CVE-2025-22870

Medium

Advisory

Published 12 Mar 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,666; of 17,781 indexed, latest versions
Container images: 3,231; deployed by those charts
Fix available: 2 of 3; affected packages

HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

Carried by container images the latest versions of 2,666 of 17,781 indexed charts deploy, on 3,231 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+200 more	0.36.0	2,459
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+147 more	1.23.7	3,131

OSV records: DEBIAN-CVE-2025-22870 GHSA-qxp5-gwg8-xv66 GO-2025-3503

Charts affected

2,666 by stars

Chart

Latest

Affected images

Radar Score

scaffoldsigstore

0.6.114

2 of 15 See more

scaffold sigstore 0.6.114

2 of the 15 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.23.7
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.23.7

Open the chart page →

7,710

mongodb-backupsinextra

1.1.0

1 of 1 See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	golang.org/x/net@v0.27.0 stdlib@go1.22.12	0.36.0 1.23.7

Open the chart page →

4,238

postgresql-singlesinextra

1.15.1

1 of 1 See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	stdlib@go1.16.15	1.23.7

Open the chart page →

4,913

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.36.0 1.23.7
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.36.0 1.23.7

Open the chart page →

6,422

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f stdlib@go1.18	0.36.0 1.23.7

Open the chart page →

2,200

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.36.0 1.23.7

Open the chart page →

2,301

smallest-self-hostsmallest-self-host

0.2.2

6 of 12 See more

smallest-self-host smallest-self-host 0.2.2

6 of the 12 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0 stdlib@go1.21.10	0.36.0 1.23.7
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	golang.org/x/net@v0.25.0 stdlib@go1.22.3	0.36.0 1.23.7
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0 stdlib@go1.19.4	0.36.0 1.23.7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.36.0 1.23.7
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	golang.org/x/net@v0.25.0 stdlib@go1.22.8	0.36.0 1.23.7
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0 stdlib@go1.22.2	0.36.0 1.23.7

Open the chart page →

7,685

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

1,144

yopasssoftizy

1.0.1

1 of 2 See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.4.6	9516e3b3e88c	stdlib@go1.19.1	1.23.7

Open the chart page →

1,461

artifact-hubsoftonic

1.19.0

5 of 8 See more

artifact-hub softonic 1.19.0

5 of the 8 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	golang.org/x/net@v0.11.0 stdlib@go1.19.10	0.36.0 1.23.7
artifacthub/db-migrator :v1.19.0	2a746b289fcd	stdlib@go1.22.4	1.23.7
artifacthub/hub :v1.19.0	111918d8c399	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7
artifacthub/scanner :v1.19.0	323d026e78c3	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.36.0 1.23.7
artifacthub/tracker :v1.19.0	6596c8c4d955	golang.org/x/net@v0.26.0 stdlib@go1.22.4	0.36.0 1.23.7

Open the chart page →

14,491

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.13.12	0.36.0 1.23.7

Open the chart page →

2,637

go-ratelimitsoftonic

1.0.7

2 of 3 See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14	0.36.0 1.23.7
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.23.7

Open the chart page →

5,098

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.6	0.36.0 1.23.7

Open the chart page →

2,591

redis-shardedsoftonic

0.5.0

1 of 2 See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.23.7

Open the chart page →

2,307

rabbitmqsolidcharts

0.7.5

1 of 2 See more

rabbitmq solidcharts 0.7.5

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5-management	ffd1b50c522a	stdlib@go1.22.2	1.23.7

Open the chart page →

1,002

gloosolo-gloo-edge

0.0.0-fork

4 of 5 See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.36.0 1.23.7

Open the chart page →

9,224

sp-otel-collectorsp-otel-collector

1.1.6

1 of 1 See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.36.0 1.23.7

Open the chart page →

2,022

sql-operatorsql-operator

0.11.2

1 of 1 See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.36.0 1.23.7

Open the chart page →

1,594

gitwebhookproxystakater

0.2.79

1 of 1 See more

gitwebhookproxy stakater 0.2.79

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
stakater/gitwebhookproxy :v0.2.79	c1226e5270cd	stdlib@go1.13.1	1.23.7

Open the chart page →

1,503

splunk-operatorstakater

0.0.6

1 of 2 See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb stdlib@go1.17.12	0.36.0 1.23.7

Open the chart page →

11,459

graph-nodestakewise

3.1.0

1 of 3 See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.24.0	e3de33bd746b	golang.org/x/net@v0.17.0 stdlib@go1.19.8	0.36.0 1.23.7

