CVE-2025-22872

Medium

Advisory

Published 16 Apr 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 44th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,049; of 17,797 indexed, latest versions
Container images: 2,538; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/net vulnerable to Cross-site Scripting

Carried by container images the latest versions of 2,049 of 17,797 indexed charts deploy, on 2,538 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+203 more	0.38.0	2,538

OSV records: GHSA-vvgc-356p-c3xw
Also known as: GO-2025-3595

Charts affected

2,049 by stars

Chart

Latest

Affected images

Radar Score

aws-efs-csi-driverkubesphere-test

0.1.0

1 of 3 See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.38.0

Open the chart page →

2,612

kube-state-metricskubestar-state-metrics

0.1.10

1 of 1 See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.38.0

Open the chart page →

1,575

kube-vault-controllerkube-vault-controller

1.2.0

1 of 1 See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
kupnu4x/kube-vault-controller :1.2.0	3be59109f3d6	golang.org/x/net@v0.7.0	0.38.0

Open the chart page →

1,550

kube-vip-cloud-providerkube-vip

0.2.10

1 of 1 See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
kubevip/kube-vip-cloud-provider :v0.0.12	f8f4e3401f76	golang.org/x/net@v0.37.0	0.38.0

Open the chart page →

798

kubemodkubmod

0.5.2

2 of 2 See more

kubemod kubmod 0.5.2

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.19.1	1f8154f7e80c	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.38.0
kubemod/kubemod-crt :v1.3.0	028347c9fa77	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.38.0

Open the chart page →

4,542

kubeservice-cosign-webhookkubservice-charts

1.1.1

5 of 5 See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/net@v0.11.0	0.38.0
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0	0.38.0
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0	0.38.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.38.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.38.0

Open the chart page →

7,117

kubeservice-cpupools-controllerkubservice-charts

0.1.1

2 of 2 See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	golang.org/x/net@v0.10.0	0.38.0
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	golang.org/x/net@v0.10.0	0.38.0

Open the chart page →

3,129

kubeservice-custom-limitrangekubservice-charts

1.3.0

5 of 5 See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

5 of the 5 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/kubeservice-stack/customlimitrange-manager :v1.3.0	d3ed97d142d4	golang.org/x/net@v0.36.0	0.38.0
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0	0.38.0
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0	0.38.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.38.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.38.0

Open the chart page →

5,965

kubeservice-namespace-node-affinitykubservice-charts

1.1.2

5 of 5 See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
dongjiang1989/ns-node-affinity :latest	451f7823723c	golang.org/x/net@v0.7.0	0.38.0
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0	0.38.0
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0	0.38.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.38.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.38.0

Open the chart page →

6,895

kubeservice-scheduler-pluskubservice-charts

0.2.1

1 of 2 See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	golang.org/x/net@v0.7.0	0.38.0

Open the chart page →

1,803

kube-fencingkvaps

2.4.1

1 of 2 See more

kube-fencing kvaps 2.4.1

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.38.0

Open the chart page →

2,538

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.38.0
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.38.0
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.38.0

Open the chart page →

15,568

landelijketabellencataloguslandelijketabellencatalogus

1.0.0

1 of 3 See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0

Open the chart page →

7,519

lgtm-stacklgtm-stack

0.1.3

2 of 8 See more

lgtm-stack lgtm-stack 0.1.3

2 of the 8 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2024-01-16T16-06-34Z	591b097ea2d4	golang.org/x/net@v0.19.0	0.38.0
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	golang.org/x/net@v0.19.0	0.38.0

Open the chart page →

5,679

keptn-cert-managerlifecycle-toolkit

0.3.0

1 of 1 See more

keptn-cert-manager lifecycle-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/net@v0.30.0	0.38.0

Open the chart page →

507

keptn-lifecycle-operatorlifecycle-toolkit

0.6.0

1 of 1 See more

keptn-lifecycle-operator lifecycle-toolkit 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/net@v0.30.0	0.38.0

Open the chart page →

602

keptn-metrics-operatorlifecycle-toolkit

0.5.0

1 of 1 See more

keptn-metrics-operator lifecycle-toolkit 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/net@v0.37.0	0.38.0

Open the chart page →

832

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.38.0

Open the chart page →

4,467

linkerd-jaegerlinkerd2-edge

30.14.11-edge

2 of 4 See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.38.0
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/net@v0.14.0	0.38.0

Open the chart page →

4,407

jspolicyloft

0.2.2

1 of 1 See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
loftsh/jspolicy :0.2.2	25deb9bd2683	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.38.0

