CVE-2025-58190

Unscored

Advisory

Published 5 Feb 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,502; of 17,805 indexed, latest versions
Container images: 3,027; deployed by those charts
Fix available: 1 of 1; affected package

Infinite parsing loop in golang.org/x/net

Carried by container images the latest versions of 2,502 of 17,805 indexed charts deploy, on 3,027 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+210 more	0.45.0	3,027

OSV records: GO-2026-4441

Charts affected

2,502 by stars

Chart

Latest

Affected images

Radar Score

csi-qingcloudkubesphere-stable

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

6 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1	0.45.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.45.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0

Open the chart page →

12,449

curvefs-csikubesphere-stable

0.1.0

1 of 3 See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946	0.45.0

Open the chart page →

2,832

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/net@v0.7.0	0.45.0
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/net@v0.8.0	0.45.0
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/net@v0.8.0	0.45.0

Open the chart page →

18,496

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/net@v0.10.0	0.45.0
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

4,135

fpga-operatorkubesphere-stable

2.7.4

2 of 7 See more

fpga-operator kubesphere-stable 2.7.4

2 of the 7 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/net@v0.19.0	0.45.0
inaccel/reef :latest	c967218739f3	golang.org/x/net@v0.19.0	0.45.0

Open the chart page →

5,785

iomeshkubesphere-stable

1.1.0

23 of 25 See more

iomesh kubesphere-stable 1.1.0

23 of the 25 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.45.0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.45.0
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f	0.45.0
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.45.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.45.0
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	golang.org/x/net@v0.8.0	0.45.0
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/net@v0.17.0	0.45.0
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/net@v0.19.0	0.45.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/net@v0.0.0-20191112182307-2180aed22343	0.45.0
iomesh/livenessprobe :v2.8.0	560f01510f99	golang.org/x/net@v0.0.0-20220921203646-d300de134e69	0.45.0
iomesh/localpv-manager :v0.2.0	f13deacac3f4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.45.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/net@v0.17.0	0.45.0
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/net@v0.17.0	0.45.0
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	golang.org/x/net@v0.8.0	0.45.0
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	golang.org/x/net@v0.7.0	0.45.0
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0	0.45.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0	0.45.0
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0	0.45.0
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0	0.45.0

Open the chart page →

49,067

IOMeshkubesphere-stable

1.2.0

23 of 25 See more

IOMesh kubesphere-stable 1.2.0

23 of the 25 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.45.0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.45.0
iomesh/csi-driver :v2.8.0	1a151f602451	golang.org/x/net@v0.8.0	0.45.0
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.45.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.45.0
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	golang.org/x/net@v0.8.0	0.45.0
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/net@v0.19.0	0.45.0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/net@v0.19.0	0.45.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/net@v0.0.0-20191112182307-2180aed22343	0.45.0
iomesh/livenessprobe :v2.8.0	560f01510f99	golang.org/x/net@v0.0.0-20220921203646-d300de134e69	0.45.0
iomesh/localpv-manager :v0.2.0	f13deacac3f4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.45.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/net@v0.17.0	0.45.0
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/net@v0.17.0	0.45.0
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	golang.org/x/net@v0.8.0	0.45.0
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	golang.org/x/net@v0.7.0	0.45.0
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0	0.45.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0	0.45.0
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0	0.45.0
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0	0.45.0

Open the chart page →

46,756

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.45.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.45.0

Open the chart page →

91,441

aws-fsx-csi-driverkubesphere-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.45.0

Open the chart page →

1,595

cni-hostnickubesphere-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0

Open the chart page →

2,444

csi-neonsankubesphere-test

1.3.0

6 of 6 See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1	0.45.0
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/net@v0.0.0-20191112182307-2180aed22343	0.45.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0

Open the chart page →

18,552

csi-qingcloudkubesphere-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1	0.45.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.45.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0

Open the chart page →

12,449

curvefs-csikubesphere-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946	0.45.0

Open the chart page →

2,832

minio-gatewaykubesphere-test

0.1.0

1 of 1 See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	golang.org/x/net@v0.39.0	0.45.0

Open the chart page →

1,201

online-boutiquekubesphere-test

0.1.0

8 of 11 See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.45.0
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.45.0
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.45.0
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7	0.45.0
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.45.0
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7	0.45.0
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.45.0
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.45.0

Open the chart page →

26,091

openelbkubesphere-test

0.2.4

2 of 2 See more

openelb kubesphere-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.45.0
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.45.0

Open the chart page →

4,339

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.45.0

Open the chart page →

2,793

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.45.0

Open the chart page →

2,220

kubestellar-consolekubestellar-console

0.3.41

2 of 2 See more

kubestellar-console kubestellar-console 0.3.41

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/net@v0.34.0	0.45.0
ghcr.io/kubestellar/console :v0.3.41	457cfc94b4da	golang.org/x/net@v0.23.0	0.45.0

Open the chart page →

4,617

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
mavrick1/kubestellar-b :latest	45ca0429a1d4	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

5,070

terraform-controllerkubevela

0.8.0

1 of 1 See more

terraform-controller kubevela 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
oamdev/terraform-controller :v0.8.0	70447f4d360a	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.45.0

