CVE-2025-47907

High

Advisory

Published 7 Aug 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.0; base score, highest
EPSS: 0.004; 30th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,889; of 17,797 indexed, latest versions
Container images: 3,519; deployed by those charts
Fix available: 1 of 2; affected packages

Incorrect results returned from Rows.Scan in database/sql

Carried by container images the latest versions of 2,889 of 17,797 indexed charts deploy, on 3,519 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+157 more	1.23.12	3,519

OSV records: DEBIAN-CVE-2025-47907 GO-2025-3849
Also known as: BIT-golang-2025-47907

Charts affected

2,889 by stars

Chart

Latest

Affected images

Radar Score

kubernetes-dashboardgpg-dev

7.5.0

4 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

4 of the 5 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.7.0	60595892c2cf	stdlib@go1.22.3	1.23.12
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	stdlib@go1.22.2	1.23.12
kubernetesui/dashboard-metrics-scraper :1.1.1	7747d363c9fe	stdlib@go1.22.1	1.23.12
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	stdlib@go1.22.3	1.23.12

Open the chart page →

6,087

metrics-servergpg-dev

3.12.1

1 of 1 See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	stdlib@go1.21.8	1.23.12

Open the chart page →

1,078

opentelemetry-demogpg-dev

0.33.8

8 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	stdlib@go1.23.1	1.23.12
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	stdlib@go1.21.5	1.23.12
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	stdlib@go1.23.3	1.23.12
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	stdlib@go1.22.5	1.23.12
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	stdlib@go1.22.8	1.23.12
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	stdlib@go1.22.8	1.23.12
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	stdlib@go1.21.5	1.23.12
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	stdlib@go1.23.3	1.23.12

Open the chart page →

49,501

prometheus-operator-admission-webhookgpg-dev

0.18.1

2 of 2 See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

2 of the 2 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/admission-webhook :v0.79.2	d4c97a1b2d67	stdlib@go1.23.4	1.23.12
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	stdlib@go1.19.4	1.23.12

Open the chart page →

1,685

whoami-demogpg-dev

0.1.0

1 of 1 See more

whoami-demo gpg-dev 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
containous/whoami :latest	7d6a3c8f9147	stdlib@go1.14	1.23.12

Open the chart page →

1,280

grafana-cloud-onboardinggrafana

0.4.7

1 of 5 See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	stdlib@go1.23.6	1.23.12

Open the chart page →

4,681

grafana-samplinggrafana

1.1.7

1 of 2 See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.23.12

Open the chart page →

3,381

mimir-openshift-experimentalgrafana

2.1.0

3 of 4 See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	stdlib@go1.17.8	1.23.12
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	stdlib@go1.15.7	1.23.12
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	stdlib@go1.15.7	1.23.12

Open the chart page →

17,780

pyroscope-monitoringgrafana

0.1.1

4 of 6 See more

pyroscope-monitoring grafana 0.1.1

4 of the 6 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
grafana/otel-lgtm :0.11.10	09d8c3ce4f3a	stdlib@go1.24.5	1.23.12
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	stdlib@go1.24.5	1.23.12
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	stdlib@go1.23.6	1.23.12
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	stdlib@go1.23.7	1.23.12

Open the chart page →

8,281

snyk-exportergrafana

0.1.0

1 of 1 See more

snyk-exporter grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
grafana/snyk_exporter :v1.4.1	d3c9093401ca	stdlib@go1.21.0	1.23.12

Open the chart page →

669

prometheusgrafana-uxadax

26.0.1

6 of 6 See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	stdlib@go1.23.3	1.23.12
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	stdlib@go1.23.3	1.23.12
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.23.12
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	stdlib@go1.22.5	1.23.12
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	stdlib@go1.23.1	1.23.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	stdlib@go1.23.3	1.23.12

Open the chart page →

5,312

grafregistratiecomponentgrafregistratiecomponent

1.0.0

1 of 3 See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	stdlib@go1.13.10	1.23.12

