StackRadar

CVE-2025-47908

Medium

Advisory

Published 2 Jul 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
83
of 17,781 indexed, latest versions
Container images
67
deployed by those charts
Fix available
1 of 1
affected package

Denial of service via malicious preflight requests in github.com/rs/cors

Carried by container images the latest versions of 83 of 17,781 indexed charts deploy, on 67 images.

Affected packageAffected versionsFixed inImages
github.com/rs/corsgolangv1.9.0, v1.10.0, v1.10.11.11.067
OSV records
GHSA-mh55-gqvf-xfwm
Also known as
GO-2024-2883

Charts affected

83 by stars
ChartLatestAffected imagesRadar Score
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

16,251
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
github.com/rs/cors@v1.10.0
1.11.0

Open the chart page →

1,556
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/rs/cors@v1.10.0
1.11.0

Open the chart page →

11,933
jaeger-all-in-onejaeger-all-in-oneVerified publisher0.1.121 of 1See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.55f6b5d09073f1
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

1,216
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:2.8.08951be4b4e1c
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

30,326
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

8,722
coder-observabilitycoder-observabilityVerified publisher0.7.32 of 21See more

coder-observability coder-observability 0.7.3

2 of the 21 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/rs/cors@v1.10.1
1.11.0
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

24,700
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

28,839
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

17,693
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

28,534
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

12,562
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

15,383
temporalglasskubeVerified publisher0.45.2-gk.12 of 14See more

temporal glasskube 0.45.2-gk.1

2 of the 14 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/rs/cors@v1.10.1
1.11.0
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

16,346
lgtm-stacklgtm-stackVerified publisher0.1.31 of 8See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-01-18T22-51-28Z551682a57a94
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

5,576
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

4,389
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.230b60b6565ab2
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

37,373
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

7,685
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

2,022
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

10,090
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-11-20T22-40-07Zb833a1699b4f
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

12,473
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-backend:v1.0.77e7a26393cd1
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

4,497
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

5,657
assemblylineassemblylineVerified publisher7.4.171 of 12See more

assemblyline assemblyline 7.4.17

1 of the 12 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

12,898
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

5,823
jaegerbook-k8sinfra-v23.4.01 of 5See more

jaeger book-k8sinfra-v2 3.4.0

1 of the 5 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

19,229
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

6,036
prometheusbook-k8sinfra-v226.0.11 of 6See more

prometheus book-k8sinfra-v2 26.0.1

1 of the 6 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

3,244
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

1,859
temporalcastaiVerified publisher0.54.22 of 14See more

temporal castai 0.54.2

2 of the 14 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/rs/cors@v1.10.1
1.11.0
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

15,027
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

4,509
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
codecov/self-hosted-gateway:24.4.1de483faad6e5
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

24,917
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

1,296
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

6,678
eoapi-supporteoapiVerified publisher0.1.71 of 7See more

eoapi-support eoapi 0.1.7

1 of the 7 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

8,648
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

7,329
galoygaloymoney0.34.71 of 24See more

galoy galoymoney 0.34.7

1 of the 24 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

8,677
galoygaloymoney20.34.71 of 24See more

galoy galoymoney2 0.34.7

1 of the 24 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

8,677
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

19,229
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.53.060e65bfffe1f
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

49,025
prometheusgrafana-uxadax26.0.11 of 6See more

prometheus grafana-uxadax 26.0.1

1 of the 6 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

5,304
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
supabase/gotrue:v2.91.07174d551d720
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

24,995
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.26.0361db356b330
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

9,460
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

3,999
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

3,561
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

7,510
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

23,613
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

24,400

Container images carrying it

67 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/alpineworks/katalog-backend:v1.0.77e7a26393cd1
github.com/rs/cors@v1.10.1
1.11.0
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
github.com/rs/cors@v1.10.1
1.11.0
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/rs/cors@v1.10.1
1.11.0
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/rs/cors@v1.9.0
1.11.0
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/rs/cors@v1.10.1
1.11.0
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
github.com/rs/cors@v1.9.0
1.11.0
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
github.com/rs/cors@v1.10.1
1.11.0
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/rs/cors@v1.9.0
1.11.0
1
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
github.com/rs/cors@v1.10.1
1.11.0
1
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
github.com/rs/cors@v1.10.1
1.11.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.