CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,686; of 17,803 indexed, latest versions
Container images: 3,262; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,686 of 17,803 indexed charts deploy, on 3,262 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+201 more	0.36.0	2,483
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,163

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,686 by stars

Chart

Latest

Affected images

Radar Score

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.3	f09282d281f6	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.12	0.36.0 1.23.7

Open the chart page →

11,422

aws-cloudwatch-metricsaws

0.0.11

1 of 1 See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

1,563

zabbixcetic

3.1.3

2 of 5 See more

zabbix cetic 3.1.3

2 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.1	0.36.0 1.23.7
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	stdlib@go1.18.1	1.23.7

Open the chart page →

34,000

chatwootchatwoot

2.0.24

2 of 3 See more

chatwoot chatwoot 2.0.24

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	stdlib@go1.18.2	1.23.7
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	stdlib@go1.16.7	1.23.7

Open the chart page →

9,219

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

4,925

home-assistantgeek-cookbook

13.5.0

1 of 1 See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	stdlib@go1.17.1	1.23.7

Open the chart page →

7,721

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.23.7

Open the chart page →

6,585

hostpath-provisionerrimusz

0.2.13

1 of 1 See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16.7	0.36.0 1.23.7

Open the chart page →

2,039

daskdask

2024.1.1

1 of 2 See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

12,876

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

3,051

openldaphelm-openldap

2.0.4

1 of 3 See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3 stdlib@go1.13.4	0.36.0 1.23.7

Open the chart page →

6,220

kube-starrockskube-starrocks

1.11.7

1 of 1 See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
starrocks/operator :v1.11.7	8c20435a7579	golang.org/x/net@v0.17.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

556

linkerd-jaegerlinkerd2

30.12.11

2 of 4 See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.36.0 1.23.7
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.36.0 1.23.7

Open the chart page →

4,418

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.23.7
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	stdlib@go1.22.7	1.23.7

Open the chart page →

5,302

homeassistantvolker-raschek

0.2.3

1 of 1 See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.12.4	8d000332b09b	stdlib@go1.17.1	1.23.7

Open the chart page →

6,051

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7

Open the chart page →

1,031

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.36.0 1.23.7

Open the chart page →

6,854

edge-stackdatawire

7.1.8-ea

1 of 2 See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
datawire/aes :2.0.3-ea	07f8fe4f4f8e	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15	0.36.0 1.23.7

Open the chart page →

5,181

glasskube-operatorglasskube

0.12.2

3 of 3 See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.36.0 1.23.7
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.36.0 1.23.7
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.36.0 1.23.7

Open the chart page →

11,997

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	stdlib@go1.20.12	1.23.7

Open the chart page →

5,385

linkerd-vizlinkerd2-edge

30.14.11-edge

1 of 5 See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.36.0 1.23.7

Open the chart page →

1,353

plane-cemakeplane

1.8.1

1 of 11 See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.23.7

Open the chart page →

4,885

milvusmilvus-helm

5.0.28

1 of 4 See more

milvus milvus-helm 5.0.28

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7

Open the chart page →

10,809

mssqlmssql

1.10.3

1 of 1 See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql :1.10.3	f923d842bc47	stdlib@go1.23.1	1.23.7

Open the chart page →

642

outlineoutline

0.0.9

1 of 4 See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	stdlib@go1.19.4	1.23.7

Open the chart page →

4,434

spirespiffe

0.30.2

1 of 10 See more

spire spiffe 0.30.2

1 of the 10 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/spiffe-csi-driver :0.2.7	9dfe4f0caff0	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.36.0 1.23.7

Open the chart page →

1,685

ansible-semaphorecloudhippie

15.2.10

1 of 1 See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.19.14	98ad9bc7a2a0	stdlib@go1.23.3	1.23.7

Open the chart page →

1,242

zookeepercloudpirates-zookeeper

0.13.11

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	cab8944a33a1	stdlib@go1.18.1	1.23.7

Open the chart page →

2,975

vertical-pod-autoscalercluster-autoscaler

0.12.0

1 of 4 See more

vertical-pod-autoscaler cluster-autoscaler 0.12.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.36.0 1.23.7