Open the chart page →

7,519

grapple-installergrapple-installer

0.3.22

1 of 1 See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	stdlib@go1.18.10	1.23.12

Open the chart page →

8,012

fasttrackmlgresearch

0.1.0

1 of 1 See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
gresearch/fasttrackml :latest	16d1228220fc	stdlib@go1.21.10	1.23.12

Open the chart page →

1,398

siembolgresearch

0.1.6

1 of 4 See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
alpine/k8s :1.18.16	a41efe02a041	stdlib@go1.15.2	1.23.12

Open the chart page →

14,327

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	stdlib@go1.22.7	1.23.12

Open the chart page →

2,598

loki-proxygroundcover

0.1.1

1 of 1 See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	stdlib@go1.17.13	1.23.12

Open the chart page →

2,182

routergroundcover

1.12.375

1 See more

router groundcover 1.12.375

1 container image this version deploys carries CVE-2025-47907.

Container image	Digest	Package	Fixed in
quay.io/groundcover/tools :20260719	b705e0cbe171	stdlib@go1.24.4	1.23.12

Open the chart page →

—

tailscale-subnet-routergtaylor

1.2.1

1 of 1 See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	stdlib@go1.19.2-ts3fd24dee31	1.23.12

Open the chart page →

1,834

minifluxhajowieland

1.0.0

1 of 1 See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.8	3a11ac10969e	stdlib@go1.24.2	1.23.12

Open the chart page →

1,113

docker-authhalkeye

0.1.1

1 of 1 See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	stdlib@go1.13.7	1.23.12

Open the chart page →

2,381

matrix-media-repohalkeye

1.0.5

1 of 1 See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	stdlib@go1.16.3	1.23.12

Open the chart page →

4,462

mautrix-signalhalkeye

0.3.0

1 of 2 See more

mautrix-signal halkeye 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
signald/signald :0.23.2	edbff058278c	stdlib@go1.18.10	1.23.12

Open the chart page →

1,500

whoamihalkeye

1.0.1

1 of 1 See more

whoami halkeye 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
containous/whoami :v1.5.0	7d6a3c8f9147	stdlib@go1.14	1.23.12

Open the chart page →

1,280

hawk-envoy-pluginhawk

0.1.0

2 of 4 See more

hawk-envoy-plugin hawk 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
ghcr.io/privacyengineering/collector-go :main	7217f1a4fa28	stdlib@go1.17.13	1.23.12
ghcr.io/privacyengineering/consumer :main	73f59c032812	stdlib@go1.17.13	1.23.12

Open the chart page →

9,233

cert-manager-webhook-arvanhbahadorzadeh

0.1.1

1 of 1 See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	stdlib@go1.15.6	1.23.12

Open the chart page →

3,029

kubernetes-event-exporterhbahadorzadeh

0.1.0

1 of 1 See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	stdlib@go1.14.7	1.23.12

Open the chart page →

2,637

hdx-oss-v2hdx-oss-v2

0.8.4

1 of 5 See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
library/mongo :5.0.14-focal	50cae5081ab4	stdlib@go1.17.10	1.23.12

Open the chart page →

6,758

headcniheadcni

1.0.10

1 of 1 See more

headcni headcni 1.0.10

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
binrc/headcni :1.0.10	e199c334b957	stdlib@go1.22.10	1.23.12

Open the chart page →

724

heliconehelicone

0.1.42

2 of 14 See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :23.4.2.11	dc5658853ce1	stdlib@go1.19.5	1.23.12
supabase/gotrue :v2.91.0	7174d551d720	stdlib@go1.20.7	1.23.12

Open the chart page →

25,250

hello-gohello-go

0.2.2

1 of 1 See more

hello-go hello-go 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
anujarosha/hello-go :v1.0.1	ed60e46870b6	stdlib@go1.18.3	1.23.12

