CVE-2025-47911

Unscored

Advisory

Published 5 Feb 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,446; of 17,803 indexed, latest versions
Container images: 2,990; deployed by those charts
Fix available: 1 of 1; affected package

Quadratic parsing complexity in golang.org/x/net/html

Carried by container images the latest versions of 2,446 of 17,803 indexed charts deploy, on 2,990 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+210 more	0.45.0	2,990

OSV records: GO-2026-4440
Also known as: GHSA-w4gw-w5jq-g9jh

Charts affected

2,446 by stars

Chart

Latest

Affected images

Radar Score

opentelemetry-kube-stackappscode

0.14.12

2 of 3 See more

opentelemetry-kube-stack appscode 0.14.12

2 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
rancher/kubectl :v1.34.1	090bef429ed1	golang.org/x/net@v0.38.0	0.45.0
quay.io/brancz/kube-rbac-proxy :v0.20.0	147cb28fea35	golang.org/x/net@v0.44.0	0.45.0

Open the chart page →

1,886

panopticonappscode

2026.9.18

1 See more

panopticon appscode 2026.9.18

1 container image this version deploys carries CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

—

persesappscode

2026.6.2

1 of 1 See more

perses appscode 2026.6.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/opnpulse/perses :v2026.4.24	b880da90aa1a	golang.org/x/net@v0.42.0	0.45.0

Open the chart page →

530

platform-apiappscode

2026.9.11

1 of 3 See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

37,732

platform-linksappscode

2026.9.11

1 of 1 See more

platform-links appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/fileserver :v0.0.2	b1857871e06c	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

778

service-providerappscode

2026.9.11

1 of 2 See more

service-provider appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kube-rbac-proxy :v0.18.2	7de54b6dedc8	golang.org/x/net@v0.31.0	0.45.0

Open the chart page →

2,238

stash-communityappscode

0.42.0

4 of 4 See more

stash-community appscode 0.42.0

4 of the 4 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0
ghcr.io/appscode/kubectl-nonroot :1.31	83d43cc41590	golang.org/x/net@v0.26.0	0.45.0
ghcr.io/stashed/stash :v0.42.0	3a98245a7667	golang.org/x/net@v0.26.0	0.45.0
ghcr.io/stashed/stash-crd-installer :v0.42.0	76f0a650e44b	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

3,669

stash-opscenterappscode

2025.10.17

1 of 1 See more

stash-opscenter appscode 2025.10.17

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/stashed/stash-ui-server :v0.23.0	47cffbc65700	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

679

stash-ui-serverappscode

0.23.0

1 of 1 See more

stash-ui-server appscode 0.23.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/stashed/stash-ui-server :v0.23.0	47cffbc65700	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

679

statefulsetappscode

0.0.1

1 of 3 See more

statefulset appscode 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kube-rbac-proxy :v0.11.0	0df4ae70e3bd	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.45.0

Open the chart page →

2,739

vcd-lb-gcappscode

2026.6.25

1 of 1 See more

vcd-lb-gc appscode 2026.6.25

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/vcd-lb-gc :v0.1.0	524c4045cd21	golang.org/x/net@v0.23.0	0.45.0

Open the chart page →

178

haproxyappuio

2.7.2

1 of 1 See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	golang.org/x/net@v0.11.0	0.45.0

Open the chart page →

5,685

stardog-userrole-operatorappuio

0.4.0

1 of 1 See more

stardog-userrole-operator appuio 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/vshn/stardog-userrole-operator :v0.3.0	4774237c9e86	golang.org/x/net@v0.19.0	0.45.0

Open the chart page →

1,205

appwriteappwrite-helm

1.3.2

1 of 8 See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
appwrite/appwrite :1.9.0	1aaa70127114	golang.org/x/net@v0.40.0	0.45.0

Open the chart page →

9,843

harbor-scanner-trivyaqua-helm

0.17.0

1 of 1 See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980	0.45.0

Open the chart page →

5,211

argocdargo-helm-charts

1.0.0

2 of 3 See more

argocd argo-helm-charts 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	golang.org/x/net@v0.32.0	0.45.0
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	golang.org/x/net@v0.34.0	0.45.0

Open the chart page →

7,369

argo-workflowsargo-helm-charts

1.0.0

2 of 2 See more

argo-workflows argo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocli :v3.7.1	6efd1cb89dc1	golang.org/x/net@v0.40.0	0.45.0
quay.io/argoproj/workflow-controller :v3.7.1	66388d1b2f08	golang.org/x/net@v0.40.0	0.45.0

