CVE-2025-22872

Medium

Advisory

Published 16 Apr 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 44th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,032; of 17,787 indexed, latest versions
Container images: 2,510; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/net vulnerable to Cross-site Scripting

Carried by container images the latest versions of 2,032 of 17,787 indexed charts deploy, on 2,510 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+202 more	0.38.0	2,510

OSV records: GHSA-vvgc-356p-c3xw
Also known as: GO-2025-3595

Charts affected

2,032 by stars

Chart

Latest

Affected images

Radar Score

siemassist-iot-cybersecurity-monitroting-siem

0.1.0

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.38.0

Open the chart page →

10,730

dltbrokerassist-iot-distributed-broker

0.2.0

4 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

4 of the 9 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
assistiot/distributed_broker :1.0.0	33e02dad168f	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.38.0
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.38.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.38.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.38.0

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

0.2.0

4 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

4 of the 9 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
assistiot/logging_auditing :1.0.0	790dbb198e86	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.38.0
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.38.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.38.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.38.0

Open the chart page →

77,687

cso-proxyav1o-charts

0.1.3

1 of 1 See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/net@v0.0.0-20210908191846-a5e095526f91	0.38.0

Open the chart page →

4,292

dex-k8sav1o-charts

0.2.1

1 of 1 See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.38.0

Open the chart page →

3,391

kube-image-webhookav1o-charts

0.1.3

1 of 1 See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.38.0

Open the chart page →

3,723

db-backupballe-petersen

0.1.4

1 of 1 See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/net@v0.0.0-20191109021931-daa7c04131f5	0.38.0

Open the chart page →

4,814

chirpstackbeeinventor

0.1.10

3 of 5 See more

chirpstack beeinventor 0.1.10

3 of the 5 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3.17.6	e0b23dfd24d6	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.38.0
chirpstack/chirpstack-gateway-bridge :3.13.2	ce3f2cdca8a9	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.38.0
chirpstack/chirpstack-network-server :3.16.1	c98d7fe06bce	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.38.0

Open the chart page →

7,807

livekit-serverbeeinventor

1.0.0

1 of 2 See more

livekit-server beeinventor 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.0.0	8391fd1b834f	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.38.0

Open the chart page →

2,602

cloudflare-tunnel-operatorbeezlabs

0.2.0

1 of 1 See more

cloudflare-tunnel-operator beezlabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/beezlabs-org/cloudflare-tunnel-operator :v0.1.0	9afcd070940f	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.38.0

Open the chart page →

1,595

helm-dashboardbeluga-cloud

2.4.0

1 of 1 See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard :1.3.3	9ab9a675c405	golang.org/x/net@v0.10.0	0.38.0

Open the chart page →

2,898

aramid-indexerbiatec-repo

3.9.0

1 of 5 See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	golang.org/x/net@v0.35.0	0.38.0

Open the chart page →

13,357

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	golang.org/x/net@v0.35.0	0.38.0

Open the chart page →

7,190

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	golang.org/x/net@v0.35.0	0.38.0

Open the chart page →

5,059

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	golang.org/x/net@v0.35.0	0.38.0

Open the chart page →

7,190

boundaryboundary-chart

0.3.12

1 of 1 See more

boundary boundary-chart 0.3.12

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
hashicorp/boundary :0.15.3	339b78b61750	golang.org/x/net@v0.21.0	0.38.0

Open the chart page →

1,624

brpservicebrpservice

1.1.0

1 of 4 See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/brpservice-php :latest	c17f1ba17d36	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0

Open the chart page →

7,830

bucket-backup-restorebucket-backup-restore

0.1.0

1 of 2 See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
abohatyrenko/bucket-backup-restore :latest	fa98af15a13e	golang.org/x/net@v0.17.0	0.38.0

Open the chart page →

2,042

agentbuildkite

0.6.4

1 of 1 See more

agent buildkite 0.6.4

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
buildkite/agent :3.25.0	aec38cfaae0e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.38.0

Open the chart page →

2,663

blackbox-exportercamptocamp3

1.0.0

1 of 1 See more

blackbox-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.25.0	b04a9fef4fa0	golang.org/x/net@v0.24.0	0.38.0

