CVE-2025-22872

Medium

Advisory

Published 16 Apr 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 44th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,052; of 17,790 indexed, latest versions
Container images: 2,540; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/net vulnerable to Cross-site Scripting

Carried by container images the latest versions of 2,052 of 17,790 indexed charts deploy, on 2,540 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+203 more	0.38.0	2,540

OSV records: GHSA-vvgc-356p-c3xw
Also known as: GO-2025-3595

Charts affected

2,052 by stars

Chart

Latest

Affected images

Radar Score

drogue-cloud-examplesdrogue-iot

0.7.11

2 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

2 of the 6 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.38.0
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/net@v0.17.0	0.38.0

Open the chart page →

30,759

drogue-cloud-metricsdrogue-iot

0.7.11

4 of 8 See more

drogue-cloud-metrics drogue-iot 0.7.11

4 of the 8 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.38.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.38.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.38.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.38.0

Open the chart page →

13,558

drone-kubernetes-secretsdrone

0.1.4

1 of 1 See more

drone-kubernetes-secrets drone 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/net@v0.0.0-20180811021610-c39426892332	0.38.0

Open the chart page →

2,760

piraeusdtrdnk-helm-charts

2.2.0

1 of 1 See more

piraeus dtrdnk-helm-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/piraeus-operator :v2.2.0	ec4022c8b0e3	golang.org/x/net@v0.8.0	0.38.0

Open the chart page →

1,042

tempo-operatordtrdnk-helm-charts

0.0.3

1 of 2 See more

tempo-operator dtrdnk-helm-charts 0.0.3

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/tempo-operator/tempo-operator :v0.4.0	2627be646391	golang.org/x/net@v0.12.0	0.38.0

Open the chart page →

893

temporaldtrdnk-helm-charts

0.35.0

7 of 13 See more

temporal dtrdnk-helm-charts 0.35.0

7 of the 13 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.38.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.38.0
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/net@v0.8.0	0.38.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/net@v0.7.0	0.38.0
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/net@v0.10.0	0.38.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.38.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.38.0

Open the chart page →

20,204

duplicacyduplicacy

0.1.2

1 of 2 See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/net@v0.10.0	0.38.0

Open the chart page →

2,413

applause-btnduyet

0.1.1

1 of 1 See more

applause-btn duyet 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
duyetdev/applause-btn :latest	25e59d223eaa	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.38.0

Open the chart page →

2,636

commentoduyet

0.2.0

1 of 2 See more

commento duyet 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	golang.org/x/net@v0.0.0-20180811021610-c39426892332	0.38.0

Open the chart page →

2,679

kubernetes-database-scalerdvdlevanon

0.1.2

1 of 1 See more

kubernetes-database-scaler dvdlevanon 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
dvdlevanon/kubernetes-database-scaler :v0.0.36	1e79c1643fe4	golang.org/x/net@v0.8.0	0.38.0

Open the chart page →

1,022

ai-scale-authdysnix

0.1.1

2 of 3 See more

ai-scale-auth dysnix 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-auth :latest	6c7a47e470c3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963	0.38.0
alex6021710/ai-scale-migrator :latest	744b8a924f35	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e	0.38.0

Open the chart page →

6,141

ai-scale-doerdysnix

0.1.0

1 of 1 See more

ai-scale-doer dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-doer :latest	31e533cf7cd3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963	0.38.0

Open the chart page →

2,801

ai-scale-providerdysnix

0.1.0

1 of 1 See more

ai-scale-provider dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-provider :latest	5837d9b30cc7	golang.org/x/net@v0.0.0-20211104170005-ce137452f963	0.38.0

Open the chart page →

2,179

ai-scale-saverdysnix

0.1.0

1 of 1 See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-saver :latest	f73e8d60fd03	golang.org/x/net@v0.0.0-20211105192438-b53810dc28af	0.38.0

Open the chart page →

2,136

arbitrumdysnix

0.1.1

1 of 1 See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	golang.org/x/net@v0.21.0	0.38.0

Open the chart page →

9,251

bordysnix

0.0.8

1 of 1 See more

bor dysnix 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
0xpolygon/bor :1.3.7	396d3de26d8b	golang.org/x/net@v0.26.0	0.38.0

Open the chart page →

1,365

gcp-local-ssd-raiddysnix

0.1.7

1 of 2 See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	golang.org/x/net@v0.37.0	0.38.0

Open the chart page →

2,399

gke-upgrade-notification-handlerdysnix

0.1.1

1 of 1 See more

gke-upgrade-notification-handler dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
dysnix/gke-upgrade-notification-handler :latest	c166f958f86a	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.38.0

