CVE-2025-58190

Unscored

Advisory

Published 5 Feb 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,502; of 17,805 indexed, latest versions
Container images: 3,027; deployed by those charts
Fix available: 1 of 1; affected package

Infinite parsing loop in golang.org/x/net

Carried by container images the latest versions of 2,502 of 17,805 indexed charts deploy, on 3,027 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+210 more	0.45.0	3,027

OSV records: GO-2026-4441

Charts affected

2,502 by stars

Chart

Latest

Affected images

Radar Score

galoy-depsgaloymoney

0.10.20

8 of 9 See more

galoy-deps galoymoney 0.10.20

8 of the 9 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.45.0
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0	0.45.0
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0	0.45.0
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

12,011

lndgaloymoney

0.10.6

1 of 3 See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0	0.45.0

Open the chart page →

2,162

monitoringgaloymoney

0.12.21

5 of 6 See more

monitoring galoymoney 0.12.21

5 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0	0.45.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

5,337

galoygaloymoney2

0.34.7

4 of 24 See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.45.0
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0	0.45.0
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0	0.45.0
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0	0.45.0

Open the chart page →

8,731

galoy-depsgaloymoney2

0.10.20

8 of 9 See more

galoy-deps galoymoney2 0.10.20

8 of the 9 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.45.0
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0	0.45.0
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0	0.45.0
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

12,011

lndgaloymoney2

0.10.6

1 of 3 See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0	0.45.0

Open the chart page →

2,162

monitoringgaloymoney2

0.12.21

5 of 6 See more

monitoring galoymoney2 0.12.21

5 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0	0.45.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

5,337

autobrrgeek-cookbook

1.1.3

1 of 1 See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.45.0

Open the chart page →

2,237

dendritegeek-cookbook

6.4.0

1 of 1 See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.45.0

Open the chart page →

2,144

gatusgeek-cookbook

1.1.2

1 of 1 See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0

Open the chart page →

1,882

gonicgeek-cookbook

6.4.2

1 of 1 See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.45.0

Open the chart page →

3,525

gotifygeek-cookbook

1.2.2

1 of 1 See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gotify/server :2.1.4	09c79bc1e403	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0

Open the chart page →

3,133

maddygeek-cookbook

3.2.0

1 of 1 See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/net@v0.0.0-20211011170408-caeb26a5c8c0	0.45.0

Open the chart page →

2,631

minifluxgeek-cookbook

5.2.0

1 of 2 See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/net@v0.0.0-20210916014120-12bc252f5db8	0.45.0

Open the chart page →

2,431

navidromegeek-cookbook

6.4.2

1 of 1 See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0

Open the chart page →

3,598

owncloud-ocisgeek-cookbook

2.4.2

1 of 1 See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0

Open the chart page →

3,244

photoprismgeek-cookbook

7.2.0

1 of 1 See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
photoprism/photoprism :220629-jammy	2954334adbda	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.45.0

Open the chart page →

19,607

pod-gatewaygeek-cookbook

5.6.2

1 of 2 See more

pod-gateway geek-cookbook 5.6.2

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/gateway-admision-controller :v3.5.0	175512bb3f61	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0

Open the chart page →

2,361

pod-gateway-settergeek-cookbook

1.0.0

1 of 1 See more

pod-gateway-setter geek-cookbook 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/gateway-admision-controller :v2.0.0	0d6d0df98fe4	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0

Open the chart page →

1,642

rtsp-to-webgeek-cookbook

2.2.2

1 of 1 See more

rtsp-to-web geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

1,467

searxgeek-cookbook

5.6.2

2 of 4 See more

searx geek-cookbook 5.6.2

2 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
dalf/morty :latest	248a4849c350	golang.org/x/net@v0.0.0-20220421235706-1d1ef9303861	0.45.0
library/caddy :2.2.0-alpine	7367adca165f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.45.0

Open the chart page →

7,505

skypilotgeek-cookbook

0.0.1

3 of 3 See more

skypilot geek-cookbook 0.0.1

3 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	golang.org/x/net@v0.38.0	0.45.0
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	golang.org/x/net@v0.41.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

9,089

torrservergeek-cookbook

1.2.2

1 of 1 See more

torrserver geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
smailkoz/torrserver :1.0.111	7b52d15de8f0	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

3,166

vikunjageek-cookbook

6.2.0

2 of 4 See more

vikunja geek-cookbook 6.2.0

2 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
library/caddy :2.4.2-alpine	fbc51bcf1ab0	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0
vikunja/api :0.17.1	8cba0520bf8c	golang.org/x/net@v0.0.0-20210505024714-0287a6fb4125	0.45.0

