CVE-2025-22872

Medium

Advisory

Published 16 Apr 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 44th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,051; of 17,792 indexed, latest versions
Container images: 2,540; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/net vulnerable to Cross-site Scripting

Carried by container images the latest versions of 2,051 of 17,792 indexed charts deploy, on 2,540 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+203 more	0.38.0	2,540

OSV records: GHSA-vvgc-356p-c3xw
Also known as: GO-2025-3595

Charts affected

2,051 by stars

Chart

Latest

Affected images

Radar Score

drogue-cloud-metricsdrogue-iot

0.7.11

4 of 8 See more

drogue-cloud-metrics drogue-iot 0.7.11

4 of the 8 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.38.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.38.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.38.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.38.0

Open the chart page →

13,573

drone-kubernetes-secretsdrone

0.1.4

1 of 1 See more

drone-kubernetes-secrets drone 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/net@v0.0.0-20180811021610-c39426892332	0.38.0

Open the chart page →

2,761

piraeusdtrdnk-helm-charts

2.2.0

1 of 1 See more

piraeus dtrdnk-helm-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
quay.io/piraeusdatastore/piraeus-operator :v2.2.0	ec4022c8b0e3	golang.org/x/net@v0.8.0	0.38.0

Open the chart page →

1,042

tempo-operatordtrdnk-helm-charts

0.0.3

1 of 2 See more

tempo-operator dtrdnk-helm-charts 0.0.3

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/tempo-operator/tempo-operator :v0.4.0	2627be646391	golang.org/x/net@v0.12.0	0.38.0

Open the chart page →

893

temporaldtrdnk-helm-charts

0.35.0

7 of 13 See more

temporal dtrdnk-helm-charts 0.35.0

7 of the 13 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.38.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.38.0
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/net@v0.8.0	0.38.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/net@v0.7.0	0.38.0
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/net@v0.10.0	0.38.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.38.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.38.0

Open the chart page →

20,241

duplicacyduplicacy

0.1.2

1 of 2 See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/net@v0.10.0	0.38.0

Open the chart page →

2,420

applause-btnduyet

0.1.2

1 of 1 See more

applause-btn duyet 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
duyetdev/applause-btn :latest	25e59d223eaa	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.38.0

Open the chart page →

2,636

commentoduyet

0.2.0

1 of 2 See more

commento duyet 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	golang.org/x/net@v0.0.0-20180811021610-c39426892332	0.38.0

Open the chart page →

2,679

kubernetes-database-scalerdvdlevanon

0.1.2

1 of 1 See more

kubernetes-database-scaler dvdlevanon 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
dvdlevanon/kubernetes-database-scaler :v0.0.36	1e79c1643fe4	golang.org/x/net@v0.8.0	0.38.0

Open the chart page →

1,023

ai-scale-authdysnix

0.1.1

2 of 3 See more

ai-scale-auth dysnix 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-auth :latest	6c7a47e470c3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963	0.38.0
alex6021710/ai-scale-migrator :latest	744b8a924f35	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e	0.38.0

Open the chart page →

6,155

ai-scale-doerdysnix

0.1.0

1 of 1 See more

ai-scale-doer dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-doer :latest	31e533cf7cd3	golang.org/x/net@v0.0.0-20211104170005-ce137452f963	0.38.0

Open the chart page →

2,808

ai-scale-providerdysnix

0.1.0

1 of 1 See more

ai-scale-provider dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-provider :latest	5837d9b30cc7	golang.org/x/net@v0.0.0-20211104170005-ce137452f963	0.38.0

Open the chart page →

2,186

ai-scale-saverdysnix

0.1.0

1 of 1 See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-saver :latest	f73e8d60fd03	golang.org/x/net@v0.0.0-20211105192438-b53810dc28af	0.38.0

Open the chart page →

2,143

arbitrumdysnix

0.1.1

1 of 1 See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	golang.org/x/net@v0.21.0	0.38.0

Open the chart page →

9,364

bordysnix

0.0.8

1 of 1 See more

bor dysnix 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
0xpolygon/bor :1.3.7	396d3de26d8b	golang.org/x/net@v0.26.0	0.38.0

Open the chart page →

1,372

gcp-local-ssd-raiddysnix

0.1.7

1 of 2 See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	golang.org/x/net@v0.37.0	0.38.0

Open the chart page →

2,417

gke-upgrade-notification-handlerdysnix

0.1.1

1 of 1 See more

gke-upgrade-notification-handler dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
dysnix/gke-upgrade-notification-handler :latest	c166f958f86a	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.38.0