Open the chart page →

1,840

arlas-aiasarlas-stack

28.8.0

4 of 22 See more

arlas-aias arlas-stack 28.8.0

4 of the 22 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	golang.org/x/net@v0.39.0	0.45.0
bitnamilegacy/minio :2024.12.18-debian-12-r1	c0ede65eb88e	golang.org/x/net@v0.29.0	0.45.0
bitnamilegacy/minio :2025.4.22-debian-12-r1	d7cd0e172c4c	golang.org/x/net@v0.39.0	0.45.0
bitnamilegacy/os-shell :12-debian-12-r43	9ba5d16f9c64	golang.org/x/net@v0.33.0	0.45.0

Open the chart page →

40,651

arma-reforgerarma-reforger

0.5.3

7 of 8 See more

arma-reforger arma-reforger 0.5.3

7 of the 8 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.5.1	28fe26c8b8b1	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.45.0
stakater/reloader :v1.0.15	f4b87a8e56d4	golang.org/x/net@v0.7.0	0.45.0
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	golang.org/x/net@v0.7.0	0.45.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0	0.45.0
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0	0.45.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	golang.org/x/net@v0.4.0	0.45.0

Open the chart page →

23,435

cluster-autoscalerarzu

9.19.1

1 of 1 See more

cluster-autoscaler arzu 9.19.1

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
breton/cool :dev	41b1bb483aa2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.45.0

Open the chart page →

1,780

itera-lmaarzu

1.34.60

4 of 6 See more

itera-lma arzu 1.34.60

4 of the 6 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
grafana/grafana :9.0.1	a738d0744784	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.45.0
quay.io/prometheus-operator/prometheus-operator :v0.57.0	a2d502c204f9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0

Open the chart page →

8,622

assemblylineassemblyline

7.4.20

2 of 12 See more

assemblyline assemblyline 7.4.20

2 of the 12 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-01-11T05-49-32Z	026ae522febc	golang.org/x/net@v0.19.0	0.45.0
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	golang.org/x/net@v0.20.0	0.45.0

Open the chart page →

12,667

dltkvassist-iot-data-integrity-verification

0.2.0

4 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

4 of the 9 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.45.0
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0

Open the chart page →

78,035

dltflassist-iot-dlt-based-fl

0.2.0

4 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

4 of the 9 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.45.0
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0

Open the chart page →

78,035

fllocaloperationsassist-iot-fl-local-operations

1.1.0

1 of 3 See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0	0.45.0

Open the chart page →

3,789

flrepositorydbassist-iot-fl-repository

1.1.0

1 of 2 See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0	0.45.0

Open the chart page →

4,369

openapiassist-iot-open-api-management

0.2.2

2 of 6 See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
assistiot/open_api_backend :1.1.2	30812ba93555	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.45.0
kong/kubernetes-ingress-controller :2.3	5e66021b64a8	golang.org/x/net@v0.0.0-20220325170049-de3da57026de	0.45.0

Open the chart page →

18,426

performanceandusagediagnosisassist-iot-pud

1.0.0

4 of 7 See more

performanceandusagediagnosis assist-iot-pud 1.0.0

4 of the 7 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
grafana/grafana :9.1.1	9746858c20e6	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de	0.45.0
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0	0.45.0
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0

Open the chart page →

8,571

semantic-repositoryassist-iot-semantic-repository

1.1.0

1 of 3 See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	golang.org/x/net@v0.39.0	0.45.0

Open the chart page →

1,084

smartorchestratorassist-iot-smart-orchestrator

4.0.0

1 of 14 See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/net@v0.36.0	0.45.0

Open the chart page →

45,620

astrotrekastria

0.0.2

2 of 4 See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/astria-indexer :0.1.0	5cf1e5709820	golang.org/x/net@v0.26.0	0.45.0
ghcr.io/astriaorg/astria-indexer-api :0.1.0	3490d9900af1	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

32,664

celestia-localastria

9.0.0

2 of 2 See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v6.1.0-rc0	a604aefa3fae	golang.org/x/net@v0.44.0	0.45.0
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

3,300

celestia-nodeastria

0.7.1

1 of 1 See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

1,513

evm-rollupastria

4.1.0

1 of 2 See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/astria-geth :latest	4249e403225a	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

