CVE-2025-22871

Critical

Advisory

Published 8 Apr 2025In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,731; of 17,805 indexed, latest versions
Container images: 3,276; deployed by those charts
Fix available: 9 of 10; affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 2,731 of 17,805 indexed charts deploy, on 3,276 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
skopeorpm	2:1.11.2-0.1.el9, 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.11.2-0.1.el9_2.3, 2:1.11.3-0.1.module+el8.8.0+23219+eb2ac228	2
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-67.module+el8.8.0+22334+bb93e398	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.15-4.module+el8.8.0+22334+bb93e398	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.11-1.module+el8.8.0+22334+bb93e398	1
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-5.el8_10	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-1.module+el8.8.0+22334+bb93e398	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-1.module+el8.8.0+22334+bb93e398	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.0-3.module+el8.8.0+22334+bb93e398	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+150 more	1.23.8	3,276

OSV records: DEBIAN-CVE-2025-22871 RHSA-2025:9018 RHSA-2025:9025 RHSA-2025:9060 GO-2025-3563
Also known as: BIT-golang-2025-22871, GHSA-g9pc-8g42-g6vq, RHSA-2025:9142, RHSA-2025:9145, RHSA-2025:9199

Charts affected

2,731 by stars

Chart

Latest

Affected images

Radar Score

mimir-openshift-experimentalgrafana

2.1.0

3 of 4 See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	stdlib@go1.17.8	1.23.8
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	stdlib@go1.15.7	1.23.8
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	stdlib@go1.15.7	1.23.8

Open the chart page →

17,811

pyroscope-monitoringgrafana

0.1.1

3 of 6 See more

pyroscope-monitoring grafana 0.1.1

3 of the 6 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
grafana/otel-lgtm :0.11.10	09d8c3ce4f3a	stdlib@go1.24.1	1.23.8
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	stdlib@go1.23.6	1.23.8
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	stdlib@go1.23.7	1.23.8

Open the chart page →

8,491

snyk-exportergrafana

0.1.0

1 of 1 See more

snyk-exporter grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
grafana/snyk_exporter :v1.4.1	d3c9093401ca	stdlib@go1.21.0	1.23.8

Open the chart page →

670

prometheusgrafana-uxadax

26.0.1

6 of 6 See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	stdlib@go1.23.3	1.23.8
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	stdlib@go1.23.3	1.23.8
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.23.8
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	stdlib@go1.22.5	1.23.8
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	stdlib@go1.23.1	1.23.8
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	stdlib@go1.23.3	1.23.8

Open the chart page →

5,323

grafregistratiecomponentgrafregistratiecomponent

1.0.0

1 of 3 See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	stdlib@go1.13.10	1.23.8

Open the chart page →

7,521

grapple-installergrapple-installer

0.3.22

1 of 1 See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	stdlib@go1.18.10	1.23.8

Open the chart page →

83,462

fasttrackmlgresearch

0.1.0

1 of 1 See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
gresearch/fasttrackml :latest	16d1228220fc	stdlib@go1.21.10	1.23.8

Open the chart page →

1,398

siembolgresearch

0.1.6

1 of 4 See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
alpine/k8s :1.18.16	a41efe02a041	stdlib@go1.15.2	1.23.8

Open the chart page →

14,303

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	stdlib@go1.22.7	1.23.8

Open the chart page →

2,608

loki-proxygroundcover

0.1.1

1 of 1 See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	stdlib@go1.17.13	1.23.8

Open the chart page →

2,183

tailscale-subnet-routergtaylor

1.2.1

1 of 1 See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	stdlib@go1.19.2-ts3fd24dee31	1.23.8

Open the chart page →

1,835

docker-authhalkeye

0.1.1

1 of 1 See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	stdlib@go1.13.7	1.23.8

Open the chart page →

2,382

matrix-media-repohalkeye

1.0.5

1 of 1 See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	stdlib@go1.16.3	1.23.8

Open the chart page →

4,463

mautrix-signalhalkeye

0.3.0

1 of 2 See more

mautrix-signal halkeye 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
signald/signald :0.23.2	edbff058278c	stdlib@go1.18.10	1.23.8

Open the chart page →

1,500

whoamihalkeye

1.0.1

1 of 1 See more

whoami halkeye 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
containous/whoami :v1.5.0	7d6a3c8f9147	stdlib@go1.14	1.23.8

Open the chart page →

1,280

hawk-envoy-pluginhawk

0.1.0

2 of 4 See more

hawk-envoy-plugin hawk 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/privacyengineering/collector-go :main	7217f1a4fa28	stdlib@go1.17.13	1.23.8
ghcr.io/privacyengineering/consumer :main	73f59c032812	stdlib@go1.17.13	1.23.8