Open the chart page →

2,312

vcluster-eksloft

0.0.0-ci.3

1 of 4 See more

vcluster-eks loft 0.0.0-ci.3

1 of the 4 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.38.0

Open the chart page →

3,311

vcluster-k0sloft

0.0.0-ci.3

1 of 2 See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0	0.38.0

Open the chart page →

3,146

log2rbac-operatorlog2rbac-operator

0.0.5

1 of 1 See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
jkremser/log2rbac :v0.0.5	e35cf56ef183	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0

Open the chart page →

1,945

logclilogcli

0.1.0

1 of 1 See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	golang.org/x/net@v0.0.0-20210505214959-0714010a04ed	0.38.0

Open the chart page →

2,954

voice-biometricslumenvox

2.0.1

5 of 26 See more

voice-biometrics lumenvox 2.0.1

5 of the 26 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.38.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.38.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.38.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.38.0

Open the chart page →

71,369

goblackholemain

0.0.4

1 of 1 See more

goblackhole main 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
bedag/goblackhole :0.2.0	447a88598f4c	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.38.0

Open the chart page →

1,979

traefik-forward-authmesosphere

0.3.10

2 of 2 See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.38.0
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.38.0

Open the chart page →

5,308

metadata-injectormetadata-injector-operator

0.0.1

1 of 1 See more

metadata-injector metadata-injector-operator 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ruslanguns/metadata-injector-operator :v0.0.1	6c77e4675e07	golang.org/x/net@v0.26.0	0.38.0

Open the chart page →

568

subspacemglants

0.1.0

1 of 1 See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476	0.38.0

Open the chart page →

3,254

mw-kube-agent-v2middleware-labs

2.8.6

1 of 1 See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/net@v0.32.0	0.38.0

Open the chart page →

4,221

chartmuseummike7515

1.2.0

1 of 1 See more

chartmuseum mike7515 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/net@v0.0.0-20220531201128-c960675eff93	0.38.0

Open the chart page →

3,176

miniomilvus

8.0.17

1 of 1 See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.38.0

Open the chart page →

6,922

mimir-syncmimir-sync

3.1.0

1 of 1 See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/antnsn/mal-sync :v1.0.5	2f06e72cef36	golang.org/x/net@v0.36.0	0.38.0

Open the chart page →

1,300

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0	0.38.0

Open the chart page →

13,819

podsyncmy0n

1.5.4

1 of 2 See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
tdeutsch/podsync :v2.4.2	b67186f4c9a5	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.38.0

Open the chart page →

2,059

maddymya

22.4.12

1 of 2 See more

maddy mya 22.4.12

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.7.1	6ab538e2f28b	golang.org/x/net@v0.20.0	0.38.0

Open the chart page →

1,419

natz-operatornatz-operator

0.9.5

1 of 1 See more

natz-operator natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	golang.org/x/net@v0.35.0	0.38.0

Open the chart page →

745

clowder2ncsa

1.9.7

4 of 12 See more

clowder2 ncsa 1.9.7

4 of the 12 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	golang.org/x/net@v0.21.0	0.38.0
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	golang.org/x/net@v0.19.0	0.38.0
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	golang.org/x/net@v0.0.0-20220708220712-1185a9018129	0.38.0
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	golang.org/x/net@v0.21.0	0.38.0

Open the chart page →

37,538

ngrok-operatorngrok-operator

1.1.0

1 of 2 See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.38.0

Open the chart page →

1,896

node-exporternode-exporter

0.1.10

1 of 1 See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/net@v0.10.0	0.38.0

Open the chart page →

1,229

oadaoada

5.0.6

1 of 11 See more

oada oada 5.0.6

1 of the 11 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.38.0

Open the chart page →

13,339

transfer.shobeone

1.0.5

1 of 1 See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	golang.org/x/net@v0.17.0	0.38.0

Open the chart page →

1,178

oci-native-ingress-controlleroci-native-ingress-controller

1.0.0

1 of 1 See more

oci-native-ingress-controller oci-native-ingress-controller 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
amaanx86/oci-native-ingress-controller :master	d7206ac7a319	golang.org/x/net@v0.36.0	0.38.0

Open the chart page →

434

kruiseopenkruise

1.9.1

1 of 2 See more

kruise openkruise 1.9.1

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
openkruise/kruise-helm-hook :v0.1.0	edc7cf9428fd	golang.org/x/net@v0.24.0	0.38.0

Open the chart page →

1,503

orbitalregorbitalreg

0.3.0

1 of 4 See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
orbitalreg/orbitalreg-api :0.1.0	45f2620337af	golang.org/x/net@v0.28.0	0.38.0

Open the chart page →

2,289

kubernetes-dashboard-proxyosc

0.7.2

3 of 4 See more

kubernetes-dashboard-proxy osc 0.7.2

3 of the 4 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.7.0	2e500d29e9d5	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.38.0
kubernetesui/metrics-scraper :v1.0.8	76049887f07a	golang.org/x/net@v0.0.0-20220524220425-1d687d428aca	0.38.0
quay.io/oauth2-proxy/oauth2-proxy :v7.1.3	ecd26b74a01f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.38.0