Open the chart page →

2,097

grafana-dashboardsdysnix

0.2.2

1 of 2 See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :7.4.5	d322192ed2fa	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.38.0

Open the chart page →

5,168

heimdalldysnix

0.0.1

1 of 1 See more

heimdall dysnix 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
0xpolygon/heimdall :1.0.1	34ddf259993c	golang.org/x/net@v0.8.0	0.38.0

Open the chart page →

1,373

local-path-provisionerdysnix

0.0.20

1 of 1 See more

local-path-provisioner dysnix 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.20	d5999b20a1b1	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.38.0

Open the chart page →

2,925

servicemonitor-appsdysnix

0.1.0

1 of 1 See more

servicemonitor-apps dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ethpandaops/ethereum-metrics-exporter :0.21.0	d1780db2e286	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.38.0

Open the chart page →

1,578

eav-componenteav-component

1.0.0

1 of 3 See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eav-component-php :latest	24bbca4a52a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0

Open the chart page →

7,265

aeros-orchestrator-overlayeclipse-aerios

2.0.0

1 of 2 See more

aeros-orchestrator-overlay eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
masipcat/wireguard-go :latest	696206e5954d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.38.0

Open the chart page →

1,195

api-gatewayeclipse-aerios

1.7.0

1 of 1 See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :2.6.3	4c678c224f67	golang.org/x/net@v0.24.0	0.38.0

Open the chart page →

1,303

federatoreclipse-aerios

1.1.0

1 of 1 See more

federator eclipse-aerios 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
eclipseaerios/federator :1.1.0	18c7f0d101c0	golang.org/x/net@v0.25.0	0.38.0

Open the chart page →

743

iotaeclipse-aerios

1.0.2

3 of 4 See more

iota eclipse-aerios 1.0.2

3 of the 4 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
eclipseaerios/iota-tangle-peerer :latest	99d7ff18d416	golang.org/x/net@v0.30.0	0.38.0
iotaledger/hornet :2.0	01206f1ba89c	golang.org/x/net@v0.14.0	0.38.0
iotaledger/inx-dashboard :1.0	12c669cb8748	golang.org/x/net@v0.14.0	0.38.0

Open the chart page →

13,613

llo-apieclipse-aerios

1.0.0

1 of 1 See more

llo-api eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-api :1.2.0	ab7a04182191	golang.org/x/net@v0.17.0	0.38.0

Open the chart page →

931

llo-docker-operatoreclipse-aerios

1.0.0

2 of 2 See more

llo-docker-operator eclipse-aerios 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-docker-operator :1.1.2	d7ec28bfe735	golang.org/x/net@v0.25.0	0.38.0
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0	0.38.0

Open the chart page →

2,193

llo-k8seclipse-aerios

1.1.0

2 of 2 See more

llo-k8s eclipse-aerios 1.1.0

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
eclipseaerios/llo-k8s-operator :1.4.1	2b2c0cf26fd2	golang.org/x/net@v0.10.0	0.38.0
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/net@v0.7.0	0.38.0

Open the chart page →

2,164

openfaas2eclipse-aerios

12.0.5

3 of 6 See more

openfaas2 eclipse-aerios 12.0.5

3 of the 6 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/net@v0.22.0	0.38.0
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	golang.org/x/net@v0.32.0	0.38.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0	0.38.0

Open the chart page →

6,688

chartecr-toke-renew

0.1.5

1 of 1 See more

chart ecr-toke-renew 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
itzmanish/ecr-token-renew :latest	02154d1c05b5	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.38.0

Open the chart page →

2,818

continuum-proxyedgelesssys

1.5.1

1 of 1 See more

continuum-proxy edgelesssys 1.5.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/continuum/continuum-proxydigest-pinned	24c76f294a80	golang.org/x/net@v0.32.0	0.38.0

Open the chart page →

859

marblerun-coordinatoredgelesssys

0.5.0

1 of 1 See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.38.0

Open the chart page →

11,019

grafanaedu

5.3.0

1 of 1 See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.38.0

Open the chart page →

3,198

prometheusedu

11.6.0

3 of 6 See more

prometheus edu 11.6.0

3 of the 6 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.38.0
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.38.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.38.0

Open the chart page →

8,492

education-componenteducation-component

1.0.0

1 of 3 See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0

Open the chart page →

7,337

cert-manager-cpanel-dns-webhookegeback

1.0.6

1 of 1 See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
jamesorlakin/cert-manager-cpanel-dns-webhook :v0.3.0	3894dc11b236	golang.org/x/net@v0.29.0	0.38.0