4,019

evm-stackastria

5.0.3

1 of 2 See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/astria-geth :latest	4249e403225a	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

4,019

flame-rollupastria

0.1.3

1 of 2 See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/flame :0.1.0	c8af1c5aae40	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

3,717

graph-nodeastria

0.2.2

1 of 3 See more

graph-node astria 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.17.0	803fac58ba15	golang.org/x/net@v0.1.0	0.45.0

Open the chart page →

5,572

sequencerastria

4.0.0

2 of 3 See more

sequencer astria 4.0.0

2 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
cometbft/cometbft :v0.38.17	22c2ac018f40	golang.org/x/net@v0.34.0	0.45.0
rclone/rclone :1.56.0	f2fc45c8bc57	golang.org/x/net@v0.0.0-20210415231046-e915ea6b2b7d	0.45.0

Open the chart page →

6,344

sequencer-faucetastria

0.9.2

1 of 1 See more

sequencer-faucet astria 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/seq-faucet :0.9.0	bf3cb9b505b6	golang.org/x/net@v0.28.0	0.45.0

Open the chart page →

1,320

asya-playgroundasya

1.1.3

1 of 1 See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
localstack/localstack :3.1	9d278167f2b7	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.45.0

Open the chart page →

9,449

hcloud-csi-driveratem18

1.5.1

2 of 6 See more

hcloud-csi-driver atem18 1.5.1

2 of the 6 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-csi-driver :1.5.1	41dce5b33644	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb	0.45.0
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946	0.45.0

Open the chart page →

6,509

authorization-componentauthorization-component

1.0.0

1 of 3 See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/authorization-component-php :latest	94a749392fcf	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0

Open the chart page →

7,571

okd-webhookav1o-charts

0.1.0

1 of 1 See more

okd-webhook av1o-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
registry.gitlab.com/av1o/okd-webhook :v0.1.0	28c3e5eb2650	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0

Open the chart page →

1,727

botkubeavesha

1.0.0

1 of 2 See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/kubeshop/botkube :v1.0.0	669e27a5d1af	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

5,083

istio-discoveryavesha

1.16.0

1 of 1 See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
istio/pilot :1.16.0	ac0284d75ec9	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9	0.45.0

Open the chart page →

6,965

kubeslice-workeravesha

1.5.0

2 of 14 See more

kubeslice-worker avesha 1.5.0

2 of the 14 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
aveshasystems/spiffe-csi-driver :0.2.7	53fc6d009e04	golang.org/x/net@v0.21.0	0.45.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.1	f6717ce72a26	golang.org/x/net@v0.8.0	0.45.0

Open the chart page →

1,645

appmesh-jaegeraws

1.0.3

1 of 1 See more

appmesh-jaeger aws 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.29	42822be7888b	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf	0.45.0

Open the chart page →

2,487

appmesh-prometheusaws

1.0.3

1 of 2 See more

appmesh-prometheus aws 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.45.0

Open the chart page →

2,946

aws-node-termination-handler-2aws

0.2.0

2 of 2 See more

aws-node-termination-handler-2 aws 0.2.0

2 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller :v2.0.0-beta	9637c80dd23f	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook :v2.0.0-beta	86b0f7243250	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0

Open the chart page →

2,966

aws-sigv4-proxy-admission-controlleraws

0.1.2

1 of 1 See more

aws-sigv4-proxy-admission-controller aws 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller :1.0	67b89ae52240	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.45.0