Open the chart page →

65,966

cert-manager-webhook-arvanhbahadorzadeh

0.1.1

1 of 1 See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	stdlib@go1.15.6	1.23.8

Open the chart page →

3,030

kubernetes-event-exporterhbahadorzadeh

0.1.0

1 of 1 See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	stdlib@go1.14.7	1.23.8

Open the chart page →

2,638

hdx-oss-v2hdx-oss-v2

0.8.4

1 of 5 See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
library/mongo :5.0.14-focal	50cae5081ab4	stdlib@go1.17.10	1.23.8

Open the chart page →

6,772

headcniheadcni

1.0.10

1 of 1 See more

headcni headcni 1.0.10

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
binrc/headcni :1.0.10	e199c334b957	stdlib@go1.22.10	1.23.8

Open the chart page →

725

heliconehelicone

0.1.42

2 of 14 See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :23.4.2.11	dc5658853ce1	stdlib@go1.19.5	1.23.8
supabase/gotrue :v2.91.0	7174d551d720	stdlib@go1.20.7	1.23.8

Open the chart page →

76,907

hello-gohello-go

0.2.2

1 of 1 See more

hello-go hello-go 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
anujarosha/hello-go :v1.0.1	ed60e46870b6	stdlib@go1.18.3	1.23.8

Open the chart page →

1,315

hello_worldcharthellohelm

0.1.0

1 of 1 See more

hello_worldchart hellohelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
dockerdaemon0901/rolldice :v1	4e5bfe179c7e	stdlib@go1.21.0	1.23.8

Open the chart page →

863

helm-airportshelm-airports

0.1.0

2 of 7 See more

helm-airports helm-airports 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
postgis/postgis :latest	01a6a70e41e6	stdlib@go1.18.2	1.23.8
wurstmeister/kafka :latest	2d4bbf9cc83d	stdlib@go1.17.10	1.23.8

Open the chart page →

12,680

airports-kafkahelm-airports-dan

0.1.0

1 of 2 See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	stdlib@go1.17.10	1.23.8

Open the chart page →

4,559

airports-postgreshelm-airports-dan

0.1.0

1 of 1 See more

airports-postgres helm-airports-dan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
postgis/postgis :latest	01a6a70e41e6	stdlib@go1.18.2	1.23.8

Open the chart page →

1,027

helm-airportshelm-airports-dan

0.1.0

2 of 7 See more

helm-airports helm-airports-dan 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
postgis/postgis :latest	01a6a70e41e6	stdlib@go1.18.2	1.23.8
wurstmeister/kafka :latest	2d4bbf9cc83d	stdlib@go1.17.10	1.23.8

Open the chart page →

5,586

airports-kafkahelm-airports-kafka

0.1.0

1 of 2 See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	stdlib@go1.17.10	1.23.8

Open the chart page →

4,559

airports-postgreshelm-airports-postgres

0.1.0

1 of 1 See more

airports-postgres helm-airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
postgis/postgis :latest	01a6a70e41e6	stdlib@go1.18.2	1.23.8

Open the chart page →

1,027

adguard-homehelm-chart-roei

0.107.59

1 of 2 See more

adguard-home helm-chart-roei 0.107.59

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.59	5d5e3aef39a8	stdlib@go1.24.1	1.23.8

Open the chart page →

762

home-assistanthelm-chart-roei

2025.3.0

1 of 1 See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	stdlib@go1.23.3	1.23.8

Open the chart page →

4,859

iofoghelm-charts

0.1.1

1 of 3 See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
iofog/router :2.0.1	7260cf861479	stdlib@go1.15	1.23.8

Open the chart page →

24,233

logging-stackhelm-charts-alexis-carbillet

0.1.0

5 of 9 See more

logging-stack helm-charts-alexis-carbillet 0.1.0

5 of the 9 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	stdlib@go1.18	1.23.8
grafana/grafana :11.1.0	079600c9517b	stdlib@go1.22.4	1.23.8
grafana/loki :2.6.1	1ee60f980950	stdlib@go1.17.9	1.23.8
grafana/loki :2.8.2	b1da1d23037e	stdlib@go1.20.4	1.23.8
grafana/loki-canary :2.6.1	ab2a2569307b	stdlib@go1.17.9	1.23.8

Open the chart page →

12,697

monitoring-stackhelm-charts-alexis-carbillet

0.1.0

8 of 11 See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

8 of the 11 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	stdlib@go1.23.1	1.23.8
prom/prometheus :v2.48.1	a67e5e402ff5	stdlib@go1.21.5	1.23.8
quay.io/prometheus-operator/prometheus-config-reloader :v0.70.0	e20576b76ffd	stdlib@go1.21.4	1.23.8
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	stdlib@go1.20.7	1.23.8
quay.io/prometheus/node-exporter :v1.7.0	4cb2b9019f17	stdlib@go1.21.4	1.23.8
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	stdlib@go1.22.3	1.23.8
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	stdlib@go1.21.1	1.23.8
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	stdlib@go1.20.10	1.23.8