Open the chart page →

1,062

codefreshcodefresh-onprem

2.12.14

1 of 42 See more

codefresh codefresh-onprem 2.12.14

1 of the 42 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	golang.org/x/net@v0.27.0 stdlib@go1.21.12	0.36.0 1.23.7

Open the chart page →

15,119

aws-ebs-csi-driverdeliveryhero

2.17.4

6 of 6 See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	golang.org/x/net@v0.4.0 stdlib@go1.19.6	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	golang.org/x/net@v0.4.0 stdlib@go1.19.7	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	golang.org/x/net@v0.4.0 stdlib@go1.19.8	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.36.0 1.23.7
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	golang.org/x/net@v0.7.0 stdlib@go1.19.8	0.36.0 1.23.7

Open the chart page →

6,525

loki-simple-scalablegrafana

1.8.11

2 of 3 See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18	0.36.0 1.23.7
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.36.0 1.23.7

Open the chart page →

6,484

adguard-homerm3l

0.24.1

1 of 2 See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.51	3a143e6c071c	golang.org/x/net@v0.25.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

1,149

supabasetokens-studio

1.0.0

2 of 14 See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	golang.org/x/net@v0.30.0 stdlib@go1.23.2	0.36.0 1.23.7
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

23,400

prometheus-operatorarldka

13.0.1

2 of 2 See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

2,108

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	stdlib@go1.22.4	1.23.7

Open the chart page →

8,586

nsqbeeinventor

1.3.0

1 of 1 See more

871

frigateblakeblackshear

7.8.0

1 of 1 See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	golang.org/x/net@v0.8.0 stdlib@go1.17.1	0.36.0 1.23.7

Open the chart page →

3,005

kube-prometheuschoerodon

9.3.1

4 of 7 See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.36.0 1.23.7
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/net@v0.0.0-20190108225652-1e06a53dbb7e stdlib@go1.13.11	0.36.0 1.23.7
squareup/ghostunnel :v1.5.2	70f4cf270425	golang.org/x/net@v0.0.0-20191003171128-d98b1b443823 stdlib@go1.13.4	0.36.0 1.23.7
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.3	0.36.0 1.23.7

Open the chart page →

12,251

minifluxgabe565

0.9.2

1 of 2 See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/net@v0.34.0 stdlib@go1.23.5	0.36.0 1.23.7

Open the chart page →

1,248

cubestoregadsme

1.2.0

1 of 3 See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.36.0 1.23.7

Open the chart page →

3,055

waypointhashicorp

0.1.21

1 of 2 See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7

Open the chart page →

4,176

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.36.0 1.23.7

Open the chart page →

7,968

jaeger-all-in-onejaeger-all-in-one

0.1.12

1 of 1 See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.55	f6b5d09073f1	golang.org/x/net@v0.21.0 stdlib@go1.22.0	0.36.0 1.23.7

Open the chart page →

1,223

rabbitmqkubelauncher

0.2.11

1 of 1 See more

rabbitmq kubelauncher 0.2.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/kubelauncher/rabbitmqdigest-pinned	ff5a36a457f1	stdlib@go1.22.2	1.23.7

Open the chart page →

1,134

purelbpurelb

0.0.0-106-ipv6-lbip-052cedab

1 of 2 See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.15	0.36.0 1.23.7

Open the chart page →

4,413

dex-k8s-authenticatorsagikazarmark

0.0.3

1 of 1 See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/net@v0.0.0-20190522155817-f3200d17e092 stdlib@go1.13.11	0.36.0 1.23.7

Open the chart page →

2,792

connaisseurconnaisseur

2.12.0

1 of 2 See more

connaisseur connaisseur 2.12.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	83edc2b8e9ff	stdlib@go1.18.2	1.23.7

Open the chart page →

3,049

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.17.2	0.36.0 1.23.7

Open the chart page →

1,513

dependabot-gitlabdependabot-gitlab

6.3.0

1 of 3 See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
andrcuns/dependabot-gitlab :7.7.0-alpha.1	43060f159f4c	stdlib@go1.18.3	1.23.7