Open the chart page →

1,315

hello_worldcharthellohelm

0.1.0

1 of 1 See more

hello_worldchart hellohelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
dockerdaemon0901/rolldice :v1	4e5bfe179c7e	stdlib@go1.21.0	1.23.12

Open the chart page →

855

helm-airportshelm-airports

0.1.0

2 of 7 See more

helm-airports helm-airports 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
postgis/postgis :latest	01a6a70e41e6	stdlib@go1.18.2	1.23.12
wurstmeister/kafka :latest	2d4bbf9cc83d	stdlib@go1.17.10	1.23.12

Open the chart page →

12,718

airports-kafkahelm-airports-dan

0.1.0

1 of 2 See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	stdlib@go1.17.10	1.23.12

Open the chart page →

4,558

airports-postgreshelm-airports-dan

0.1.0

1 of 1 See more

airports-postgres helm-airports-dan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
postgis/postgis :latest	01a6a70e41e6	stdlib@go1.18.2	1.23.12

Open the chart page →

1,027

helm-airportshelm-airports-dan

0.1.0

2 of 7 See more

helm-airports helm-airports-dan 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
postgis/postgis :latest	01a6a70e41e6	stdlib@go1.18.2	1.23.12
wurstmeister/kafka :latest	2d4bbf9cc83d	stdlib@go1.17.10	1.23.12

Open the chart page →

5,585

airports-kafkahelm-airports-kafka

0.1.0

1 of 2 See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	stdlib@go1.17.10	1.23.12

Open the chart page →

4,558

airports-postgreshelm-airports-postgres

0.1.0

1 of 1 See more

airports-postgres helm-airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
postgis/postgis :latest	01a6a70e41e6	stdlib@go1.18.2	1.23.12

Open the chart page →

1,027

adguard-homehelm-chart-roei

0.107.59

1 of 2 See more

adguard-home helm-chart-roei 0.107.59

1 of the 2 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.59	5d5e3aef39a8	stdlib@go1.24.1	1.23.12

Open the chart page →

761

home-assistanthelm-chart-roei

2025.3.0

1 of 1 See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	stdlib@go1.23.3	1.23.12

Open the chart page →

4,653

iofoghelm-charts

0.1.1

1 of 3 See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
iofog/router :2.0.1	7260cf861479	stdlib@go1.15	1.23.12

Open the chart page →

24,205

logging-stackhelm-charts-alexis-carbillet

0.1.0

5 of 9 See more

logging-stack helm-charts-alexis-carbillet 0.1.0

5 of the 9 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	stdlib@go1.18	1.23.12
grafana/grafana :11.1.0	079600c9517b	stdlib@go1.22.4	1.23.12
grafana/loki :2.6.1	1ee60f980950	stdlib@go1.17.9	1.23.12
grafana/loki :2.8.2	b1da1d23037e	stdlib@go1.20.4	1.23.12
grafana/loki-canary :2.6.1	ab2a2569307b	stdlib@go1.17.9	1.23.12

Open the chart page →

12,685

monitoring-stackhelm-charts-alexis-carbillet

0.1.0

8 of 11 See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

8 of the 11 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	stdlib@go1.23.1	1.23.12
prom/prometheus :v2.48.1	a67e5e402ff5	stdlib@go1.21.5	1.23.12
quay.io/prometheus-operator/prometheus-config-reloader :v0.70.0	e20576b76ffd	stdlib@go1.21.4	1.23.12
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	stdlib@go1.20.7	1.23.12
quay.io/prometheus/node-exporter :v1.7.0	4cb2b9019f17	stdlib@go1.21.4	1.23.12
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	stdlib@go1.22.3	1.23.12
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	stdlib@go1.21.1	1.23.12
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	stdlib@go1.20.10	1.23.12

