StackRadar

CVE-2025-47908

Medium

Advisory

Published 2 Jul 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
83
of 17,781 indexed, latest versions
Container images
67
deployed by those charts
Fix available
1 of 1
affected package

Denial of service via malicious preflight requests in github.com/rs/cors

Carried by container images the latest versions of 83 of 17,781 indexed charts deploy, on 67 images.

Affected packageAffected versionsFixed inImages
github.com/rs/corsgolangv1.9.0, v1.10.0, v1.10.11.11.067
OSV records
GHSA-mh55-gqvf-xfwm
Also known as
GO-2024-2883

Charts affected

83 by stars
ChartLatestAffected imagesRadar Score
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

1,594
cognativemyaVerified publisher0.2403.32 of 3See more

cognative mya 0.2403.3

2 of the 3 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
github.com/rs/cors@v1.10.1
1.11.0
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

7,309
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
github.com/rs/cors@v1.10.0
1.11.0

Open the chart page →

6,455
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/rs/cors@v1.10.0
1.11.0

Open the chart page →

5,565
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
github.com/rs/cors@v1.10.0
1.11.0

Open the chart page →

4,674
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

2,966
prometheusnodepulse25.0.01 of 6See more

prometheus nodepulse 25.0.0

1 of the 6 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.26.0361db356b330
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

7,740
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

5,137
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

5,411
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

1,980
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

1,326
firehose-corepinaxVerified publisher0.1.11 of 2See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/rs/cors@v1.10.0
1.11.0

Open the chart page →

3,488
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/rs/cors@v1.10.0
1.11.0

Open the chart page →

7,062
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
github.com/rs/cors@v1.10.0
1.11.0

Open the chart page →

6,641
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
github.com/rs/cors@v1.10.0
1.11.0

Open the chart page →

4,889
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

4,416
hydraradar-baseVerified publisher0.48.01 of 1See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

1,524
chainrss30.1.284 of 8See more

chain rss3 0.1.28

4 of the 8 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
rss3/op-batcher:d2c5ced00901227473fc196fda838191f0cb4e02e8adc09d9c07
github.com/rs/cors@v1.9.0
1.11.0
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/rs/cors@v1.9.0
1.11.0
rss3/op-proposer:d2c5ced00901227473fc196fda838191f0cb4e0296672897ba9e
github.com/rs/cors@v1.9.0
1.11.0
rss3/proxyd:d2c5ced00901227473fc196fda838191f0cb4e028d9a44c650fa
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

8,528
op-batcherrss30.1.01 of 2See more

op-batcher rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

1,251
op-proposerrss30.1.01 of 2See more

op-proposer rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

1,251
proxydrss30.1.01 of 1See more

proxyd rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
rss3/proxyd:6edce9ddfeee0b00a2d98f24c3ce67885653651b865a0a6bdf4c
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

2,110
vsl-chainrss30.1.03 of 7See more

vsl-chain rss3 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
github.com/rs/cors@v1.9.0
1.11.0
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
github.com/rs/cors@v1.9.0
1.11.0
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

6,044
vsl-rpcrss30.3.41 of 4See more

vsl-rpc rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

4,610
vsl-sequencerrss30.3.41 of 4See more

vsl-sequencer rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

4,610
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

1,721
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

4,203
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.26.0361db356b330
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

7,708
mimirskyloud-helm-chartsVerified publisher5.5.12 of 5See more

mimir skyloud-helm-charts 5.5.1

2 of the 5 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
grafana/mimir:r292-5f018727476e456c738
github.com/rs/cors@v1.10.1
1.11.0
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/rs/cors@v1.10.0
1.11.0

Open the chart page →

10,651
redis-high-availabilitysomeblackmagic1.3.101 of 3See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:2.9.57f3dc8c7e031
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

3,148
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

20,223
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

14,983
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
github.com/rs/cors@v1.10.1
1.11.0

Open the chart page →

9,248
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2025-47908.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/rs/cors@v1.9.0
1.11.0

Open the chart page →

2,022

Container images carrying it

67 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/alpineworks/katalog-backend:v1.0.77e7a26393cd1
github.com/rs/cors@v1.10.1
1.11.0
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
github.com/rs/cors@v1.10.1
1.11.0
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/rs/cors@v1.10.1
1.11.0
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
github.com/rs/cors@v1.9.0
1.11.0
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/rs/cors@v1.10.1
1.11.0
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
github.com/rs/cors@v1.10.0
1.11.0
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
github.com/rs/cors@v1.9.0
1.11.0
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
github.com/rs/cors@v1.10.1
1.11.0
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/rs/cors@v1.9.0
1.11.0
1
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
github.com/rs/cors@v1.10.1
1.11.0
1
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
github.com/rs/cors@v1.10.1
1.11.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.