Open the chart page →

906

capsulecapsule

0.14.5

1 of 2 See more

capsule capsule 0.14.5

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0	0.38.0

Open the chart page →

1,229

capsule-proxycapsule-proxy

0.14.1

1 of 2 See more

capsule-proxy capsule-proxy 0.14.1

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0	0.38.0

Open the chart page →

1,222

fluxcd-webuiccowley

0.0.2

1 of 2 See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
adrianberger/fluxcd-webui :latest	76848c0d2780	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.38.0

Open the chart page →

3,509

celestia-nodecelestia-node

0.1.7

1 of 1 See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.16.0	41177982c584	golang.org/x/net@v0.27.0	0.38.0

Open the chart page →

1,799

finops-stackcert-manager

0.0.5

7 of 12 See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.3	b23b588cf7cb	golang.org/x/net@v0.26.0	0.38.0
ghcr.io/kyverno/background-controller :v1.12.5	06ed5db6cd33	golang.org/x/net@v0.22.0	0.38.0
ghcr.io/kyverno/cleanup-controller :v1.12.5	b914032ef9ad	golang.org/x/net@v0.22.0	0.38.0
ghcr.io/kyverno/kyverno :v1.12.5	a61c7022abcf	golang.org/x/net@v0.22.0	0.38.0
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	golang.org/x/net@v0.22.0	0.38.0
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	golang.org/x/net@v0.22.0	0.38.0
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	golang.org/x/net@v0.22.0	0.38.0

Open the chart page →

12,562

cert-manager-webhook-arvancloudcert-manager-webhook-arvancloud

0.1.1

1 of 1 See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud :latest	179bee5ef8b2	golang.org/x/net@v0.9.0	0.38.0

Open the chart page →

1,067

cert-manager-webhook-gandicert-manager-webhook-gandi

0.6.0

1 of 1 See more

cert-manager-webhook-gandi cert-manager-webhook-gandi 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/sintef/cert-manager-webhook-gandi :0.6.0	6819b34ccac8	golang.org/x/net@v0.26.0	0.38.0

Open the chart page →

1,024

cert-vaultcert-vault

2.12.0

1 of 7 See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	golang.org/x/net@v0.33.0	0.38.0

Open the chart page →

15,863

chatclichatcli

1.204.0

1 See more

chatcli chatcli 1.204.0

1 container image this version deploys carries CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.31.10	e0b2d217d1d2	golang.org/x/net@v0.26.0	0.38.0

Open the chart page →

—

access-managerckotzbauer

0.14.3

1 of 1 See more

access-manager ckotzbauer 0.14.3

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/ckotzbauer/access-managerdigest-pinned	dd584fcda0ff	golang.org/x/net@v0.22.0	0.38.0

Open the chart page →

643

cloudbees-sidecar-injectorcloudbees

2.3.3

2 of 2 See more

cloudbees-sidecar-injector cloudbees 2.3.3

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
cloudbees/cert-requester :2.3.3	1d44fb4f799b	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728	0.38.0
cloudbees/sidecar-injector :2.3.3	8f102ef0383a	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728	0.38.0

Open the chart page →

3,268

cloudflow-enterprise-componentscloudflow-helm-charts

0.0.0-NIGHTLY01122020

1 of 9 See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 9 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.38.0

Open the chart page →

4,256

cnpg-sandboxcloudnative-pg

0.6.1

3 of 6 See more

cnpg-sandbox cloudnative-pg 0.6.1

3 of the 6 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :8.3.5	cd7cb4345aa7	golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f	0.38.0
ghcr.io/cloudnative-pg/cloudnative-pg :1.17.1	4dd365800b62	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.38.0
quay.io/prometheus-operator/prometheus-operator :v0.54.0	be2aef39a2f8	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0

Open the chart page →

7,583

cloudttycloudtty

0.8.9

1 of 2 See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/cloudtty/cloudshell-operator :v0.8.9	e43ad91f0684	golang.org/x/net@v0.25.0	0.38.0