Open the chart page →

2,140

Container images carrying it

2,990 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/doodlescheduling/k8s-pause :v0.1.1	6b3215e37738	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.45.0	1
ghcr.io/doodlescheduling/k8svault-controller :v0.2.0	627e5e211766	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea	0.45.0	1
ghcr.io/dploeger/cloudflare-ddns-update :v0.1.0	ec06685b9ff4	golang.org/x/net@v0.25.0	0.45.0	1
ghcr.io/druggeri/nut_exporter :3.3.0	276460d141c7	golang.org/x/net@v0.35.0	0.45.0	1
ghcr.io/edgelesssys/continuum/continuum-proxy	24c76f294a80	golang.org/x/net@v0.32.0	0.45.0	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0	1
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0	0.45.0	1
ghcr.io/element-hq/ess-helm/matrix-tools :0.3.2	0eac0521be29	golang.org/x/net@v0.36.0	0.45.0	1
ghcr.io/eminaktas/oom-tracer :v0.1.0	c90ca8389c87	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/epinio/epinio-ui :v1.7.1-0.0.1	d3de52dfb0b4	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b	0.45.0	1
ghcr.io/erpc/erpc :0.0.49	f5654f745d4c	golang.org/x/net@v0.36.0	0.45.0	1
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/net@v0.19.0	0.45.0	1
ghcr.io/eumel8/rancher-servicemonitor :0.2.1	f34428cac187	golang.org/x/net@v0.22.0	0.45.0	1
ghcr.io/external-secrets/external-secrets :v0.3.11	56a1ea4490ba	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.45.0	1
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	golang.org/x/net@v0.10.0	0.45.0	1
ghcr.io/ferama/rospo :v0.12.0	ab40c1745534	golang.org/x/net@v0.20.0	0.45.0	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.45.0	1
ghcr.io/flatcar/flatcar-linux-update-operator :v0.10.0-rc1	f9063e20b1f6	golang.org/x/net@v0.8.0	0.45.0	1
ghcr.io/flatcar/nebraska :4.0.0	5c9e99ff7167	golang.org/x/net@v0.44.0	0.45.0	1
ghcr.io/flohansen/dasher-server :latest	7cde8c3fa2d1	golang.org/x/net@v0.22.0	0.45.0	1
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/net@v0.28.0	0.45.0	1
ghcr.io/fluxcd/flux-cli :v2.5.1	274a179fd402	golang.org/x/net@v0.35.0	0.45.0	1
ghcr.io/fluxcd/helm-controller :v1.2.0	62eaa9c9a929	golang.org/x/net@v0.34.0	0.45.0	1
ghcr.io/fluxcd/source-controller :v1.5.0	00cd9316a379	golang.org/x/net@v0.34.0	0.45.0	1
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	golang.org/x/net@v0.0.0-20220927171203-f486391704dc	0.45.0	1
ghcr.io/formancehq/ledger :v1.9.2	03c1ddbda33b	golang.org/x/net@v0.4.0	0.45.0	1
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	golang.org/x/net@v0.41.0	0.45.0	1
ghcr.io/foxcpp/maddy :0.9.5	de42151adff6	golang.org/x/net@v0.34.0	0.45.0	1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver :1.9.0	324f9b7b689c	golang.org/x/net@v0.17.0	0.45.0	1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver :1.9.0	cdba39e3f3d0	golang.org/x/net@v0.17.0	0.45.0	1
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d	0.45.0	1
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	golang.org/x/net@v0.32.0	0.45.0	1
ghcr.io/gabe565/domain-watch :latest	34c5a1e351d6	golang.org/x/net@v0.36.0	0.45.0	1
ghcr.io/gabe565/transsmute :latest	c8ac95a30c31	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	golang.org/x/net@v0.15.0	0.45.0	1
ghcr.io/georgmangold/console :v1.8.1	58f4f180aa6e	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/gijsvandulmen/k8qu :1.4	e897b18db13d	golang.org/x/net@v0.26.0	0.45.0	1
ghcr.io/gla-rad/mc-mms-edgerouter :latest	3620d5680775	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/gla-rad/mc-mms-router :latest	032e977d9adf	golang.org/x/net@v0.44.0	0.45.0	1
ghcr.io/glauth/glauth :v2.5.2	09c782ca5984	golang.org/x/net@v0.17.0	0.45.0	1
ghcr.io/gochain/rpc-proxy/rpc-proxy :latest	ca01f5ab95f7	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/gotify/server :2.6.1	04f4c4bb7cdd	golang.org/x/net@v0.25.0	0.45.0	1
ghcr.io/gotway/gotway :v0.0.13	7ed73c1979ee	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	golang.org/x/net@v0.41.0	0.45.0	1
ghcr.io/grafana/grafana-operator :v5.18.0	0af2faec9d6f	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.2	c7adcc4db378	golang.org/x/net@v0.30.0	0.45.0	1
ghcr.io/grafana/tempo-operator/tempo-operator :v0.4.0	2627be646391	golang.org/x/net@v0.12.0	0.45.0	1
ghcr.io/gurucomputing/headscale-ui :2026.03.17	015f5ba04bcb	golang.org/x/net@v0.42.0	0.45.0	1
ghcr.io/heimops/mimir-operator :latest	4e1a3ef1fe82	golang.org/x/net@v0.17.0	0.45.0	1