Open the chart page →

2,090

grafana-dashboardsdysnix

0.2.2

1 of 2 See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :7.4.5	d322192ed2fa	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.38.0

Open the chart page →

5,161

heimdalldysnix

0.0.1

1 of 1 See more

heimdall dysnix 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
0xpolygon/heimdall :1.0.1	34ddf259993c	golang.org/x/net@v0.8.0	0.38.0

Open the chart page →

1,366

local-path-provisionerdysnix

0.0.20

1 of 1 See more

local-path-provisioner dysnix 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.20	d5999b20a1b1	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.38.0

Open the chart page →

2,925

servicemonitor-appsdysnix

0.1.0

1 of 1 See more

servicemonitor-apps dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ethpandaops/ethereum-metrics-exporter :0.21.0	d1780db2e286	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.38.0

Open the chart page →

1,577

eav-componenteav-component

1.0.0

1 of 3 See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eav-component-php :latest	24bbca4a52a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0

Open the chart page →

7,255

aeros-orchestrator-overlayeclipse-aerios

2.0.0

1 of 2 See more

aeros-orchestrator-overlay eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
masipcat/wireguard-go :latest	696206e5954d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.38.0

Open the chart page →

1,194

api-gatewayeclipse-aerios

1.7.0

1 of 1 See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :2.6.3	4c678c224f67	golang.org/x/net@v0.24.0	0.38.0

Open the chart page →

1,296

federatoreclipse-aerios

1.1.0

1 of 1 See more

federator eclipse-aerios 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
eclipseaerios/federator :1.1.0	18c7f0d101c0	golang.org/x/net@v0.25.0	0.38.0

Open the chart page →

743

iotaeclipse-aerios

1.0.2

3 of 4 See more

iota eclipse-aerios 1.0.2

3 of the 4 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
eclipseaerios/iota-tangle-peerer :latest	99d7ff18d416	golang.org/x/net@v0.30.0	0.38.0
iotaledger/hornet :2.0	01206f1ba89c	golang.org/x/net@v0.14.0	0.38.0
iotaledger/inx-dashboard :1.0	12c669cb8748	golang.org/x/net@v0.14.0	0.38.0

Open the chart page →

13,422

llo-apieclipse-aerios

1.0.0

1 of 1 See more

llo-api eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-api :1.2.0	ab7a04182191	golang.org/x/net@v0.17.0	0.38.0

Open the chart page →

931

llo-docker-operatoreclipse-aerios

1.0.0

2 of 2 See more

llo-docker-operator eclipse-aerios 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-docker-operator :1.1.2	d7ec28bfe735	golang.org/x/net@v0.25.0	0.38.0
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0	0.38.0

Open the chart page →

2,187

llo-k8seclipse-aerios

1.1.0

2 of 2 See more

llo-k8s eclipse-aerios 1.1.0

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-k8s-operator :1.4.1	2b2c0cf26fd2	golang.org/x/net@v0.10.0	0.38.0
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0	0.38.0

Open the chart page →

2,158

openfaas2eclipse-aerios

12.0.5

3 of 6 See more

openfaas2 eclipse-aerios 12.0.5

3 of the 6 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/net@v0.22.0	0.38.0
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	golang.org/x/net@v0.32.0	0.38.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0	0.38.0

Open the chart page →

6,678

chartecr-toke-renew

0.1.5

1 of 1 See more

chart ecr-toke-renew 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
itzmanish/ecr-token-renew :latest	02154d1c05b5	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.38.0

Open the chart page →

2,818

continuum-proxyedgelesssys

1.5.1

1 of 1 See more

continuum-proxy edgelesssys 1.5.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/continuum/continuum-proxydigest-pinned	24c76f294a80	golang.org/x/net@v0.32.0	0.38.0

Open the chart page →

852

marblerun-coordinatoredgelesssys

0.5.0

1 of 1 See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.38.0

Open the chart page →

10,995

grafanaedu

5.3.0

1 of 1 See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.38.0

Open the chart page →

3,191

prometheusedu

11.6.0

3 of 6 See more

prometheus edu 11.6.0

3 of the 6 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.38.0
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.38.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.38.0

Open the chart page →

8,484

education-componenteducation-component

1.0.0

1 of 3 See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0

Open the chart page →

7,327

cert-manager-cpanel-dns-webhookegeback

1.0.6

1 of 1 See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
jamesorlakin/cert-manager-cpanel-dns-webhook :v0.3.0	3894dc11b236	golang.org/x/net@v0.29.0	0.38.0