Open the chart page →

4,661

mayastorstartechnica

0.2.0

3 of 13 See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.36.0 1.23.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18	0.36.0 1.23.7
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	golang.org/x/net@v0.0.0-20220921203646-d300de134e69 stdlib@go1.18	0.36.0 1.23.7

Open the chart page →

4,348

statpingstatping

0.1.14

1 of 1 See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73 stdlib@go1.14.13	0.36.0 1.23.7

Open the chart page →

3,371

stornxstornx

1.1.1

1 of 9 See more

stornx stornx 1.1.1

1 of the 9 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0	0.36.0

Open the chart page →

11,574

hlf-k8ssubstra

10.2.4

3 of 7 See more

hlf-k8s substra 10.2.4

3 of the 7 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.36.0 1.23.7
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.36.0 1.23.7
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.36.0 1.23.7

Open the chart page →

12,006

Grafanasurajwarbhe-grafana

0.1.0

1 of 1 See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
surajwarbhe/grafana :v1	85248611e9f1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.36.0 1.23.7

Open the chart page →

2,597

hello-appsysintelligent

2.0.1

1 of 1 See more

hello-app sysintelligent 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
sysintelligent/hello-app :2.0.1	77fb30df847d	golang.org/x/net@v0.19.0 stdlib@go1.19.3	0.36.0 1.23.7

Open the chart page →

1,880

terraform-controllerterraform-controller

0.0.20

1 of 1 See more

terraform-controller terraform-controller 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
absaoss/terraform-controller :v0.0.20	ad538a1285a0	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.14.8	0.36.0 1.23.7

Open the chart page →

3,538

jenkinstestchart

0.1.9

1 of 2 See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	golang.org/x/net@v0.7.0 stdlib@go1.20.6	0.36.0 1.23.7

Open the chart page →

9,102

jenkinstest-jenkins

9.1.0

1 of 2 See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	golang.org/x/net@v0.7.0 stdlib@go1.20.6	0.36.0 1.23.7

Open the chart page →

9,102

tocktock

0.6.3

1 of 9 See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.5-debian-11-r6	6fe59ed5d79f	golang.org/x/net@v0.19.0 stdlib@go1.20.12	0.36.0 1.23.7

Open the chart page →

12,907

goalerttokens-studio

0.0.5

1 of 2 See more

goalert tokens-studio 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
goalert/goalert :v0.32.0	08d57388b0cb	golang.org/x/net@v0.20.0 stdlib@go1.22.1	0.36.0 1.23.7

Open the chart page →

1,469

tor-snowflake-proxytor-snowflake-proxy

1.2.0

1 of 1 See more

tor-snowflake-proxy tor-snowflake-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
thetorproject/snowflake-proxy :v2.11.0	1ddc5069d354	golang.org/x/net@v0.35.0	0.36.0

Open the chart page →

740

spa-reloadertoucan

0.1.0

1 of 1 See more

spa-reloader toucan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
toucansoftware/spa-reloader :latest	c187b1fba501	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.36.0 1.23.7

Open the chart page →

2,245

traefik-hubtraefik

4.2.0

1 of 1 See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/traefik/traefik-hub :v2.11.0	322f5f8cc105	golang.org/x/net@v0.17.0 stdlib@go1.21.8	0.36.0 1.23.7

Open the chart page →

3,165

atlantistrozz

3.12.11

1 of 1 See more

atlantis trozz 3.12.11

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
runatlantis/atlantis :v0.16.1	45fbaf7e207c	golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a stdlib@go1.14.7	0.36.0 1.23.7

Open the chart page →

5,280

guardrails-agent-kubernetesturbot

0.3.0

1 of 1 See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	golang.org/x/net@v0.26.0 stdlib@go1.22.8	0.36.0 1.23.7

Open the chart page →

4,020

boundaryundergrid

0.1.0

2 of 3 See more

boundary undergrid 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v1.6	84edcf796267	stdlib@go1.18.1	1.23.7
hashicorp/boundary :0.8.1	fb70bd9210ff	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.10	0.36.0 1.23.7

Open the chart page →

4,957

upbot-operatorupbot-operator

0.0.20

1 of 2 See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
alpine/k8s :1.28.13	e5c0b053fed7	golang.org/x/net@v0.12.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

4,460

user-componentuser-component

1.2.0

1 of 4 See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/user-component-php :latest	198db44fabb5	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

7,303

phonebook-chartusuladams

0.1.5

1 of 3 See more

phonebook-chart usuladams 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.23.7

Open the chart page →

3,176

v2ray-proxyv2ray-proxy

0.2.4

1 of 1 See more

v2ray-proxy v2ray-proxy 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
pinclr/v2ray-proxy :latest	f37f250b7091	golang.org/x/net@v0.7.0 stdlib@go1.20.2	0.36.0 1.23.7