Open the chart page →

10,699

teslamate-apihelm-charts-darox

1.0.1

1 of 1 See more

teslamate-api helm-charts-darox 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
tobiasehlert/teslamateapi :1.20.2	cf09259ad0ea	stdlib@go1.24.0	1.23.8

Open the chart page →

1,189

aws-ebs-csi-driverhelm-charts-nr

2.17.4

6 of 6 See more

aws-ebs-csi-driver helm-charts-nr 2.17.4

6 of the 6 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	stdlib@go1.19.6	1.23.8
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	stdlib@go1.19.5	1.23.8
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	stdlib@go1.19.7	1.23.8
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	stdlib@go1.19.8	1.23.8
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	stdlib@go1.19.8	1.23.8
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	stdlib@go1.19.8	1.23.8

Open the chart page →

6,527

aws-s3-proxyhelm-charts-nr

0.1.7

1 of 1 See more

aws-s3-proxy helm-charts-nr 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
pottava/s3-proxy :2.0	20a0bcb15f76	stdlib@go1.13.7	1.23.8

Open the chart page →

1,323

aws-service-events-exporterhelm-charts-nr

1.0.7

1 of 1 See more

aws-service-events-exporter helm-charts-nr 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
thomasnyambati/aws-service-events-exporter :1.0.0	1e18a0944ceb	stdlib@go1.15.6	1.23.8

Open the chart page →

1,300

aws-service-quotas-exporterhelm-charts-nr

0.1.4

1 of 1 See more

aws-service-quotas-exporter helm-charts-nr 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
thoughtmachine/aws-service-quotas-exporter :v1.3.2	c6065ba55c72	stdlib@go1.19.4	1.23.8

Open the chart page →

771

cortex-gatewayhelm-charts-nr

0.1.9

1 of 1 See more

cortex-gateway helm-charts-nr 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	stdlib@go1.18	1.23.8

Open the chart page →

2,242

dregsyhelm-charts-nr

0.1.5

1 of 1 See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	stdlib@go1.18.3	1.23.8

Open the chart page →

2,978

gripmockhelm-charts-nr

1.1.3

1 of 1 See more

gripmock helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
tkpd/gripmock :1.10.1	74441dadcfbd	stdlib@go1.14.6	1.23.8

Open the chart page →

2,794

hoppscotchhelm-charts-nr

0.3.1

1 of 1 See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	stdlib@go1.21.10	1.23.8

Open the chart page →

3,480

k8s-cloudwatch-adapterhelm-charts-nr

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter helm-charts-nr 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	stdlib@go1.14.5	1.23.8

Open the chart page →

2,476

k8s-event-loggerhelm-charts-nr

1.1.9

1 of 1 See more

k8s-event-logger helm-charts-nr 1.1.9

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
maxrocketinternet/k8s-event-logger :2.1	11224534789d	stdlib@go1.20.5	1.23.8

Open the chart page →

864

killgravehelm-charts-nr

1.0.2

1 of 1 See more

killgrave helm-charts-nr 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
friendsofgo/killgrave :0.4.1	39cfbecca342	stdlib@go1.16.3	1.23.8

Open the chart page →

1,182

kube-benchhelm-charts-nr

0.1.17

1 of 1 See more

kube-bench helm-charts-nr 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	stdlib@go1.21.7	1.23.8

Open the chart page →

1,624

labelsmanager-controllerhelm-charts-nr

1.0.4

1 of 1 See more

labelsmanager-controller helm-charts-nr 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	stdlib@go1.13.15	1.23.8

Open the chart page →

2,306

listmonkhelm-charts-nr

0.1.12

1 of 1 See more

listmonk helm-charts-nr 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	stdlib@go1.17.6	1.23.8

