Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	stdlib@go1.23.1	1.23.9
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	stdlib@go1.23.4	1.23.9
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	stdlib@go1.23.6	1.23.9

Open the chart page →

9,630

radar-grafanaradar-base

0.1.4

1 of 2 See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
grafana/grafana :11.6.0	62d2b9d20a19	stdlib@go1.23.7	1.23.9

Open the chart page →

1,837

radar-hydraradar-base

0.3.4

1 of 2 See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.3.0	b94007e19a1f	stdlib@go1.23.4	1.23.9

Open the chart page →

2,197

radar-kratosradar-base

0.1.5

1 of 1 See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	stdlib@go1.23.2	1.23.9

Open the chart page →

1,578

raven_profilerraven-profiler

0.1.62

1 of 1 See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	stdlib@go1.21.5	1.23.9

Open the chart page →

1,301

saleorrc-helm-charts

0.1.1

1 of 5 See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.22.0	ca6b73330616	stdlib@go1.15.8	1.23.9

Open the chart page →

3,746

recipe-apprecipe-app

0.1.0

1 of 2 See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
anamskenneth/recipe_frontend :2025-06-07	9ecf04f42cc3	stdlib@go1.20.12	1.23.9

Open the chart page →

3,570

helm-redchefredchef

0.1.0

1 of 3 See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
sharanalwar/redchef-frontend :latest	5e82950b16b7	stdlib@go1.23.7	1.23.9

Open the chart page →

4,978

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	stdlib@go1.15.14	1.23.9

Open the chart page →

15,304

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	stdlib@go1.15.14	1.23.9

Open the chart page →

15,304

ploigosredhat-cop

0.0.9

1 of 2 See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.6	6722d5041b47	stdlib@go1.15.14	1.23.9

Open the chart page →

11,450

sonatype-nexusredhat-cop

1.1.13

1 of 2 See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	stdlib@go1.21.3	1.23.9

Open the chart page →

16,392

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	stdlib@go1.16	1.23.9

Open the chart page →

29,589

redisredis-arm

17.8.0

1 of 1 See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	stdlib@go1.19.4	1.23.9

Open the chart page →

1,908

registry-credsregistry-creds

0.2.3

1 of 1 See more

registry-creds registry-creds 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/alexellis/registry-creds :0.3.2-rc1	f5c72501e559	stdlib@go1.19.5	1.23.9

Open the chart page →

1,043

regorego

0.1.3

1 of 1 See more

2,970

relfinder-reformedrelfinderreformed

2.0.0

1 of 2 See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	stdlib@go1.21.9	1.23.9

Open the chart page →

6,361

reporting-chartreporting-application

0.1.0

1 of 1 See more

reporting-chart reporting-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ibarreche/cloud-reporting-ci :latest	1f45af91da6a	stdlib@go1.16.15	1.23.9

Open the chart page →

1,585

reportportalreportportal

5.7.2

2 of 8 See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
reportportal/migrations :5.7.0	da5d8e1395fe	stdlib@go1.13.6	1.23.9
reportportal/service-index :5.0.11	2b27a2d7a87d	stdlib@go1.17.1	1.23.9

Open the chart page →

25,721

resource-manager-operatorresource-manager-operator

0.1.0

1 of 1 See more

resource-manager-operator resource-manager-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/tikalk/resource-manager :latest	7f21d50e69cb	stdlib@go1.19	1.23.9

Open the chart page →

1,624

retromretsamedoc

2026.2.5

1 of 1 See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/jmberesford/retrom-service :retrom-v0.7.14	4d763d58f11d	stdlib@go1.20.12	1.23.9

Open the chart page →

7,168

spoolmanretsamedoc

26.9.0

1 of 1 See more

spoolman retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/donkie/spoolman :0.26.1	cf9b41e17b93	stdlib@go1.19.8	1.23.9

Open the chart page →

1,848

review-componentreview-component

1.0.0

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	stdlib@go1.13.10	1.23.9

Open the chart page →

7,502

claude-relayrevolution1

0.1.37

1 of 4 See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/wei-shaw/claude-relay-service :v1.1.292	398c34934453	stdlib@go1.20.12	1.23.9

Open the chart page →

4,816

whoamirgnu

1.0.0

1 of 1 See more

whoami rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.6.0	d38496bf0900	stdlib@go1.15.2	1.23.9

Open the chart page →

1,230

security-sample-chartrimusz

0.2.1

1 of 3 See more

security-sample-chart rimusz 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rimusz/security-sample-app :0.2.0	b9a178ca76ef	stdlib@go1.14.4	1.23.9