Open the chart page →

6,905

webhook-receivergeek-cookbook

0.0.1

1 of 1 See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	golang.org/x/net@v0.15.0	0.45.0

Open the chart page →

1,369

chproxygeneral-helm-charts

0.0.2

1 of 1 See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
contentsquareplatform/chproxy :v1.26.5	24555f22d4be	golang.org/x/net@v0.23.0	0.45.0

Open the chart page →

3,762

kafkagengxiankun-charts

0.2.0

1 of 1 See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

4,559

geonetwork-k8sgeonetwork-k8s

4.2.8

1 of 5 See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	golang.org/x/net@v0.11.0	0.45.0

Open the chart page →

35,007

istiogetindata

1.11.1

2 of 2 See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0

Open the chart page →

16,896

ghostghost

0.1.0

1 of 4 See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
litestream/litestream :0.3	c5a1e1b01916	golang.org/x/net@v0.14.0	0.45.0

Open the chart page →

9,143

gitanagitana

1.4.0

1 of 1 See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/net@v0.0.0-20210929161516-d455829e376d	0.45.0

Open the chart page →

3,479

gitlab-goproxygitlab-goproxy

0.2.2

1 of 1 See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/net@v0.10.0	0.45.0

Open the chart page →

1,332

apid-helpergkarthiks

0.1.4

1 of 1 See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/net@v0.11.0	0.45.0

Open the chart page →

2,616

prometheus-container-resource-exportergkarthiks

0.3.1

1 of 1 See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gkarthics/container-resource-exporter :latest	6799af333e8a	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0

Open the chart page →

2,219

glassflow-etlglassflow

0.5.21

3 of 16 See more

glassflow-etl glassflow 0.5.21

3 of the 16 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0	0.45.0
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/net@v0.28.0	0.45.0
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

12,434

glassflow-operatorglassflow-operator

0.8.5

1 of 3 See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

773

glauthglauth

0.3.17

1 of 2 See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/glauth :2.5	2e6e09fa77dd	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

2,688

gliderglider

0.1.5

1 of 1 See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
nadoo/glider :0.16	38aadefbd607	golang.org/x/net@v0.28.0	0.45.0

Open the chart page →

895

gnp-stackgnp-stack

0.0.5

5 of 14 See more

gnp-stack gnp-stack 0.0.5

5 of the 14 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.32	9289da488b07	golang.org/x/net@v0.38.0	0.45.0
quay.io/prometheus-operator/prometheus-operator :v0.85.0	890b3bb05cf4	golang.org/x/net@v0.43.0	0.45.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.3	3d671cf20a35	golang.org/x/net@v0.44.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

7,725

go-file-servergo-file-server

1.0.0

1 of 2 See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/net@v0.27.0	0.45.0

Open the chart page →

2,222

gorsegorse-io

0.4.2

3 of 4 See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/net@v0.7.0	0.45.0
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/net@v0.7.0	0.45.0
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

4,437

gotwaygotway

0.8.0

1 of 1 See more

gotway gotway 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/gotway/gotway :v0.0.13	7ed73c1979ee	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0

Open the chart page →

1,827

Governify-Bluejaygovernify

0.1.0

1 of 12 See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.45.0

Open the chart page →

22,720

Governify-Falcongovernify

0.1.0

1 of 10 See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.45.0

Open the chart page →

24,508

goweeklygoweekly

2.0.0

1 of 1 See more

goweekly goweekly 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/goweekly :v2.0.0	08dcc130fbea	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.45.0

Open the chart page →

1,230

harborgpg-dev

1.18.3

1 of 8 See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
goharbor/trivy-adapter-photon :v2.14.3	5c6f7162804c	golang.org/x/net@v0.28.0	0.45.0

Open the chart page →

3,460

ingress-nginxgpg-dev

4.9.0

2 of 2 See more

ingress-nginx gpg-dev 4.9.0

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.9.5	b3aba22b1da8	golang.org/x/net@v0.17.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0	0.45.0

Open the chart page →

2,316

jaegergpg-dev

3.3.3

3 of 5 See more

jaeger gpg-dev 3.3.3

3 of the 5 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0	0.45.0
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0	0.45.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0	0.45.0

Open the chart page →

19,390

kubernetes-dashboardgpg-dev

7.5.0

4 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

4 of the 5 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.7.0	60595892c2cf	golang.org/x/net@v0.25.0	0.45.0
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	golang.org/x/net@v0.22.0	0.45.0
kubernetesui/dashboard-metrics-scraper :1.1.1	7747d363c9fe	golang.org/x/net@v0.21.0	0.45.0
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	golang.org/x/net@v0.25.0	0.45.0