Open the chart page →

1,284

egressgatewayegressgateway

0.6.9

2 of 2 See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	golang.org/x/net@v0.33.0	0.38.0
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	golang.org/x/net@v0.33.0	0.38.0

Open the chart page →

3,944

eherkenning-uieherkenning-ui

1.0.0

1 of 3 See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eherkenning-ui-php :latest	deed102b4255	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0

Open the chart page →

7,510

ejabberdejabberd

0.1.0

1 of 1 See more

ejabberd ejabberd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
indevlab/ejabberd :24.12-k8s	8bc689d093a7	golang.org/x/net@v0.30.0	0.38.0

Open the chart page →

902

Navidromeemmas-charts

0.0.4

1 of 1 See more

Navidrome emmas-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.49.3	11a24da08977	golang.org/x/net@v0.5.0	0.38.0

Open the chart page →

2,837

parrot-mirroremmas-charts

1.0.0

1 of 1 See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	golang.org/x/net@v0.14.0	0.38.0

Open the chart page →

2,237

edge-operatoremqx-operator

0.0.5

1 of 1 See more

edge-operator emqx-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
emqx/edge-operator-controller :0.0.5	53865c1267d9	golang.org/x/net@v0.1.0	0.38.0

Open the chart page →

1,328

kube-ecp-stackemqx-operator

2.5.1

11 of 16 See more

kube-ecp-stack emqx-operator 2.5.1

11 of the 16 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
emqx/ecp-emqx-agent-downloader :2.5.1	a8431baa7950	golang.org/x/net@v0.23.0	0.38.0
emqx/ecp-main :2.5.1	fa876f71e5d6	golang.org/x/net@v0.30.0	0.38.0
emqxecp/otelcol :2.5.0	4c31d9bec846	golang.org/x/net@v0.28.0	0.38.0
library/telegraf :1.27	507a3eecf809	golang.org/x/net@v0.14.0	0.38.0
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/net@v0.28.0	0.38.0
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	golang.org/x/net@v0.29.0	0.38.0
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	golang.org/x/net@v0.29.0	0.38.0
quay.io/jetstack/cert-manager-startupapicheck :v1.16.1	b4a5e42f6dbf	golang.org/x/net@v0.29.0	0.38.0
quay.io/jetstack/cert-manager-webhook :v1.16.1	6edf44244b2a	golang.org/x/net@v0.29.0	0.38.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.1	e2dc5623bcdd	golang.org/x/net@v0.30.0	0.38.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0	0.38.0

Open the chart page →

22,845

cnpg-monitoringenix

0.3.0

1 of 1 See more

cnpg-monitoring enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.38.0

Open the chart page →

824

kube-packetloss-exporterenix

0.2.1

2 of 2 See more

kube-packetloss-exporter enix 0.2.1

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.31	64614ef8290f	golang.org/x/net@v0.26.0	0.38.0
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	golang.org/x/net@v0.10.0	0.38.0

Open the chart page →

6,154

monitoring-proxyenix

0.3.0

1 of 2 See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	golang.org/x/net@v0.21.0	0.38.0

Open the chart page →

3,946

eoapi-supporteoapi

0.1.7

6 of 7 See more

eoapi-support eoapi 0.1.7

6 of the 7 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :10.3.3	8640e5038e83	golang.org/x/net@v0.19.0	0.38.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.67.0	14feefde1b80	golang.org/x/net@v0.12.0	0.38.0
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0	0.38.0
quay.io/prometheus/prometheus :v2.47.0	c5dd35038287	golang.org/x/net@v0.12.0	0.38.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	golang.org/x/net@v0.10.0	0.38.0
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.11.1	e6a43c83ab16	golang.org/x/net@v0.8.0	0.38.0