Open the chart page →

10,649

teslamate-apihelm-charts-darox

1.0.1

1 of 1 See more

teslamate-api helm-charts-darox 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
tobiasehlert/teslamateapi :1.20.2	cf09259ad0ea	stdlib@go1.24.0	1.23.12

Open the chart page →

1,043

aws-ebs-csi-driverhelm-charts-nr

2.17.4

6 of 6 See more

aws-ebs-csi-driver helm-charts-nr 2.17.4

6 of the 6 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	stdlib@go1.19.6	1.23.12
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	stdlib@go1.19.5	1.23.12
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	stdlib@go1.19.7	1.23.12
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	stdlib@go1.19.8	1.23.12
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	stdlib@go1.19.8	1.23.12
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	stdlib@go1.19.8	1.23.12

Open the chart page →

6,525

aws-s3-proxyhelm-charts-nr

0.1.7

1 of 1 See more

aws-s3-proxy helm-charts-nr 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
pottava/s3-proxy :2.0	20a0bcb15f76	stdlib@go1.13.7	1.23.12

Open the chart page →

1,323

aws-service-events-exporterhelm-charts-nr

1.0.7

1 of 1 See more

aws-service-events-exporter helm-charts-nr 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
thomasnyambati/aws-service-events-exporter :1.0.0	1e18a0944ceb	stdlib@go1.15.6	1.23.12

Open the chart page →

1,300

aws-service-quotas-exporterhelm-charts-nr

0.1.4

1 of 1 See more

aws-service-quotas-exporter helm-charts-nr 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
thoughtmachine/aws-service-quotas-exporter :v1.3.2	c6065ba55c72	stdlib@go1.19.4	1.23.12

Open the chart page →

771

cortex-gatewayhelm-charts-nr

0.1.9

1 of 1 See more

cortex-gateway helm-charts-nr 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	stdlib@go1.18	1.23.12

Open the chart page →

2,241

dregsyhelm-charts-nr

0.1.5

1 of 1 See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-47907.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	stdlib@go1.18.3	1.23.12