Open the chart page →

1,292

egressgatewayegressgateway

0.6.9

2 of 2 See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	golang.org/x/net@v0.33.0	0.38.0
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	golang.org/x/net@v0.33.0	0.38.0

Open the chart page →

3,976

eherkenning-uieherkenning-ui

1.0.0

1 of 3 See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/eherkenning-ui-php :latest	deed102b4255	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0

Open the chart page →

7,519

ejabberdejabberd

0.1.0

1 of 1 See more

ejabberd ejabberd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
indevlab/ejabberd :24.12-k8s	8bc689d093a7	golang.org/x/net@v0.30.0	0.38.0

Open the chart page →

903

Navidromeemmas-charts

0.0.4

1 of 1 See more

Navidrome emmas-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.49.3	11a24da08977	golang.org/x/net@v0.5.0	0.38.0

Open the chart page →

2,837

parrot-mirroremmas-charts

1.0.0

1 of 1 See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	golang.org/x/net@v0.14.0	0.38.0

Open the chart page →

2,243

edge-operatoremqx-operator

0.0.5

1 of 1 See more

edge-operator emqx-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
emqx/edge-operator-controller :0.0.5	53865c1267d9	golang.org/x/net@v0.1.0	0.38.0

Open the chart page →

1,329

kube-ecp-stackemqx-operator

2.5.1

11 of 16 See more

kube-ecp-stack emqx-operator 2.5.1

11 of the 16 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
emqx/ecp-emqx-agent-downloader :2.5.1	a8431baa7950	golang.org/x/net@v0.23.0	0.38.0
emqx/ecp-main :2.5.1	fa876f71e5d6	golang.org/x/net@v0.30.0	0.38.0
emqxecp/otelcol :2.5.0	4c31d9bec846	golang.org/x/net@v0.28.0	0.38.0
library/telegraf :1.27	507a3eecf809	golang.org/x/net@v0.14.0	0.38.0
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/net@v0.28.0	0.38.0
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	golang.org/x/net@v0.29.0	0.38.0
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	golang.org/x/net@v0.29.0	0.38.0
quay.io/jetstack/cert-manager-startupapicheck :v1.16.1	b4a5e42f6dbf	golang.org/x/net@v0.29.0	0.38.0
quay.io/jetstack/cert-manager-webhook :v1.16.1	6edf44244b2a	golang.org/x/net@v0.29.0	0.38.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.1	e2dc5623bcdd	golang.org/x/net@v0.30.0	0.38.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0	0.38.0

Open the chart page →

23,844

cnpg-monitoringenix

0.3.0

1 of 1 See more

cnpg-monitoring enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.38.0

Open the chart page →

824

kube-packetloss-exporterenix

0.2.1

2 of 2 See more

kube-packetloss-exporter enix 0.2.1

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.31	64614ef8290f	golang.org/x/net@v0.26.0	0.38.0
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	golang.org/x/net@v0.10.0	0.38.0

Open the chart page →

6,183

monitoring-proxyenix

0.3.0

1 of 2 See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	golang.org/x/net@v0.21.0	0.38.0

Open the chart page →

3,971

eoapi-supporteoapi

0.1.7

6 of 7 See more

eoapi-support eoapi 0.1.7

6 of the 7 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/grafana :10.3.3	8640e5038e83	golang.org/x/net@v0.19.0	0.38.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.67.0	14feefde1b80	golang.org/x/net@v0.12.0	0.38.0
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0	0.38.0
quay.io/prometheus/prometheus :v2.47.0	c5dd35038287	golang.org/x/net@v0.12.0	0.38.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	golang.org/x/net@v0.10.0	0.38.0
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.11.1	e6a43c83ab16	golang.org/x/net@v0.8.0	0.38.0

Open the chart page →

8,670

eoloPlanteolo-planner

0.1.0

1 of 7 See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0	0.38.0

Open the chart page →

27,784

eoloplannereoloplanner

0.1.0

1 of 7 See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	golang.org/x/net@v0.7.0	0.38.0