Open the chart page →

3,951

cluster-setupcluster-setup

1.5.0

2 of 8 See more

cluster-setup cluster-setup 1.5.0

2 of the 8 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.43.1	0881d3c9359b	golang.org/x/net@v0.37.0	0.38.0
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	golang.org/x/net@v0.33.0	0.38.0

Open the chart page →

10,037

istio-allcode4devs

1.2.0

4 of 6 See more

istio-all code4devs 1.2.0

4 of the 6 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/net@v0.29.0	0.38.0
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/net@v0.29.0	0.38.0
quay.io/kiali/kiali :v1.89.3	0dcdb1c1e747	golang.org/x/net@v0.24.0	0.38.0
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/net@v0.27.0	0.38.0

Open the chart page →

4,784

istio-control-planecode4devs

1.0.0

2 of 3 See more

istio-control-plane code4devs 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/net@v0.29.0	0.38.0
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/net@v0.29.0	0.38.0

Open the chart page →

2,360

maintenancecodewithemad

0.1.6

1 of 1 See more

maintenance codewithemad 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
library/caddy :2.9-alpine	b4e3952384eb	golang.org/x/net@v0.33.0	0.38.0

Open the chart page →

1,469

contactcataloguscontact-catalogus

1.0.0

1 of 3 See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/contactcatalogus-php :latest	eeb625bd660c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0

Open the chart page →

7,303

cosmo-controller-managercosmo

0.9.0

1 of 2 See more

cosmo-controller-manager cosmo 0.9.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-workspace/cosmo-controller-manager :v0.9.0	8c7fa5552028	golang.org/x/net@v0.10.0	0.38.0

Open the chart page →

1,927

cosmo-dashboardcosmo

0.9.1

1 of 1 See more

cosmo-dashboard cosmo 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-workspace/cosmo-dashboard :v0.9.1	6a1c4a81a924	golang.org/x/net@v0.10.0	0.38.0

Open the chart page →

1,939

sops-operatorcraftypath

0.8.0

1 of 1 See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
craftypath/sops-operator :v0.8.0	402a0024c732	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.38.0

Open the chart page →

6,473

cruisekubecruisekube

0.3.4

1 of 5 See more

cruisekube cruisekube 0.3.4

1 of the 5 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.5.2	e8825994b7a2	golang.org/x/net@v0.37.0	0.38.0

Open the chart page →

440

cryptlex-enterprisecryptlex

3.21.25

1 of 8 See more

cryptlex-enterprise cryptlex 3.21.25

1 of the 8 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-03-12T18-04-18Z	46b3009bf704	golang.org/x/net@v0.35.0	0.38.0

Open the chart page →

2,345

revadcs3org

1.6.1

1 of 1 See more

revad cs3org 1.6.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0	0.38.0

Open the chart page →

1,704

cubefscubefs

3.2.0

6 of 10 See more

cubefs cubefs 3.2.0

6 of the 10 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.38.0
ghcr.io/cubefs/cfs-csi-driver :3.2.0.150.0	8723616a976a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0
registry.k8s.io/sig-storage/csi-attacher :v3.4.0	8b9c313c05f5	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.38.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.0	4fd21f36075b	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.38.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.38.0
registry.k8s.io/sig-storage/csi-resizer :v1.3.0	6e0546563b18	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.38.0

Open the chart page →

15,891

CubeUniversecubeuniverse

0.1.0

1 of 1 See more

CubeUniverse cubeuniverse 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
tksky1/cubeuniverse :0.1alpha	ec7b889f380f	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.38.0

Open the chart page →

1,837

aibrixdanchev

0.7.0

2 of 5 See more

aibrix danchev 0.7.0

2 of the 5 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
aibrix/controller-manager :v0.7.0	76aabbbfda79	golang.org/x/net@v0.34.0	0.38.0
aibrix/gateway-plugins :v0.7.0	5b93ea4c753a	golang.org/x/net@v0.34.0	0.38.0

Open the chart page →

5,274

extendeddaemonsetdatadog

0.3.3

1 of 1 See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
datadog/extendeddaemonset :v0.8.0	513a4377aed5	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.38.0

Open the chart page →

4,759

datadogdatadog-test

2.4.23

1 of 2 See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
datadog/agent :7.22.0	8f20e56b5311	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.38.0