Open the chart page →

1,348

backup-maker-controllerriotkit-org

0.1.2

1 of 1 See more

backup-maker-controller riotkit-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/riotkit-org/backup-maker-controller :v0.1.2	62370545ba3d	stdlib@go1.19.4	1.23.9

Open the chart page →

1,576

haproxy-loadbalanced-redisrivals-space

0.1.2

1 of 3 See more

haproxy-loadbalanced-redis rivals-space 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
haproxytech/haproxy-alpine :2.6.6	14e4afa90dfd	stdlib@go1.19.3	1.23.9

Open the chart page →

1,423

rancher-vsphere-cpirke2-charts

1.16.200

1 of 1 See more

rancher-vsphere-cpi rke2-charts 1.16.200

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rancher/mirrored-cloud-provider-vsphere :v1.31.1	febfd0517838	stdlib@go1.22.8	1.23.9

Open the chart page →

919

rke2-calicorke2-charts

3.18.1-101

1 of 1 See more

rke2-calico rke2-charts 3.18.1-101

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.15.1	c6591da87aa8	stdlib@go1.15.2	1.23.9

Open the chart page →

2,250

kubernetes-diff-loggerrlex

0.1.2

1 of 1 See more

kubernetes-diff-logger rlex 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
grafana/kubernetes-diff-logger :0.0.5	98f6d1cd1e25	stdlib@go1.16.5	1.23.9

Open the chart page →

2,454

runtimeclass-controllerrlex

0.1.0

1 of 1 See more

runtimeclass-controller rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/jlclx/runtimeclass-controller :latest	b3a87f92a963	stdlib@go1.17.13	1.23.9

Open the chart page →

2,190

yopassrlex

0.8.0

1 of 2 See more

yopass rlex 0.8.0

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.15.1	6bca8d5a4914	stdlib@go1.20.5	1.23.9

Open the chart page →

1,096

ntfyrm3l

0.1.1

1 of 1 See more

ntfy rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
binwiederhier/ntfy :v2.11.0	4a7d0f0adc6d	stdlib@go1.22.2	1.23.9

Open the chart page →

1,283

olivetinrm3l

0.2.0

1 of 1 See more

olivetin rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/olivetin/olivetin :2025.2.19	a89958921526	stdlib@go1.22.0	1.23.9

Open the chart page →

1,377

shopwarerobjuz

2.0.0

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	stdlib@go1.20.7	1.23.9

Open the chart page →

2,972

krr-enforcerrobusta

0.3.5

1 of 2 See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.0	bd01dae02676	stdlib@go1.21.1	1.23.9

Open the chart page →

4,048

kubewatchrobusta

3.5.0

1 of 1 See more

kubewatch robusta 3.5.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
robustadev/kubewatch :v2.9.0	0457a51e36e8	stdlib@go1.23.1	1.23.9

Open the chart page →

1,856

bastillion-upstreamrock8s

0.1.0

1 of 1 See more

bastillion-upstream rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
iamdorsah/bastillion :v0.1	db83a0254d81	stdlib@go1.17.13	1.23.9

Open the chart page →

3,040

easy-olm-operatorrock8s

0.0.1

1 of 1 See more

easy-olm-operator rock8s 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/easy-olm-operator :0.0.1	779454fea06c	stdlib@go1.19.10	1.23.9

Open the chart page →

953

fleet-vendoredrock8s

6.5.1

1 of 1 See more

fleet-vendored rock8s 6.5.1

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
fleetdm/fleet :v4.66.0	12e644b7f40e	stdlib@go1.23.4	1.23.9

Open the chart page →

1,742

gitlab-operatorrock8s

0.7.0

1 of 2 See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	stdlib@go1.16.14	1.23.9

Open the chart page →

5,432

imgproxyrock8s

0.8.30

1 of 1 See more

imgproxy rock8s 0.8.30

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.15.0	40f6eb807444	stdlib@go1.20	1.23.9

