CVE-2025-47908
MediumAdvisory
Published 2 Jul 2024In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.006
- 45th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 83
- of 17,781 indexed, latest versions
- Container images
- 67
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Denial of service via malicious preflight requests in github.com/rs/cors
Carried by container images the latest versions of 83 of 17,781 indexed charts deploy, on 67 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.9.0, v1.10.0, v1.10.1 | 1.11.0 | 67 |
- OSV records
- GHSA-mh55-gqvf-xfwm
- Also known as
- GO-2024-2883
Charts affected
83 by stars
Container images carrying it
67 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | e13b6ed5cb92 | github.com/ | 1.11.0 | 8 |
| jaegertracing/ | 7f1269222903 | github.com/ | 1.11.0 | 4 |
| grafana/ | 0dc5a246ab16 | github.com/ | 1.11.0 | 3 |
| oryd/ | 2c93beb5e5f2 | github.com/ | 1.11.0 | 3 |
| rss3/ | d1d2ae6efd05 | github.com/ | 1.11.0 | 3 |
| quay.io/ | 361db356b330 | github.com/ | 1.11.0 | 3 |
| grafana/ | 079600c9517b | github.com/ | 1.11.0 | 2 |
| grafana/ | 886b56d5534e | github.com/ | 1.11.0 | 2 |
| grafana/ | f0200a9bff6d | github.com/ | 1.11.0 | 2 |
| otel/ | 7ef2a2ff46b9 | github.com/ | 1.11.0 | 2 |
| rss3/ | dae8a5bdd7a6 | github.com/ | 1.11.0 | 2 |
| rss3/ | a4059dd32c48 | github.com/ | 1.11.0 | 2 |
| quay.io/ | 6262bc9a2730 | github.com/ | 1.11.0 | 2 |
| quay.io/ | 8e5e9490cd50 | github.com/ | 1.11.0 | 2 |
| amazon/ | 73b79b02f03a | github.com/ | 1.11.0 | 1 |
| bitnamilegacy/ | 0b60b6565ab2 | github.com/ | 1.11.0 | 1 |
| bitnamilegacy/ | 5bb0aa825d16 | github.com/ | 1.11.0 | 1 |
| codecov/ | de483faad6e5 | github.com/ | 1.11.0 | 1 |
| datadog/ | aad9994de6a7 | github.com/ | 1.11.0 | 1 |
| defactops/ | 825cdf9ba706 | github.com/ | 1.11.0 | 1 |
| devopsfaith/ | 4c678c224f67 | github.com/ | 1.11.0 | 1 |
| grafana/ | f6cbec9409be | github.com/ | 1.11.0 | 1 |
| grafana/ | c3dac4e26471 | github.com/ | 1.11.0 | 1 |
| grafana/ | 0679e877ba20 | github.com/ | 1.11.0 | 1 |
| grafana/ | 1b9ca4bbc4a2 | github.com/ | 1.11.0 | 1 |
| grafana/ | 464eac539793 | github.com/ | 1.11.0 | 1 |
| grafana/ | 6b5b37eb35bb | github.com/ | 1.11.0 | 1 |
| grafana/ | 8640e5038e83 | github.com/ | 1.11.0 | 1 |
| grafana/ | b23b588cf7cb | github.com/ | 1.11.0 | 1 |
| grafana/ | f9811e4e687f | github.com/ | 1.11.0 | 1 |
| grafana/ | 7476e456c738 | github.com/ | 1.11.0 | 1 |
| haproxytech/ | 7f3dc8c7e031 | github.com/ | 1.11.0 | 1 |
| haproxytech/ | 8951be4b4e1c | github.com/ | 1.11.0 | 1 |
| jaegertracing/ | 60e65bfffe1f | github.com/ | 1.11.0 | 1 |
| jaegertracing/ | f6b5d09073f1 | github.com/ | 1.11.0 | 1 |
| logiqai/ | 65b996bc7bdc | github.com/ | 1.11.0 | 1 |
| minio/ | 4c4a4876193f | github.com/ | 1.11.0 | 1 |
| minio/ | 551682a57a94 | github.com/ | 1.11.0 | 1 |
| minio/ | b833a1699b4f | github.com/ | 1.11.0 | 1 |
| otel/ | 71fcef33ae71 | github.com/ | 1.11.0 | 1 |
| otel/ | 995f17004231 | github.com/ | 1.11.0 | 1 |
| otel/ | c6671841470b | github.com/ | 1.11.0 | 1 |
| phntom/ | 51cf9da4aa2e | github.com/ | 1.11.0 | 1 |
| rss3/ | e8adc09d9c07 | github.com/ | 1.11.0 | 1 |
| rss3/ | 45b91380bbe7 | github.com/ | 1.11.0 | 1 |
| rss3/ | 96672897ba9e | github.com/ | 1.11.0 | 1 |
| rss3/ | 865a0a6bdf4c | github.com/ | 1.11.0 | 1 |
| rss3/ | 8d9a44c650fa | github.com/ | 1.11.0 | 1 |
| sky5367/ | d51bf68d4b26 | github.com/ | 1.11.0 | 1 |
| supabase/ | 7174d551d720 | github.com/ | 1.11.0 | 1 |