CVE-2025-47911

Unscored

Advisory

Published 5 Feb 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,457; of 17,787 indexed, latest versions
Container images: 3,002; deployed by those charts
Fix available: 1 of 1; affected package

Quadratic parsing complexity in golang.org/x/net/html

Carried by container images the latest versions of 2,457 of 17,787 indexed charts deploy, on 3,002 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+210 more	0.45.0	3,002

OSV records: GO-2026-4440
Also known as: GHSA-w4gw-w5jq-g9jh

Charts affected

2,457 by stars

Chart

Latest

Affected images

Radar Score

monitoringgaloymoney2

0.12.21

5 of 6 See more

monitoring galoymoney2 0.12.21

5 of the 6 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0	0.45.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

5,295

autobrrgeek-cookbook

1.1.3

1 of 1 See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.45.0

Open the chart page →

2,236

dendritegeek-cookbook

6.4.0

1 of 1 See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.45.0

Open the chart page →

2,143

gatusgeek-cookbook

1.1.2

1 of 1 See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0

Open the chart page →

1,881

gonicgeek-cookbook

6.4.2

1 of 1 See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.45.0

Open the chart page →

3,525

gotifygeek-cookbook

1.2.2

1 of 1 See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
gotify/server :2.1.4	09c79bc1e403	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0

Open the chart page →

3,131

maddygeek-cookbook

3.2.0

1 of 1 See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/net@v0.0.0-20211011170408-caeb26a5c8c0	0.45.0

Open the chart page →

2,630

minifluxgeek-cookbook

5.2.0

1 of 2 See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/net@v0.0.0-20210916014120-12bc252f5db8	0.45.0

Open the chart page →

2,430

navidromegeek-cookbook

6.4.2

1 of 1 See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0

Open the chart page →

3,597

owncloud-ocisgeek-cookbook

2.4.2

1 of 1 See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0

Open the chart page →

3,236

photoprismgeek-cookbook

7.2.0

1 of 1 See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
photoprism/photoprism :220629-jammy	2954334adbda	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.45.0

Open the chart page →

19,560

pod-gatewaygeek-cookbook

5.6.2

1 of 2 See more

pod-gateway geek-cookbook 5.6.2

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/gateway-admision-controller :v3.5.0	175512bb3f61	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0

Open the chart page →

2,355

pod-gateway-settergeek-cookbook

1.0.0

1 of 1 See more

pod-gateway-setter geek-cookbook 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/gateway-admision-controller :v2.0.0	0d6d0df98fe4	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0

Open the chart page →

1,641

rtsp-to-webgeek-cookbook

2.2.2

1 of 1 See more

rtsp-to-web geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

1,467

searxgeek-cookbook

5.6.2

2 of 4 See more

searx geek-cookbook 5.6.2

2 of the 4 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
dalf/morty :latest	248a4849c350	golang.org/x/net@v0.0.0-20220421235706-1d1ef9303861	0.45.0
library/caddy :2.2.0-alpine	7367adca165f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.45.0

Open the chart page →

7,470

skypilotgeek-cookbook

0.0.1

3 of 3 See more

skypilot geek-cookbook 0.0.1

3 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	golang.org/x/net@v0.38.0	0.45.0
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	golang.org/x/net@v0.41.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

8,955

torrservergeek-cookbook

1.2.2

1 of 1 See more

torrserver geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
smailkoz/torrserver :1.0.111	7b52d15de8f0	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

3,165

vikunjageek-cookbook

6.2.0

2 of 4 See more

vikunja geek-cookbook 6.2.0

2 of the 4 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
library/caddy :2.4.2-alpine	fbc51bcf1ab0	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0
vikunja/api :0.17.1	8cba0520bf8c	golang.org/x/net@v0.0.0-20210505024714-0287a6fb4125	0.45.0

Open the chart page →

6,893

webhook-receivergeek-cookbook

0.0.1

1 of 1 See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	golang.org/x/net@v0.15.0	0.45.0

Open the chart page →

1,362

chproxygeneral-helm-charts

0.0.2

1 of 1 See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
contentsquareplatform/chproxy :v1.26.5	24555f22d4be	golang.org/x/net@v0.23.0	0.45.0