Open the chart page →

32,456

Container images carrying it

2,540 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/net@v0.17.0	0.38.0	1
ghcr.io/cubefs/cfs-csi-driver :3.2.0.150.0	8723616a976a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0	1
ghcr.io/daocloud/crproxy/crproxy :v0.8.0	ee1eb3c9c9a1	golang.org/x/net@v0.26.0	0.38.0	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0	0.38.0	1
ghcr.io/dcristobalhmad/kube-secrets-exporter :latest	a9043737cb73	golang.org/x/net@v0.23.0	0.38.0	1
ghcr.io/debridmediamanager/zurg-testing :v0.9.3-final	5c47ef99443a	golang.org/x/net@v0.20.0	0.38.0	1
ghcr.io/decayofmind/kube-better-node :master	ccd2ce03b682	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.38.0	1
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.38.0	1
ghcr.io/deliveryhero/field-exporter :v1.4.0	6b71ba4f9297	golang.org/x/net@v0.26.0	0.38.0	1
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	golang.org/x/net@v0.25.0	0.38.0	1
ghcr.io/devplayer0/lxd8s :0.3.1	e159ba41aede	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.38.0	1
ghcr.io/dexidp/dex :v2.43.1	0881d3c9359b	golang.org/x/net@v0.37.0	0.38.0	1
ghcr.io/dexidp/dex :v2.35.3	13964b29d63e	golang.org/x/net@v0.0.0-20220927171203-f486391704dc	0.38.0	1
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	golang.org/x/net@v0.32.0	0.38.0	1
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/net@v0.11.0	0.38.0	1
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	golang.org/x/net@v0.37.0	0.38.0	1
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/net@v0.0.0-20210908191846-a5e095526f91	0.38.0	1
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/net@v0.10.0	0.38.0	1
ghcr.io/dodevops/azure-advanced-backup :0.4.0	1041d4449e49	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.38.0	1
ghcr.io/doodlescheduling/k8s-pause :v0.1.1	6b3215e37738	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.38.0	1
ghcr.io/doodlescheduling/k8svault-controller :v0.2.0	627e5e211766	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea	0.38.0	1
ghcr.io/dploeger/cloudflare-ddns-update :v0.1.0	ec06685b9ff4	golang.org/x/net@v0.25.0	0.38.0	1
ghcr.io/druggeri/nut_exporter :3.3.0	276460d141c7	golang.org/x/net@v0.35.0	0.38.0	1
ghcr.io/edgelesssys/continuum/continuum-proxy	24c76f294a80	golang.org/x/net@v0.32.0	0.38.0	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.38.0	1
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0	0.38.0	1
ghcr.io/element-hq/ess-helm/matrix-tools :0.3.2	0eac0521be29	golang.org/x/net@v0.36.0	0.38.0	1
ghcr.io/epinio/epinio-ui :v1.7.1-0.0.1	d3de52dfb0b4	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b	0.38.0	1
ghcr.io/erpc/erpc :0.0.49	f5654f745d4c	golang.org/x/net@v0.36.0	0.38.0	1
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/net@v0.19.0	0.38.0	1
ghcr.io/eumel8/rancher-servicemonitor :0.2.1	f34428cac187	golang.org/x/net@v0.22.0	0.38.0	1
ghcr.io/external-secrets/external-secrets :v0.3.11	56a1ea4490ba	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.38.0	1
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	golang.org/x/net@v0.10.0	0.38.0	1
ghcr.io/ferama/rospo :v0.12.0	ab40c1745534	golang.org/x/net@v0.20.0	0.38.0	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0	1
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.38.0	1
ghcr.io/flatcar/flatcar-linux-update-operator :v0.10.0-rc1	f9063e20b1f6	golang.org/x/net@v0.8.0	0.38.0	1
ghcr.io/flohansen/dasher-server :latest	7cde8c3fa2d1	golang.org/x/net@v0.22.0	0.38.0	1
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/net@v0.28.0	0.38.0	1
ghcr.io/fluxcd/flux-cli :v2.5.1	274a179fd402	golang.org/x/net@v0.35.0	0.38.0	1
ghcr.io/fluxcd/helm-controller :v1.2.0	62eaa9c9a929	golang.org/x/net@v0.34.0	0.38.0	1
ghcr.io/fluxcd/source-controller :v1.5.0	00cd9316a379	golang.org/x/net@v0.34.0	0.38.0	1
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	golang.org/x/net@v0.0.0-20220927171203-f486391704dc	0.38.0	1
ghcr.io/formancehq/ledger :v1.9.2	03c1ddbda33b	golang.org/x/net@v0.4.0	0.38.0	1
ghcr.io/foxcpp/maddy :0.9.5	de42151adff6	golang.org/x/net@v0.34.0	0.38.0	1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver :1.9.0	324f9b7b689c	golang.org/x/net@v0.17.0	0.38.0	1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver :1.9.0	cdba39e3f3d0	golang.org/x/net@v0.17.0	0.38.0	1
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d	0.38.0	1
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	golang.org/x/net@v0.32.0	0.38.0	1
ghcr.io/gabe565/domain-watch :latest	34c5a1e351d6	golang.org/x/net@v0.36.0	0.38.0	1