Open the chart page →

2,977

Container images carrying it

3,519 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	stdlib@go1.22.2	1.23.12	1
kubernetesui/dashboard-metrics-scraper :1.2.2	5154b68252bd	stdlib@go1.23.4	1.23.12	1
kubernetesui/dashboard-metrics-scraper :1.1.1	7747d363c9fe	stdlib@go1.22.1	1.23.12	1
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	stdlib@go1.22.3	1.23.12	1
kubernetesui/dashboard-web :1.7.0	cc7c31bd2d84	stdlib@go1.23.9	1.23.12	1
kubernetesui/metrics-scraper :v1.0.8	76049887f07a	stdlib@go1.18.2	1.23.12	1
kubesec/kubesec :latest	025a365d9f18	stdlib@go1.23.3	1.23.12	1
kubesec/kubesec :v2.13.0	c0f3b0673578	stdlib@go1.19.7	1.23.12	1
kubeshop/kube-webhook-certgen :0.0.7	866827c379ae	stdlib@go1.23.6	1.23.12	1
kubeshop/kusk-gateway :v1.5.4	8b5bfd57a3ce	stdlib@go1.19.4	1.23.12	1
kubeshop/kusk-gateway-api :v1.5.4	126c713cf7d8	stdlib@go1.18.10	1.23.12	1
kubeshop/kusk-gateway-api-websocket :v1.5.4	3b4f8345ca5c	stdlib@go1.18.10	1.23.12	1
kubeshop/testkube-api-server :0.11.16	0ad97f07a78b	stdlib@go1.17.8	1.23.12	1
kubeshop/testkube-api-server :2.1.162	e97dc620d9b4	stdlib@go1.23.10	1.23.12	1
kubeshop/testkube-logs-server :latest	094186b19698	stdlib@go1.24.1	1.23.12	1
kubeshop/testkube-operator :2.1.154	def0d0f0d4ab	stdlib@go1.23.9	1.23.12	1
kubeshop/tracetest :v1.7.1	73d7e3a2db43	stdlib@go1.21.13	1.23.12	1
kubesphere/fluentbit-operator :v0.9.0	b87db3c57cb3	stdlib@go1.13.15	1.23.12	1
kubesphere/fluent-operator :v1.0.2	702df77228c6	stdlib@go1.16.6	1.23.12	1
kubesphere/ks-extensions-museum :latest	29681958f220	stdlib@go1.20.12	1.23.12	1
kubesphere/kubectl :v1.27.16	49b445b1b732	stdlib@go1.18.10	1.23.12	1
kubesphere/openelb :v0.5.0	b5b665c4672c	stdlib@go1.15.15	1.23.12	1
kubesphere/openelb :v0.4.4	ed7311a0f9e4	stdlib@go1.15.15	1.23.12	1
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	stdlib@go1.15.15	1.23.12	1
kubesphere/pvc-autoresizer :v0.1	9a18a16c7b87	stdlib@go1.16.10	1.23.12	1
kubesphere/storageclass-accessor :v0.1.1	eac8f273a9b6	stdlib@go1.16.10	1.23.12	1
kubestar/event-exporter :latest	656606941255	stdlib@go1.20.14	1.23.12	1
kubesuite/kubereport :latest	0262424ee702	stdlib@go1.22.0	1.23.12	1
kubevious/ui :1.2.1	6233e84bdd59	stdlib@go1.19.1	1.23.12	1
kubevip/kube-vip-cloud-provider :v0.0.12	f8f4e3401f76	stdlib@go1.24.2	1.23.12	1
kubevirtmanager/kubevirt-manager :1.3.3	df3ea27d4a9e	stdlib@go1.21.7	1.23.12	1
kudobuilder/controller :v0.9.0	69072d979708	stdlib@go1.13	1.23.12	1
kupnu4x/kube-vault-controller :1.2.0	3be59109f3d6	stdlib@go1.21.1	1.23.12	1
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	stdlib@go1.20.14	1.23.12	1
kusionstack/karpor :v0.6.4	b707d3bf0abd	stdlib@go1.22.12	1.23.12	1
kusionstack/kusion :v0.14.0	126c8f0b0976	stdlib@go1.22.10	1.23.12	1
kusionstack/operating :v0.5.0	c28bd96b986b	stdlib@go1.19.13	1.23.12	1
kvalitetsit/metadoc-app :main	e89e351733ad	stdlib@go1.19.5	1.23.12	1
kvalitetsit/metadoc-web :main	f57e7553f5bd	stdlib@go1.16	1.23.12	1
kvalitetsit/nsp-prometheus-exporter :1.0.19	0b397ff954ec	stdlib@go1.15.3	1.23.12	1
kvalitetsit/stakit-frontend :0.2.5	fd5c4f60ef80	stdlib@go1.19.3	1.23.12	1
l7mp/stunner-auth-server :1.1.0	2f8114477ba6	stdlib@go1.23.8	1.23.12	1
l7mp/stunner-gateway-operator :1.1.0	c34f7c931491	stdlib@go1.23.8	1.23.12	1
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	stdlib@go1.23.3	1.23.12	1
langgenius/dify-web :1.10.1-fix.1	c306ac577912	stdlib@go1.23.5	1.23.12	1
langgenius/dify-web :1.0.0	d64914ff0d6d	stdlib@go1.22.5	1.23.12	1
layer5/meshery :stable-latest	78a8be21bef3	stdlib@go1.23.9	1.23.12	1
layer5/meshery-app-mesh :stable-latest	77d59943b3d6	stdlib@go1.19.5	1.23.12	1
layer5/meshery-consul :stable-latest	25a4cc38abcd	stdlib@go1.19.13	1.23.12	1
layer5/meshery-cpx :stable-latest	8c20a8a1d6a4	stdlib@go1.13.1	1.23.12	1