Open the chart page →

3,724

kafkagengxiankun-charts

0.2.0

1 of 1 See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

4,547

geonetwork-k8sgeonetwork-k8s

4.2.8

1 of 5 See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	golang.org/x/net@v0.11.0	0.45.0

Open the chart page →

34,879

istiogetindata

1.11.1

2 of 2 See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0

Open the chart page →

16,834

ghostghost

0.1.0

1 of 4 See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
litestream/litestream :0.3	c5a1e1b01916	golang.org/x/net@v0.14.0	0.45.0

Open the chart page →

9,036

gitanagitana

1.4.0

1 of 1 See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/net@v0.0.0-20210929161516-d455829e376d	0.45.0

Open the chart page →

3,478

gitlab-goproxygitlab-goproxy

0.2.2

1 of 1 See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/net@v0.10.0	0.45.0

Open the chart page →

1,325

apid-helpergkarthiks

0.1.4

1 of 1 See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/net@v0.11.0	0.45.0

Open the chart page →

2,609

prometheus-container-resource-exportergkarthiks

0.3.1

1 of 1 See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
gkarthics/container-resource-exporter :latest	6799af333e8a	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0

Open the chart page →

2,218

glassflow-etlglassflow

0.5.21

3 of 16 See more

glassflow-etl glassflow 0.5.21

3 of the 16 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0	0.45.0
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/net@v0.28.0	0.45.0
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

12,072

glassflow-operatorglassflow-operator

0.8.5

1 of 3 See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

763

glauthglauth

0.3.17

1 of 2 See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/glauth :2.5	2e6e09fa77dd	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

2,605

gliderglider

0.1.5

1 of 1 See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
nadoo/glider :0.16	38aadefbd607	golang.org/x/net@v0.28.0	0.45.0

Open the chart page →

894

gnp-stackgnp-stack

0.0.5

5 of 14 See more

gnp-stack gnp-stack 0.0.5

5 of the 14 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.32	9289da488b07	golang.org/x/net@v0.38.0	0.45.0
quay.io/prometheus-operator/prometheus-operator :v0.85.0	890b3bb05cf4	golang.org/x/net@v0.43.0	0.45.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.3	3d671cf20a35	golang.org/x/net@v0.44.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

7,662

go-file-servergo-file-server

1.0.0

1 of 2 See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/net@v0.27.0	0.45.0

Open the chart page →

2,215

gorsegorse-io

0.4.2

3 of 4 See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/net@v0.7.0	0.45.0
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/net@v0.7.0	0.45.0
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

4,380

gotwaygotway

0.8.0

1 of 1 See more

gotway gotway 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/gotway/gotway :v0.0.13	7ed73c1979ee	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0

Open the chart page →

1,826

Governify-Bluejaygovernify

0.1.0

1 of 12 See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.45.0

Open the chart page →

22,565

Governify-Falcongovernify

0.1.0

1 of 10 See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.45.0

Open the chart page →

24,360

goweeklygoweekly

2.0.0

1 of 1 See more

goweekly goweekly 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/goweekly :v2.0.0	08dcc130fbea	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.45.0

Open the chart page →

1,229

harborgpg-dev

1.18.3

1 of 8 See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
goharbor/trivy-adapter-photon :v2.14.3	5c6f7162804c	golang.org/x/net@v0.28.0	0.45.0

Open the chart page →

3,376

ingress-nginxgpg-dev

4.9.0

2 of 2 See more

ingress-nginx gpg-dev 4.9.0

2 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.9.5	b3aba22b1da8	golang.org/x/net@v0.17.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0	0.45.0

Open the chart page →

2,316

jaegergpg-dev

3.3.3

3 of 5 See more

jaeger gpg-dev 3.3.3

3 of the 5 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0	0.45.0
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0	0.45.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0	0.45.0

Open the chart page →

19,291

kubernetes-dashboardgpg-dev

7.5.0

4 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

4 of the 5 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.7.0	60595892c2cf	golang.org/x/net@v0.25.0	0.45.0
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	golang.org/x/net@v0.22.0	0.45.0
kubernetesui/dashboard-metrics-scraper :1.1.1	7747d363c9fe	golang.org/x/net@v0.21.0	0.45.0
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	golang.org/x/net@v0.25.0	0.45.0