Open the chart page →

2,538

node-local-dnshelm-charts-nr

2.1.4

1 of 1 See more

node-local-dns helm-charts-nr 2.1.4

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	stdlib@go1.22.3	1.23.8

Open the chart page →

2,303

Container images carrying it

3,276 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/neuron/neuron-device-plugin :2.23.30.0	75a6d5ce3bd3	stdlib@go1.20.4	1.23.8	1
public.ecr.aws/neuron/neuron-scheduler :2.23.30.0	4cd274463e6b	stdlib@go1.20.4	1.23.8	1
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	stdlib@go1.22.6	1.23.8	1
public.ecr.aws/optimizely/webhook-broker :v0.2.3	cfc92cc2de65	stdlib@go1.23.0	1.23.8	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	stdlib@go1.20.2	1.23.8	1
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	stdlib@go1.20.12	1.23.8	1
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	stdlib@go1.22.7	1.23.8	1
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	stdlib@go1.21.6	1.23.8	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	stdlib@go1.16.5	1.23.8	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	stdlib@go1.18.1	1.23.8	1
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	stdlib@go1.21.5	1.23.8	1
public.ecr.aws/v0r6c2e2/minio :latest	08c90bd040bf	stdlib@go1.23.5	1.23.8	1
public.ecr.aws/v0r6c2e2/trino :latest	c265156b00d1	stdlib@go1.23.0	1.23.8	1
quay.io/aerokube/boot :1.0.1	3c269612053f	stdlib@go1.22.2	1.23.8	1
quay.io/aerokube/browser-ops :2.6.7	807c1bb67086	stdlib@go1.22.2	1.23.8	1
quay.io/aerokube/keygen :1.0.1	578934444f04	stdlib@go1.20.5	1.23.8	1
quay.io/aerokube/moon :2.5.1	a8837b00ba1c	stdlib@go1.20.4	1.23.8	1
quay.io/aerokube/moon-conf :2.5.1	9ca307b30080	stdlib@go1.20.4	1.23.8	1
quay.io/aerokube/moon-ui :2.0.5	89990b146824	stdlib@go1.20.5	1.23.8	1
quay.io/aerokube/reloader :1.0.1	e4a3661416a5	stdlib@go1.22.2	1.23.8	1
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	stdlib@go1.20.12	1.23.8	1
quay.io/argoproj/argocd :v3.5.1	0deb1a1c9176	stdlib@go1.24.0	1.23.8	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	stdlib@go1.16.5	1.23.8	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	stdlib@go1.22.7	1.23.8	1
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	stdlib@go1.22.7	1.23.8	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	stdlib@go1.20.4	1.23.8	1
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	stdlib@go1.21.7	1.23.8	1
quay.io/argoprojlabs/argocd-extension-metrics :v1.0.3	0d614816c4b7	stdlib@go1.21.11	1.23.8	1
quay.io/argoprojlabs/argocd-operator :v0.4.0	cf8faa986789	stdlib@go1.18.4	1.23.8	1
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	stdlib@go1.21.7	1.23.8	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	stdlib@go1.15.12	1.23.8	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	stdlib@go1.18.4	1.23.8	1
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	stdlib@go1.20.7	1.23.8	1
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	stdlib@go1.19.13	1.23.8	1
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	stdlib@go1.21.3	1.23.8	1
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	stdlib@go1.21.7	1.23.8	1
quay.io/brancz/kube-rbac-proxy :v0.18.0	754ab2a723c8	stdlib@go1.22.4	1.23.8	1
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	stdlib@go1.17.5	1.23.8	1
quay.io/chriscowley/openldap_exporter :v2.1.1	6c308e9732e1	stdlib@go1.15.7	1.23.8	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	stdlib@go1.21.7	1.23.8	1
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	stdlib@go1.21.6	1.23.8	1
quay.io/cilium/tetragon :v1.1.0	96fac2482898	stdlib@go1.22.2	1.23.8	1
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	stdlib@go1.19.2	1.23.8	1
quay.io/cilium/tetragon-operator :v0.8.3	4ab8e6604204	stdlib@go1.18.3	1.23.8	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	stdlib@go1.18.1	1.23.8	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	containers-common@2:1-64.module+el8.8.0+18571+eed59fc4 criu@3.15-4.module+el8.8.0+19044+f9982fd8 fuse-overlayfs@1.11-1.module+el8.8.0+18634+9a268292 libslirp@4.4.0-1.module+el8.8.0+18060+3f21f2cc runc@1:1.1.4-1.module+el8.8.0+18060+3f21f2cc skopeo@2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c slirp4netns@1.2.0-2.module+el8.8.0+18060+3f21f2cc stdlib@go1.19.10	2:1-67.module+el8.8.0+22334+bb93e398 0:3.15-4.module+el8.8.0+22334+bb93e398 0:1.11-1.module+el8.8.0+22334+bb93e398 0:4.4.0-1.module+el8.8.0+22334+bb93e398 1:1.1.12-1.module+el8.8.0+22334+bb93e398 2:1.11.3-0.1.module+el8.8.0+23219+eb2ac228 0:1.2.0-3.module+el8.8.0+22334+bb93e398 1.23.8	1
quay.io/coreos/etcd :v3.5.11	842975891182	stdlib@go1.20.12	1.23.8	1
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	stdlib@go1.22.7	1.23.8	1
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	stdlib@go1.16.3	1.23.8	1
quay.io/ddn/exascaler-csi-file-driver :v2.2.6	fe2e2e5a2751	stdlib@go1.23.0	1.23.8	1