Open the chart page →

6,104

metrics-servergpg-dev

3.12.1

1 of 1 See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/net@v0.20.0	0.45.0

Open the chart page →

1,085

Container images carrying it

3,027 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/linuxserver/remmina :version-1.2.0-rcgit.29dfsg-1ubuntu1	05955792e00f	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0	1
ghcr.io/linuxserver/sqlitebrowser :version-3.12.2-02876202105241947ubuntu18.04.1	426e79828c4b	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.45.0	1
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	golang.org/x/net@v0.40.0	0.45.0	1
ghcr.io/loafoe/caddy-token :v0.3.0	528f2174fa2f	golang.org/x/net@v0.27.0	0.45.0	1
ghcr.io/loafoe/go-hello-world :v2.13.0	d3fb171f20e1	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	golang.org/x/net@v0.14.0	0.45.0	1
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/net@v0.6.0	0.45.0	1
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	golang.org/x/net@v0.26.0	0.45.0	1
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	golang.org/x/net@v0.21.0	0.45.0	1
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	golang.org/x/net@v0.42.0	0.45.0	1
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	golang.org/x/net@v0.14.0	0.45.0	1
ghcr.io/loft-sh/vcluster :0.16.4	84f70425f4dd	golang.org/x/net@v0.13.0	0.45.0	1
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/net@v0.21.0	0.45.0	1
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	golang.org/x/net@v0.40.0	0.45.0	1
ghcr.io/loxilb-io/kube-loxilb :latest	6f65e53e252d	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/loxilb-io/loxilb :latest	c7ede1bab641	golang.org/x/net@v0.23.0	0.45.0	1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	golang.org/x/net@v0.26.0	0.45.0	1
ghcr.io/luzilla/dnsbl_exporter :v0.7.0-rc3	d9767232a55e	golang.org/x/net@v0.20.0	0.45.0	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/net@v0.19.0	0.45.0	1
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.45.0	1
ghcr.io/mcman2017/qt-vault :v0.1.2	852edf54c850	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/media-streaming-mesh/msm-admission-webhook :latest	3e811d67189c	golang.org/x/net@v0.33.0	0.45.0	1
ghcr.io/media-streaming-mesh/msm-cni :latest	fe0b89b818a6	golang.org/x/net@v0.33.0	0.45.0	1
ghcr.io/media-streaming-mesh/msm-cp :latest	8cb08fc7010b	golang.org/x/net@v0.26.0	0.45.0	1
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/net@v0.26.0	0.45.0	1
ghcr.io/media-streaming-mesh/msm-nc :latest	296fe4970e38	golang.org/x/net@v0.20.0	0.45.0	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/net@v0.0.0-20191112182307-2180aed22343	0.45.0	1
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller :v0.2.2	3c708e508197	golang.org/x/net@v0.40.0	0.45.0	1
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/net@v0.4.0	0.45.0	1
ghcr.io/middleware-labs/mw-auto-injector :0.1.1	8512248e17e8	golang.org/x/net@v0.26.0	0.45.0	1
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/net@v0.14.0	0.45.0	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/net@v0.32.0	0.45.0	1
ghcr.io/middleware-labs/mw-lang-aggregator :0.1.0	ae6e13970ec2	golang.org/x/net@v0.26.0	0.45.0	1
ghcr.io/middleware-labs/mw-lang-detector :0.1.2	a4776aa2a56b	golang.org/x/net@v0.26.0	0.45.0	1
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
ghcr.io/middleware-labs/odigos-odiglet :middleware-test-0.0.1	03c8c835ecee	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.45.0	1
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
ghcr.io/middleware-labs/vision-odiglet :middleware-test-0.0.3	bce34c98668e	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.45.0	1
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
ghcr.io/miniflux/miniflux :2.2.8	3a11ac10969e	golang.org/x/net@v0.39.0	0.45.0	1
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/net@v0.34.0	0.45.0	1
ghcr.io/mmontes11/echoperator :v0.0.4	a544a71c6e3b	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud :latest	179bee5ef8b2	golang.org/x/net@v0.9.0	0.45.0	1
ghcr.io/mosn/htnn-controller :v0.3.1	c379e66246be	golang.org/x/net@v0.24.0	0.45.0	1
ghcr.io/mschenck/ddns-kubernetes-controller :latest	590d55aab53c	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.45.0	1