StackRadar

CVE-2025-47910

Unscored

Advisory

Published 22 Sept 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.003
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
59
of 17,781 indexed, latest versions
Container images
55
deployed by those charts
Fix available
1 of 1
affected package

CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http

Carried by container images the latest versions of 59 of 17,781 indexed charts deploy, on 55 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.25.01.25.155
OSV records
GO-2025-3955
Also known as
BIT-golang-2025-47910

Charts affected

59 by stars
ChartLatestAffected imagesRadar Score
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2025-47910.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
stdlib@go1.25.0
1.25.1

Open the chart page →

5,819
ctlogsigstoreVerified publisher0.2.683 of 4See more

ctlog sigstore 0.2.68

3 of the 4 container images this version deploys carry CVE-2025-47910.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
stdlib@go1.25.0
1.25.1
ghcr.io/sigstore/scaffolding/createtree:v0.7.31e5232e8c9122
stdlib@go1.25.0
1.25.1
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
stdlib@go1.25.0
1.25.1

Open the chart page →

2,728
trilliansigstoreVerified publisher0.3.171 of 5See more

trillian sigstore 0.3.17

1 of the 5 container images this version deploys carry CVE-2025-47910.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/createdbdigest-pinned3cee6c78973b
stdlib@go1.25.0
1.25.1

Open the chart page →

2,808
tufsigstoreVerified publisher0.1.321 of 1See more

tuf sigstore 0.1.32

1 of the 1 container images this version deploys carry CVE-2025-47910.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/serverdigest-pinnedae8eb69c7b70
stdlib@go1.25.0
1.25.1

Open the chart page →

761
spire-ha-agentspiffeVerified publisher0.3.21 of 2See more

spire-ha-agent spiffe 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-47910.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-ha-agent:0.5.0307cf2d05afe
stdlib@go1.25.0
1.25.1

Open the chart page →

361
volcanovolcano-sh1.15.23 of 3See more

volcano volcano-sh 1.15.2

3 of the 3 container images this version deploys carry CVE-2025-47910.

Container imageDigestPackageFixed in
volcanosh/vc-controller-manager:v1.15.26a6bc2560d51
stdlib@go1.25.0
1.25.1
volcanosh/vc-scheduler:v1.15.2afab36286a17
stdlib@go1.25.0
1.25.1
volcanosh/vc-webhook-manager:v1.15.22fff65aad011
stdlib@go1.25.0
1.25.1

Open the chart page →

1,533
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-47910.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
stdlib@go1.25.0
1.25.1

Open the chart page →

3,911
giteawenerme12.7.01 of 4See more

gitea wenerme 12.7.0

1 of the 4 container images this version deploys carry CVE-2025-47910.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.25.1

Open the chart page →

8,811
wexa-studiowexa-studio1.2.02 of 15See more

wexa-studio wexa-studio 1.2.0

2 of the 15 container images this version deploys carry CVE-2025-47910.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
stdlib@go1.25.0
1.25.1
temporalio/server:1.29.1c1e3326b2ce1
stdlib@go1.25.0
1.25.1

Open the chart page →

14,983

Container images carrying it

55 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.25.1
6
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.25.1
4
ghcr.io/sigstore/scaffolding/createtree:v0.7.31e5232e8c9122
stdlib@go1.25.0
1.25.1
4
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
stdlib@go1.25.0
1.25.1
3
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
stdlib@go1.25.0
1.25.1
3
ghcr.io/sigstore/scaffolding/createdb3cee6c78973b
stdlib@go1.25.0
1.25.1
3
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
stdlib@go1.25.0
1.25.1
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
stdlib@go1.25.0
1.25.1
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
stdlib@go1.25.0
1.25.1
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
stdlib@go1.25.0
1.25.1
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
stdlib@go1.25.0
1.25.1
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
stdlib@go1.25.0
1.25.1
3
alpine/k8s:1.32.12048f8d9c8cc7
stdlib@go1.25.0
1.25.1
2
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.25.1
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.25.1
2
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
stdlib@go1.25.0
1.25.1
2
ghcr.io/sigstore/scaffolding/createcerts7f59f7c08d1a
stdlib@go1.25.0
1.25.1
2
alcounit/browser-controller:v1.0.093b7cdbab14b
stdlib@go1.25.0
1.25.1
1
alcounit/browser-service:v0.0.94bd10defc324
stdlib@go1.25.0
1.25.1
1
alcounit/browser-ui:v0.0.96a977c92ef27
stdlib@go1.25.0
1.25.1
1
alcounit/selenosis:v2.1.1d01a9dbbd943
stdlib@go1.25.0
1.25.1
1
alpine/k8s:1.31.137a319b15cfc9
stdlib@go1.25.0
1.25.1
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
stdlib@go1.25.0
1.25.1
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
stdlib@go1.25.0
1.25.1
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
stdlib@go1.25.0
1.25.1
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
stdlib@go1.25.0
1.25.1
1
flanksource/batch-runner:v1.0.44689687a7cf95
stdlib@go1.25.0
1.25.1
1
ixsystems/truecommand:3.2.019c218455cd2
stdlib@go1.25.0
1.25.1
1
lifailon/openrouter-bot:latestea37e4b6b952
stdlib@go1.25.0
1.25.1
1
openpolicyagent/kube-mgmt:11.0.123a8b1bacbcd8
stdlib@go1.25.0
1.25.1
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
stdlib@go1.25.0
1.25.1
1
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
stdlib@go1.25.0
1.25.1
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
stdlib@go1.25.0
1.25.1
1
temporalio/auto-setup:1.29.15b3502a3b685
stdlib@go1.25.0
1.25.1
1
temporalio/server:1.29.1c1e3326b2ce1
stdlib@go1.25.0
1.25.1
1
volcanosh/vc-controller-manager:v1.15.26a6bc2560d51
stdlib@go1.25.0
1.25.1
1
volcanosh/vc-scheduler:v1.15.2afab36286a17
stdlib@go1.25.0
1.25.1
1
volcanosh/vc-webhook-manager:v1.15.22fff65aad011
stdlib@go1.25.0
1.25.1
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
stdlib@go1.25.0
1.25.1
1
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
stdlib@go1.25.0
1.25.1
1
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
stdlib@go1.25.0
1.25.1
1
ghcr.io/cronschedules/cronjob-scale-down-operator:0.4.41c4e803d7169
stdlib@go1.25.0
1.25.1
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
stdlib@go1.25.0
1.25.1
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
stdlib@go1.25.0
1.25.1
1
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
stdlib@go1.25.0
1.25.1
1
ghcr.io/glauth/glauth:v2.5.209c782ca5984
stdlib@go1.25.0
1.25.1
1
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
stdlib@go1.25.0
1.25.1
1
ghcr.io/lukaszraczylo/jobs-manager-operator:0.1.15e6239e2838d7
stdlib@go1.25.0
1.25.1
1
ghcr.io/luzilla/dnsbl_exporter:v0.12.0ecba7360ff12
stdlib@go1.25.0
1.25.1
1
ghcr.io/paperclipinc/paperclip-operator:v0.19.10984b890eb38
stdlib@go1.25.0
1.25.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.