.12	938810eca3d3	stdlib@go1.16.7	1.23.7

Open the chart page →

16,253

dendritegeek-cookbook

6.4.0

1 of 1 See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.18.5	0.36.0 1.23.7

Open the chart page →

2,144

embygeek-cookbook

3.4.2

1 of 1 See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	stdlib@go1.15	1.23.7

Open the chart page →

8,611

gatusgeek-cookbook

1.1.2

1 of 1 See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7

Open the chart page →

1,882

gonicgeek-cookbook

6.4.2

1 of 1 See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.16.4	0.36.0 1.23.7

Open the chart page →

3,525

gotifygeek-cookbook

1.2.2

1 of 1 See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
gotify/server :2.1.4	09c79bc1e403	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16	0.36.0 1.23.7

Open the chart page →

3,133

haste-servergeek-cookbook

3.4.2

1 of 1 See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	stdlib@go1.15	1.23.7

Open the chart page →

11,078

jackettgeek-cookbook

11.7.2

1 of 1 See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	stdlib@go1.18.3	1.23.7

Open the chart page →

9,920

lidarrgeek-cookbook

14.2.2

1 of 1 See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	stdlib@go1.16.7	1.23.7

Open the chart page →

14,490

maddygeek-cookbook

3.2.0

1 of 1 See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/net@v0.0.0-20211011170408-caeb26a5c8c0 stdlib@go1.17.2	0.36.0 1.23.7

Open the chart page →

2,631

minifluxgeek-cookbook

5.2.0

1 of 2 See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/net@v0.0.0-20210916014120-12bc252f5db8 stdlib@go1.17.8	0.36.0 1.23.7

Open the chart page →

2,431

Container images carrying it

3,305 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	stdlib@go1.20.12	1.23.7	1
ghcr.io/gabe565/matrimony :latest	d39a9d7c3e1b	stdlib@go1.22.0	1.23.7	1
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.36.0 1.23.7	1
ghcr.io/getsentry/sentry :26.7.2	7c5052aa4e3c	stdlib@go1.19.8	1.23.7	1
ghcr.io/gijsvandulmen/k8qu :1.4	e897b18db13d	golang.org/x/net@v0.26.0 stdlib@go1.22.6	0.36.0 1.23.7	1
ghcr.io/glassflow/kafka-kerberos-gateway :latest	2ae01c524a6e	stdlib@go1.21.13	1.23.7	1
ghcr.io/glauth/glauth :v2.5.2	09c782ca5984	golang.org/x/net@v0.17.0	0.36.0	1
ghcr.io/gotify/server :2.6.1	04f4c4bb7cdd	golang.org/x/net@v0.25.0 stdlib@go1.23.3	0.36.0 1.23.7	1
ghcr.io/gotway/gotway :v0.0.13	7ed73c1979ee	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.18.3	0.36.0 1.23.7	1
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.2	c7adcc4db378	golang.org/x/net@v0.30.0 stdlib@go1.23.6	0.36.0 1.23.7	1
ghcr.io/grafana/tempo-operator/tempo-operator :v0.4.0	2627be646391	golang.org/x/net@v0.12.0 stdlib@go1.21.0	0.36.0 1.23.7	1
ghcr.io/heimops/mimir-operator :latest	4e1a3ef1fe82	golang.org/x/net@v0.17.0	0.36.0	1
ghcr.io/helm/chartmuseum :v0.16.0	71d1f1c0179e	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.36.0 1.23.7	1
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba stdlib@go1.17.6	0.36.0 1.23.7	1
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/net@v0.0.0-20220531201128-c960675eff93 stdlib@go1.17.8	0.36.0 1.23.7	1
ghcr.io/helmfile/helmfile :v1.7.4	f20e612d5a98	stdlib@go1.23.4	1.23.7	1
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	stdlib@go1.23.3	1.23.7	1
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	stdlib@go1.23.3	1.23.7	1
ghcr.io/home-assistant/home-assistant :2026.8.2	56690a89c79a	stdlib@go1.23.3	1.23.7	1
ghcr.io/home-assistant/home-assistant :2026.9.1 :latest	612d76760b54	stdlib@go1.23.3	1.23.7	1
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	stdlib@go1.23.3	1.23.7	1
ghcr.io/home-assistant/home-assistant :2026.9.2	a1bc133af84e	stdlib@go1.23.3	1.23.7	1
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	stdlib@go1.17.1	1.23.7	1
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	stdlib@go1.17.1	1.23.7	1
ghcr.io/home-operations/home-assistant :2026.3.1	067e54e2e107	stdlib@go1.23.3	1.23.7	1
ghcr.io/honeycombio/kspan/kspan :0.2	c966a4f8a4b7	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.20.1	0.36.0 1.23.7	1
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	golang.org/x/net@v0.33.0 stdlib@go1.23.1	0.36.0 1.23.7	1
ghcr.io/itakurah/kubernetes-event-exporter :v1.7	8abb52b66557	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.36.0 1.23.7	1
ghcr.io/itzg/minecraft-server :latest	46919d151d39	stdlib@go1.22.2	1.23.7	1
ghcr.io/jaconi-io/koptimize :1.2.5	aca1bbd609b6	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.36.0 1.23.7	1
ghcr.io/jimmidyson/configmap-reload :v0.13.1	ca0c14eef541	stdlib@go1.22.4	1.23.7	1
ghcr.io/jlclx/runtimeclass-controller :latest	b3a87f92a963	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.13	0.36.0 1.23.7	1
ghcr.io/jmberesford/retrom-service :retrom-v0.7.14	4d763d58f11d	golang.org/x/net@v0.28.0 stdlib@go1.20.12	0.36.0 1.23.7	1
ghcr.io/jmcgrath207/par :v0.1.0	9977511cb142	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.36.0 1.23.7	1
ghcr.io/jmriebold/sqs-prometheus-exporter :1.1.0	7564828ab7cb	stdlib@go1.24.0	1.23.7	1
ghcr.io/jodevsa/wireguard-operator/manager :v2.0.28	39412bdd403b	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.36.0 1.23.7	1
ghcr.io/jsclayton/prometheus-plex-exporter :latest	18ef1b2197ef	stdlib@go1.23.0	1.23.7	1
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	golang.org/x/net@v0.34.0 stdlib@go1.23.4	0.36.0 1.23.7	1
ghcr.io/k10app/businit :latest	94c9a3e799c2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.36.0 1.23.7	1
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	stdlib@go1.18.4	1.23.7	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	stdlib@go1.16.8	1.23.7	1
ghcr.io/k8s-at-home/cni-plugins :v0.9.1	241592d93640	stdlib@go1.15.8	1.23.7	1
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	stdlib@go1.15	1.23.7	1
ghcr.io/k8s-at-home/gateway-admision-controller :v2.0.0	0d6d0df98fe4	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.4	0.36.0 1.23.7	1
ghcr.io/k8s-at-home/gateway-admision-controller :v3.5.0	175512bb3f61	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.3	0.36.0 1.23.7	1
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	stdlib@go1.15	1.23.7	1
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	stdlib@go1.18.3	1.23.7	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	stdlib@go1.16.7	1.23.7	1
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	stdlib@go1.15	1.23.7	1
ghcr.io/k8s-at-home/nullserv :v1.3.0	0792c7e6d814	stdlib@go1.16.5	1.23.7	1