Open the chart page →

6,012

hlf-caowkin

2.1.0

1 of 2 See more

hlf-ca owkin 2.1.0

1 of the 2 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.38.0

Open the chart page →

3,431

hlf-ordowkin

3.1.0

1 of 1 See more

hlf-ord owkin 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859	0.38.0

Open the chart page →

3,357

hlf-peerowkin

5.1.0

1 of 1 See more

hlf-peer owkin 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859	0.38.0

Open the chart page →

3,695

ngrok-operatorpaganuzzi

0.0.2

1 of 1 See more

ngrok-operator paganuzzi 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22872.

Container image	Digest	Package	Fixed in
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.38.0

Open the chart page →

2,811

Container images carrying it

2,538 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	golang.org/x/net@v0.5.0	0.38.0	1
quay.io/youniqx/heist :v1.1.209	c43b3a9d98ae	golang.org/x/net@v0.28.0	0.38.0	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.38.0	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.38.0	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.38.0	1
registry.gitlab.com/av1o/okd-webhook :v0.1.0	28c3e5eb2650	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.38.0	1
registry.gitlab.com/bitspur/rock8s/easy-olm-operator :0.0.1	779454fea06c	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.38.0	1
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	golang.org/x/net@v0.13.0	0.38.0	1
registry.gitlab.com/bitspur/rock8s/resource-binding-operator :0.1.0	63cf51392ce7	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.38.0	1
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	golang.org/x/net@v0.0.0-20180811021610-c39426892332	0.38.0	1
registry.gitlab.com/dyff/workflows-informer :0.4.4	bfbadc49635d	golang.org/x/net@v0.17.0	0.38.0	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.38.0	1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	golang.org/x/net@v0.14.0	0.38.0	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.38.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/net@v0.13.0	0.38.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	golang.org/x/net@v0.32.0	0.38.0	1
registry.k8s.io/csi-vsphere/driver :v3.4.0	f5349a8ae3f3	golang.org/x/net@v0.33.0	0.38.0	1
registry.k8s.io/csi-vsphere/syncer :v3.4.0	179ebf195595	golang.org/x/net@v0.33.0	0.38.0	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	golang.org/x/net@v0.17.0	0.38.0	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	golang.org/x/net@v0.17.0	0.38.0	1
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.38.0	1
registry.k8s.io/gateway-api/admission-server :v0.7.1	fe43ee5176a8	golang.org/x/net@v0.7.0	0.38.0	1
registry.k8s.io/ingress-nginx/controller :v1.6.4	15be4666c530	golang.org/x/net@v0.5.0	0.38.0	1
registry.k8s.io/ingress-nginx/controller :v1.10.0	42b3f0e5d084	golang.org/x/net@v0.21.0	0.38.0	1
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.38.0	1
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.38.0	1
registry.k8s.io/ingress-nginx/controller :v1.8.0	744ae2afd433	golang.org/x/net@v0.10.0	0.38.0	1
registry.k8s.io/ingress-nginx/controller :v1.7.0	7612338342a1	golang.org/x/net@v0.8.0	0.38.0	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.38.0	1
registry.k8s.io/ingress-nginx/controller :v1.11.3	d56f135b6462	golang.org/x/net@v0.29.0	0.38.0	1
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	golang.org/x/net@v0.22.0	0.38.0	1
registry.k8s.io/ingress-nginx/controller :v1.12.0	e6b8de175acd	golang.org/x/net@v0.33.0	0.38.0	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.0	44d1d0e9f19c	golang.org/x/net@v0.21.0	0.38.0	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.3.0	549e71a6ca24	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.38.0	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.5.0	aaafd456bda1	golang.org/x/net@v0.33.0	0.38.0	1
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	golang.org/x/net@v0.7.0	0.38.0	1
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.38.0	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/net@v0.21.0	0.38.0	1
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.38.0	1
registry.k8s.io/kubectl :v1.32.7	3c5268158974	golang.org/x/net@v0.30.0	0.38.0	1
registry.k8s.io/kubectl :v1.32.0	8ccae74fc039	golang.org/x/net@v0.30.0	0.38.0	1
registry.k8s.io/kubectl :v1.31.10	e0b2d217d1d2	golang.org/x/net@v0.26.0	0.38.0	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	golang.org/x/net@v0.17.0	0.38.0	1
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/net@v0.19.0	0.38.0	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	golang.org/x/net@v0.23.0	0.38.0	1
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.38.0	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	golang.org/x/net@v0.4.0	0.38.0	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/net@v0.7.0	0.38.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	golang.org/x/net@v0.20.0	0.38.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/net@v0.20.0	0.38.0	1