Open the chart page →

1,954

vault-gcp-secretsvault-gcp-secrets

1.19.5

1 of 1 See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/tjm/vault-gcp-secrets :v1.19.5	9f157fe035f1	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7

Open the chart page →

2,289

vearchvearch

3.3.4

2 of 4 See more

vearch vearch 3.3.4

2 of the 4 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.36.0 1.23.7
vearch/vearch :3.3.4	0768af33f9d9	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.36.0 1.23.7

Open the chart page →

5,008

devportal-admin-uiveecode-platform

0.5.4

1 of 1 See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
veecode/devportal-admin-ui :0.4.30	c69fd286b489	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7

Open the chart page →

5,225

riveruivirtualroot

0.1.3

1 of 1 See more

riverui virtualroot 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/riverqueue/riverui :0.5.3	2dc54179b25a	golang.org/x/net@v0.23.0 stdlib@go1.23.0	0.36.0 1.23.7

Open the chart page →

1,135

go-egvoid-xmh

1.1.1

3 of 3 See more

go-eg void-xmh 1.1.1

3 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
voidxmh/xmh-auther :v1	93e42a569ca8	stdlib@go1.16.5	1.23.7
voidxmh/xmh-cacher :v1	1b7397412320	stdlib@go1.16.5	1.23.7
voidxmh/xmh-ui :v1	2ff3f2146547	stdlib@go1.16.5	1.23.7

Open the chart page →

7,464

phpipamvquie

1.0.3

1 of 3 See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
library/mariadb :10.11.2	1c33370a599c	stdlib@go1.16.7	1.23.7

Open the chart page →

7,025

vultr-ccmvultr

1.3.0

1 of 1 See more

vultr-ccm vultr 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
vultr/vultr-cloud-controller-manager :v0.3.0	1806f17d620c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.7	0.36.0 1.23.7

Open the chart page →

3,034

waardepapierenwaardepapieren

1.0.0

1 of 3 See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22870.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.36.0 1.23.7

Open the chart page →

8,079

Container images carrying it

3,231 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.23.7	22
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.23.7	14
codeurjc/toposervice :v1.0 :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.36.0 1.23.7	13
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.23.7	11
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.23.7	10
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.36.0 1.23.7	9
library/rabbitmq :3.13-management :3-management	e582c0bc7766	stdlib@go1.22.2	1.23.7	8
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.36.0 1.23.7	8
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7	8
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.36.0 1.23.7	8
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.36.0 1.23.7	8
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.36.0 1.23.7	7
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.10	0.36.0 1.23.7	7
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0 stdlib@go1.23.4	0.36.0 1.23.7	7
quay.io/thanos/thanos :v0.37.2	4ec6df40fdb9	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.36.0 1.23.7	7
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.36.0 1.23.7	6
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7	6
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.36.0 1.23.7	6
library/registry :2 :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.23.7	6
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.36.0 1.23.7	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.23.7	6
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.36.0 1.23.7	6
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.36.0 1.23.7	6
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.36.0 1.23.7	6
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.23.7	6
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.36.0 1.23.7	6
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.36.0 1.23.7	6
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0 stdlib@go1.22.3	0.36.0 1.23.7	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.36.0 1.23.7	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0 stdlib@go1.22.5	0.36.0 1.23.7	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.36.0 1.23.7	6
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0 :v2.8.1	f6717ce72a26	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.36.0 1.23.7	6
bitnamilegacy/kubectl :1.29.2	c74b703deed2	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.36.0 1.23.7	5
containous/whoami :latest :v1.5.0	7d6a3c8f9147	stdlib@go1.14	1.23.7	5
keelhq/keel :latest	73714afb4443	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.36.0 1.23.7	5
library/mongo :4.4	4be76f674fc4	stdlib@go1.21.12	1.23.7	5
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.23.7	5
library/redis :7.4.2-alpine :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.23.7	5
library/redis :5 :5.0	fc5ecd863862	stdlib@go1.16.7	1.23.7	5
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.36.0 1.23.7	5
postgis/postgis :latest	01a6a70e41e6	stdlib@go1.18.2	1.23.7	5
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.36.0 1.23.7	5
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.36.0 1.23.7	5
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.23.7	5
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.36.0 1.23.7	5
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.36.0 1.23.7	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.36.0 1.23.7	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.36.0 1.23.7	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/net@v0.28.0 stdlib@go1.22.8	0.36.0 1.23.7	5
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.36.0 1.23.7	5