Open the chart page →

4,568

Container images carrying it

2,510 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ddosify/alaz :v0.12.0	ea602056d9ce	golang.org/x/net@v0.20.0	0.38.0	1
ddosify/selfhosted_hammer :2.0.0	181965edb12e	golang.org/x/net@v0.8.0	0.38.0	1
ddosify/selfhosted_hammer :1.4.2	a97a1b8a66af	golang.org/x/net@v0.8.0	0.38.0	1
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/net@v0.8.0	0.38.0	1
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/net@v0.7.0	0.38.0	1
defactops/defactops-ui :1.0.16	825cdf9ba706	golang.org/x/net@v0.25.0	0.38.0	1
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	golang.org/x/net@v0.0.0-20220822230855-b0a4917ee28c	0.38.0	1
dellemc/csm-application-mobility-velero-plugin :v0.1.0	660cabd6d929	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.38.0	1
deluan/navidrome :0.49.3	11a24da08977	golang.org/x/net@v0.5.0	0.38.0	1
deluan/navidrome :0.50.0	2cf4442b0099	golang.org/x/net@v0.18.0	0.38.0	1
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.38.0	1
devopsfaith/krakend :2.6.3	4c678c224f67	golang.org/x/net@v0.24.0	0.38.0	1
devopsfaith/krakend :2.7.0	9219cda867e2	golang.org/x/net@v0.26.0	0.38.0	1
devopstales/trivy-operator :2.5	75136aa7a26e	golang.org/x/net@v0.4.0	0.38.0	1
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0	1
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/net@v0.24.0	0.38.0	1
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.38.0	1
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/net@v0.35.0	0.38.0	1
digitalocean/do-operator :v0.1.6	5e5deb4db76e	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.38.0	1
dirathea/pipelinewise-operator :v0.5.0	8d4c9f773ae1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.38.0	1
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/net@v0.26.0	0.38.0	1
dnsforge/xteve :latest	4d9a685c8c28	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.38.0	1
dockerdaemon0901/rolldice :v1	4e5bfe179c7e	golang.org/x/net@v0.17.0	0.38.0	1
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/net@v0.0.0-20201002202402-0a1ea396d57c	0.38.0	1
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.38.0	1
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/net@v0.11.0	0.38.0	1
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	golang.org/x/net@v0.10.0	0.38.0	1
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	golang.org/x/net@v0.10.0	0.38.0	1
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	golang.org/x/net@v0.7.0	0.38.0	1
dongjiang1989/ns-node-affinity :latest	451f7823723c	golang.org/x/net@v0.7.0	0.38.0	1
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/net@v0.29.0	0.38.0	1
dongjiang1989/pingmesh-agent :v1.2.2	c82de0272da0	golang.org/x/net@v0.29.0	0.38.0	1
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/net@v0.28.0	0.38.0	1
douz/overlord :latest	f2bc7fc068c1	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.38.0	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/net@v0.19.0	0.38.0	1
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/net@v0.19.0	0.38.0	1
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/net@v0.19.0	0.38.0	1
drone/drone-runner-docker :1.8.1	137e79c5e23c	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3	0.38.0	1
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/net@v0.0.0-20180811021610-c39426892332	0.38.0	1
drorivry4/rego :latest	e035d49b15ca	golang.org/x/net@v0.19.0	0.38.0	1
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/net@v0.10.0	0.38.0	1
dserio83/velero-api :0.3.1	6b3d9115fee2	golang.org/x/net@v0.26.0	0.38.0	1
dtzar/helm-kubectl :3.11.2	a1041bb0f1d1	golang.org/x/net@v0.5.0	0.38.0	1
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/net@v0.23.0	0.38.0	1
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	golang.org/x/net@v0.17.0	0.38.0	1
duyetdev/applause-btn :latest	25e59d223eaa	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.38.0	1
dvdlevanon/kubernetes-database-scaler :v0.0.36	1e79c1643fe4	golang.org/x/net@v0.8.0	0.38.0	1
dysnix/gke-upgrade-notification-handler :latest	c166f958f86a	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.38.0	1
easysoft/quickon-zentao :18.5	592ad5df1f8b	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.38.0	1
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.38.0	1