Open the chart page →

6,075

metrics-servergpg-dev

3.12.1

1 of 1 See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/net@v0.20.0	0.45.0

Open the chart page →

1,071

opentelemetry-demogpg-dev

0.33.8

8 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	golang.org/x/net@v0.29.0	0.45.0
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	golang.org/x/net@v0.19.0	0.45.0
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/net@v0.31.0	0.45.0
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/net@v0.27.0	0.45.0
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	golang.org/x/net@v0.25.0	0.45.0
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/net@v0.25.0	0.45.0
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/net@v0.19.0	0.45.0
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/net@v0.30.0	0.45.0

Open the chart page →

47,117

prometheus-operator-admission-webhookgpg-dev

0.18.1

2 of 2 See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

2 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/admission-webhook :v0.79.2	d4c97a1b2d67	golang.org/x/net@v0.32.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0	0.45.0

Open the chart page →

1,685

grafana-cloud-onboardinggrafana

0.4.7

1 of 5 See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	golang.org/x/net@v0.23.0	0.45.0

Open the chart page →

4,657

grafana-samplinggrafana

1.1.7

2 of 2 See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.11.3	8c7256f412fe	golang.org/x/net@v0.43.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0	0.45.0

Open the chart page →

3,357

mimir-openshift-experimentalgrafana

2.1.0

3 of 4 See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.45.0
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.45.0
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.45.0

Open the chart page →

17,759

pyroscope-monitoringgrafana

0.1.1

5 of 6 See more

pyroscope-monitoring grafana 0.1.1

5 of the 6 container images this version deploys carry CVE-2025-47911.

Container image	Digest	Package	Fixed in
grafana/otel-lgtm :0.11.10	09d8c3ce4f3a	golang.org/x/net@v0.38.0	0.45.0
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	golang.org/x/net@v0.41.0	0.45.0
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

8,226

Container images carrying it

3,002 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
minio/minio :latest :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/net@v0.39.0	0.45.0	16
codeurjc/toposervice :v1.0 :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0	0.45.0	13
jenkins/jenkins :2.568.3-jdk21 :2.568.3-lts-jdk21 :lts	c1e4c349365f	golang.org/x/net@v0.38.0	0.45.0	13
ghcr.io/appscode/kubectl-nonroot :1.34	0b26892cec94	golang.org/x/net@v0.38.0	0.45.0	13
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.45.0	9
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0	8
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0	0.45.0	8
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0	0.45.0	8
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.45.0	8
minio/mc :latest :RELEASE.2025-08-13T08-35-41Z	a7fe349ef4bd	golang.org/x/net@v0.42.0	0.45.0	7
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb	0.45.0	7
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0	7
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0	0.45.0	7
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0	0.45.0	7
quay.io/thanos/thanos :v0.37.2	4ec6df40fdb9	golang.org/x/net@v0.30.0	0.45.0	7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0	0.45.0	7
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0	0.45.0	7
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0	0.45.0	6
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0	0.45.0	6
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.45.0	6
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	6
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420	0.45.0	6
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.45.0	6
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0	0.45.0	6
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0	6
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.45.0	6
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0	0.45.0	6
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0	0.45.0	6
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0	0.45.0	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0	0.45.0	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.45.0	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0	0.45.0	6
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0 :v2.8.1	f6717ce72a26	golang.org/x/net@v0.8.0	0.45.0	6
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	golang.org/x/net@v0.40.0	0.45.0	6
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0	0.45.0	5
bitnamilegacy/kubectl :1.29.2	c74b703deed2	golang.org/x/net@v0.19.0	0.45.0	5
keelhq/keel :latest	73714afb4443	golang.org/x/net@v0.33.0	0.45.0	5
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0	0.45.0	5
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.45.0	5
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/net@v0.44.0	0.45.0	5
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.45.0	5
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/net@v0.39.0	0.45.0	5
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946	0.45.0	5
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.45.0	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0	0.45.0	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0	0.45.0	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/net@v0.28.0	0.45.0	5
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0	5
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0	0.45.0	5
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0	0.45.0	4