Open the chart page →

2,039

Container images carrying it

3,359 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/linuxserver/calibre-web :latest	0767226fcf20	stdlib@go1.17.8	1.23.9	1
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	stdlib@go1.17.8	1.23.9	1
ghcr.io/linuxserver/code-server :version-v3.11.1	a385ba5cb161	stdlib@go1.16.4	1.23.9	1
ghcr.io/linuxserver/digikam :version-7.3.0	55b4c7f320ae	stdlib@go1.16.9	1.23.9	1
ghcr.io/linuxserver/doublecommander :version-0.8.2-1	d92969a929c2	stdlib@go1.16.9	1.23.9	1
ghcr.io/linuxserver/filezilla :version-3.51.0-r1	5103cdd266ce	stdlib@go1.15.12	1.23.9	1
ghcr.io/linuxserver/mstream :version-v5.2.5	22c012bcc43c	stdlib@go1.15.5	1.23.9	1
ghcr.io/linuxserver/remmina :version-1.2.0-rcgit.29dfsg-1ubuntu1	05955792e00f	stdlib@go1.17.11	1.23.9	1
ghcr.io/linuxserver/sqlitebrowser :version-3.12.2-02876202105241947ubuntu18.04.1	426e79828c4b	stdlib@go1.16.12	1.23.9	1
ghcr.io/lldap/lldap :2025-05-19	3de697c3ba57	stdlib@go1.18.2	1.23.9	1
ghcr.io/lloesche/valheim-server :latest	20fde516ce31	stdlib@go1.24.1	1.23.9	1
ghcr.io/loafoe/caddy-token :v0.3.0	528f2174fa2f	stdlib@go1.22.5	1.23.9	1
ghcr.io/loafoe/go-ocpp-server :v0.2.1	45bb960674ab	stdlib@go1.21.13	1.23.9	1
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	stdlib@go1.21.0	1.23.9	1
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	stdlib@go1.18.10	1.23.9	1
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	stdlib@go1.23.2	1.23.9	1
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	stdlib@go1.20.10	1.23.9	1
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	stdlib@go1.20.7	1.23.9	1
ghcr.io/loft-sh/vcluster :0.16.4	84f70425f4dd	stdlib@go1.20.8	1.23.9	1
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	stdlib@go1.22.0	1.23.9	1
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	stdlib@go1.24.2	1.23.9	1
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	stdlib@go1.24.2	1.23.9	1
ghcr.io/loxilb-io/loxilb :latest	c7ede1bab641	stdlib@go1.22.5	1.23.9	1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	stdlib@go1.16.15	1.23.9	1
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	stdlib@go1.23.4	1.23.9	1
ghcr.io/luzilla/dnsbl_exporter :v0.7.0-rc3	d9767232a55e	stdlib@go1.20.14	1.23.9	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	stdlib@go1.21.5	1.23.9	1
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	stdlib@go1.20.12	1.23.9	1
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	stdlib@go1.22.7	1.23.9	1
ghcr.io/manzil-infinity180/frontend-dumpstore :226f28ca3efa6d3691044813cd09085e28d4a7b4	4e6394b715d9	stdlib@go1.20.12	1.23.9	1
ghcr.io/marthydavid/kafka-keda-golang-consumer :0.0.4	e07644865dd1	stdlib@go1.23.0	1.23.9	1
ghcr.io/marthydavid/kafka-keda-golang-producer :0.0.4	54b242c7bf2b	stdlib@go1.23.0	1.23.9	1
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	stdlib@go1.18.5	1.23.9	1
ghcr.io/mealie-recipes/mealie :v1.4.0	b56da41cf178	stdlib@go1.19.8	1.23.9	1
ghcr.io/media-streaming-mesh/msm-admission-webhook :latest	3e811d67189c	stdlib@go1.24.0	1.23.9	1
ghcr.io/media-streaming-mesh/msm-cni :latest	fe0b89b818a6	stdlib@go1.24.0	1.23.9	1
ghcr.io/media-streaming-mesh/msm-cp :latest	8cb08fc7010b	stdlib@go1.23.1	1.23.9	1
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	stdlib@go1.23.1	1.23.9	1
ghcr.io/media-streaming-mesh/msm-nc :latest	296fe4970e38	stdlib@go1.22.3	1.23.9	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	stdlib@go1.13.4	1.23.9	1
ghcr.io/mgumz/mtr-exporter :0.4.0	f4691c8fe8eb	stdlib@go1.22.8	1.23.9	1
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	stdlib@go1.18.9	1.23.9	1
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	stdlib@go1.20.14	1.23.9	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	stdlib@go1.23.4	1.23.9	1
ghcr.io/middleware-labs/mw-lang-aggregator :0.1.0	ae6e13970ec2	stdlib@go1.24.0	1.23.9	1
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	stdlib@go1.18.10	1.23.9	1
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	stdlib@go1.18.10	1.23.9	1
ghcr.io/middleware-labs/odigos-odiglet :middleware-test-0.0.1	03c8c835ecee	stdlib@go1.19.6	1.23.9	1
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	stdlib@go1.18.10	1.23.9	1
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	stdlib@go1.18.10	1.23.9	1