Open the chart page →

8,648

eoloPlanteolo-planner

0.1.0

1 of 7 See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0	0.38.0

Open the chart page →

27,667

Container images carrying it

2,540 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
kubebb/capsule-ce :v0.1.2-20221122	a3dba2a95cef	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.38.0	1
kubebb/cert-manager-cainjector :v1.8.0	f83cd256229b	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.38.0	1
kubebb/cert-manager-controller :v1.8.0	20509de4b399	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.38.0	1
kubebb/cert-manager-webhook :v1.8.0	60d3cba0c267	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.38.0	1
kubebb/core :v0.1.6	2b9e7f451d6b	golang.org/x/net@v0.14.0	0.38.0	1
kubebb/core :latest	e366c34a9b8d	golang.org/x/net@v0.19.0	0.38.0	1
kubebb/iam-controller :v0.2.0-20240128	8ffbfa2d67e9	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.38.0	1
kubebb/iam-provider :v0.2.0-20240128	0ba03fcee3a7	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.38.0	1
kubebb/ingress-nginx-controller :v1.3.0	067673df26a6	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.38.0	1
kubebb/kube-oidc-proxy-ce :v0.3.0-20221008	58d5efec568b	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0	1
kubebb/mesh-operator :v5.7.0	163ebbfc7a82	golang.org/x/net@v0.7.0	0.38.0	1
kubebb/oidc-server :v0.2.0	2b5894ef1e2f	golang.org/x/net@v0.0.0-20220325170049-de3da57026de	0.38.0	1
kubebb/resource-viewer :v0.2.0	65bb40b353db	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0	1
kubebuilder/kube-rbac-proxy :v0.16.0	3c4f708c6204	golang.org/x/net@v0.21.0	0.38.0	1
kubedb/kubedb-enterprise :v0.11.0	5829bcedcb0d	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.38.0	1
kubedb/kubedb-ui-server :v0.0.1_linux_amd64	7d27865514ee	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.38.0	1
kubedb/operator :v0.24.0	1a06ff0bda52	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.38.0	1
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/net@v0.10.0	0.38.0	1
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.38.0	1
kubeflowkatib/katib-controller :v0.12.0	12a28c8a0b41	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.38.0	1
kubeflowkatib/katib-controller :v0.17.0	72f14e03b9e1	golang.org/x/net@v0.23.0	0.38.0	1
kubeflowkatib/katib-db-manager :v0.17.0	916a7695b0dd	golang.org/x/net@v0.23.0	0.38.0	1
kubeflowkatib/katib-db-manager :v0.12.0	db88bf09d88e	golang.org/x/net@v0.0.0-20191021144547-ec77196f6094	0.38.0	1
kubeflowkatib/katib-ui :v0.12.0	129f0aaba976	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.38.0	1
kubeflowkatib/katib-ui :v0.17.0	7a41c508deb1	golang.org/x/net@v0.23.0	0.38.0	1
kubeflow/model-registry :v0.2.9	5783f6db428f	golang.org/x/net@v0.28.0	0.38.0	1
kubeflownotebookswg/kfam :v1.9.2	2060a2ede788	golang.org/x/net@v0.17.0	0.38.0	1
kubeflownotebookswg/kfam :v1.6.1	f226fb44db57	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.38.0	1
kubeflownotebookswg/notebook-controller :v1.9.2	0f14bd28fdd5	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.38.0	1
kubeflownotebookswg/notebook-controller :v1.6.1	85e2e685abd6	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.38.0	1
kubeflownotebookswg/poddefaults-webhook :v1.6.1	7d42600e1524	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0	1
kubeflownotebookswg/poddefaults-webhook :v1.9.2	bde88d98ad74	golang.org/x/net@v0.13.0	0.38.0	1
kubeflownotebookswg/profile-controller :v1.6.1	9f01767a460f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.38.0	1
kubeflownotebookswg/profile-controller :v1.9.2	f05a5538ae7e	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.38.0	1
kubeflownotebookswg/pvcviewer-controller :v1.9.2	9815e9b1728f	golang.org/x/net@v0.24.0	0.38.0	1
kubeflownotebookswg/tensorboard-controller :v1.9.2	6536a9f61193	golang.org/x/net@v0.17.0	0.38.0	1
kubeflownotebookswg/tensorboard-controller :v1.6.1	82ffdd2da285	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.38.0	1
kubeflow/training-operator :v1-04f9f13	dabb76dbda29	golang.org/x/net@v0.23.0	0.38.0	1
kubeflow/training-operator :v1-e1434f6	ff847e2b6af0	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.38.0	1
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/net@v0.4.0	0.38.0	1
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/net@v0.4.0	0.38.0	1
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.38.0	1
kubegems/kubectl :latest	c3b4be9a54f5	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.38.0	1
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.38.0	1
kubemod/kubemod :v0.19.1	1f8154f7e80c	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.38.0	1
kubemod/kubemod :v0.13.0	cadca39288ad	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.38.0	1
kubemod/kubemod-crt :v1.3.0	028347c9fa77	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.38.0	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476	0.38.0	1
kuberay/operator :v1.0.0	4e6ac8a3a2c4	golang.org/x/net@v0.17.0	0.38.0	1
kubernetesui/dashboard :v2.6.1	290bebc3cd96	golang.org/x/net@v0.0.0-20220526153639-5463443f8c37	0.38.0	1