Open the chart page →

4,702

Container images carrying it

3,262 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/ingress-nginx/controller :v1.7.0	7612338342a1	golang.org/x/net@v0.8.0 stdlib@go1.20.1	0.36.0 1.23.7	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.2	0.36.0 1.23.7	1
registry.k8s.io/ingress-nginx/controller :v1.11.3	d56f135b6462	golang.org/x/net@v0.29.0 stdlib@go1.22.8	0.36.0 1.23.7	1
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	golang.org/x/net@v0.22.0 stdlib@go1.22.2	0.36.0 1.23.7	1
registry.k8s.io/ingress-nginx/controller :v1.12.0	e6b8de175acd	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.36.0 1.23.7	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.0	44d1d0e9f19c	golang.org/x/net@v0.21.0 stdlib@go1.21.6	0.36.0 1.23.7	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.3.0	549e71a6ca24	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.36.0 1.23.7	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.5.0	aaafd456bda1	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.36.0 1.23.7	1
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.36.0 1.23.7	1
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.36.0 1.23.7	1
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7	1
registry.k8s.io/kubectl :v1.32.7	3c5268158974	golang.org/x/net@v0.30.0	0.36.0	1
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	golang.org/x/net@v0.30.0 stdlib@go1.23.3	0.36.0 1.23.7	1
registry.k8s.io/kubectl :v1.31.10	e0b2d217d1d2	golang.org/x/net@v0.26.0	0.36.0	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.36.0 1.23.7	1
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7	1
registry.k8s.io/kube-scheduler :v1.23.14	3e149d206076	stdlib@go1.17.13	1.23.7	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	golang.org/x/net@v0.23.0 stdlib@go1.21.11	0.36.0 1.23.7	1
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.36.0 1.23.7	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.36.0 1.23.7	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	golang.org/x/net@v0.20.0 stdlib@go1.21.6	0.36.0 1.23.7	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/net@v0.20.0 stdlib@go1.21.8	0.36.0 1.23.7	1
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	golang.org/x/net@v0.25.0 stdlib@go1.22.8	0.36.0 1.23.7	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	golang.org/x/net@v0.27.0 stdlib@go1.23.2	0.36.0 1.23.7	1
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.11.1	e6a43c83ab16	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-attacher :v4.1.0	08721106b949	golang.org/x/net@v0.4.0 stdlib@go1.19	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-attacher :v4.5.1	9dcd469f02bb	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-attacher :v3.5.0	dd245051317e	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-external-health-monitor-controller :v0.7.0	80b9ba94aa2a	golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b stdlib@go1.18	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.1	2cddcc716c19	golang.org/x/net@v0.17.0 stdlib@go1.20.5	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	golang.org/x/net@v0.4.0 stdlib@go1.19	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.2	a13bff2ed69a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	golang.org/x/net@v0.13.0 stdlib@go1.20.5	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.0.1	e07f914c32f0	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-provisioner :v5.0.2	7b9cdb5830d0	golang.org/x/net@v0.25.0 stdlib@go1.22.5	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	golang.org/x/net@v0.4.0 stdlib@go1.19	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-provisioner :v3.3.0	ee3b525d5b89	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.13.1	2a0b297cc7c4	golang.org/x/net@v0.34.0 stdlib@go1.23.1	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	golang.org/x/net@v0.4.0 stdlib@go1.19	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.6.0	425d8f1b7693	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.10.1	4ecda2818f6d	golang.org/x/net@v0.18.0 stdlib@go1.21.5	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.3.0	6e0546563b18	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.2	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.12.0	ab774734705a	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-snapshotter :v6.1.0	291334908ddf	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-snapshotter :v8.0.2	5f051159c95f	golang.org/x/net@v0.28.0 stdlib@go1.22.5	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.1	5f4bb469fec5	golang.org/x/net@v0.33.0 stdlib@go1.23.6	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-snapshotter :v4.2.1	818f35653f2e	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.2	0.36.0 1.23.7	1
registry.k8s.io/sig-storage/csi-snapshotter :v5.0.1	89e900a160a9	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.3	0.36.0 1.23.7	1