Open the chart page →

3,820

vector-controllerkubevela

0.2.3

2 of 2 See more

vector-controller kubevela 0.2.3

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
oamdev/kube-webhook-certgen :v2.4.1	231c423c2b17	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0
oamdev/vector-controller :v0.2.3	9dd8be44ffc9	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.45.0

Open the chart page →

4,819

vela-prismkubevela

1.6.0

3 of 3 See more

vela-prism kubevela 1.6.0

3 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
oamdev/cluster-gateway :v1.4.0	dc97164c4c1f	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0
oamdev/kube-webhook-certgen :v2.3	31e0892f3583	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0
oamdev/vela-prism :v1.6.0	6db6a937647d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0

Open the chart page →

6,107

vela-workflowkubevela

0.7.2

1 of 1 See more

vela-workflow kubevela 0.7.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
oamdev/kube-webhook-certgen :v2.4.1	231c423c2b17	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0

Open the chart page →

1,435

kube-workload-restarterkube-workload-restarter

0.0.4

1 of 1 See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

1,816

kubiya-runnerkubiya-helm-charts

0.9.4

7 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

7 of the 9 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	golang.org/x/net@v0.31.0	0.45.0
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	golang.org/x/net@v0.39.0	0.45.0
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	golang.org/x/net@v0.30.0	0.45.0
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/net@v0.28.0	0.45.0
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	golang.org/x/net@v0.42.0	0.45.0
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	golang.org/x/net@v0.39.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0	0.45.0

Open the chart page →

20,551

lethe-stackkuoss

0.2.3

2 of 3 See more

lethe-stack kuoss 0.2.3

2 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/eventrouter :v0.4.13	00b48beff3ae	golang.org/x/net@v0.38.0	0.45.0
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

1,762

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

3,489

kuperatorkusionstack

0.7.4

1 of 1 See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kusionstack/kuperator :v0.7.4	d2f72ae1d2f2	golang.org/x/net@v0.28.0	0.45.0

Open the chart page →

980

kusionkusionstack

0.14.1

1 of 3 See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	golang.org/x/net@v0.31.0	0.45.0

Open the chart page →

63,724

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

1,882

sample-operatorkusionstack

0.1.2

1 of 1 See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
chaerr/kridge :demo-operator-v0.1.2	66833deec017	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

2,523

dynatrace-operatorkvalitetsit

1.3.0

1 of 1 See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	golang.org/x/net@v0.28.0	0.45.0

Open the chart page →

1,320

krakendkvalitetsit

0.0.3

1 of 1 See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/net@v0.36.0	0.45.0

Open the chart page →

1,519

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.45.0

Open the chart page →

16,732

metadockvalitetsit

0.0.7

2 of 2 See more

metadoc kvalitetsit 0.0.7

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-app :main	e89e351733ad	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.45.0
kvalitetsit/metadoc-web :main	f57e7553f5bd	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.45.0

Open the chart page →

4,035

stakitkvalitetsit

0.3.11

1 of 3 See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kvalitetsit/stakit-frontend :0.2.5	fd5c4f60ef80	golang.org/x/net@v0.0.0-20180906233101-161cd47e91fd	0.45.0

Open the chart page →

7,863

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0

Open the chart page →

8,545

freescoutl4g

0.1.0

1 of 3 See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	golang.org/x/net@v0.21.0	0.45.0

Open the chart page →

5,337

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476	0.45.0

Open the chart page →

26,559

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	golang.org/x/net@v0.39.0	0.45.0

Open the chart page →

2,280

lambdapinglambdaping

1.0.4

1 of 1 See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
udhos/lambdaping :1.0.4	6bd2cf2ac732	golang.org/x/net@v0.33.0	0.45.0

Open the chart page →

1,347

cachelava

1.1.1

1 of 1 See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/net@v0.23.0	0.45.0

Open the chart page →

1,386

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	golang.org/x/net@v0.40.0	0.45.0

Open the chart page →

33,836

metallblectures-k8sinfra

0.10.2

2 of 2 See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.10.2	21164241c045	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0

Open the chart page →

5,406

prometheuslectures-k8sinfra

15.8.5

4 of 6 See more

prometheus lectures-k8sinfra 15.8.5

4 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.45.0
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.45.0

Open the chart page →

9,113

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.45.0

Open the chart page →

3,199

jenkinsleechistest

2.7.1

1 of 2 See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

4,492

prometheusleechistest

11.6.0

3 of 6 See more

prometheus leechistest 11.6.0

3 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.45.0
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.45.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.45.0

Open the chart page →

8,494

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.45.0

Open the chart page →

4,281

Container images carrying it

3,027 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/mskazemi/kubeintellect :2.5.0	b5d7681d1b9d	golang.org/x/net@v0.30.0	0.45.0	1
ghcr.io/muhmmadayan/fake-network-operator :0.1.0	3806b1fd4a4b	golang.org/x/net@v0.28.0	0.45.0	1
ghcr.io/music-assistant/server :2.9.9	50666a6f8d7f	golang.org/x/net@v0.17.0	0.45.0	1
ghcr.io/music-assistant/server :2.8.7	eef3ee7810d0	golang.org/x/net@v0.17.0	0.45.0	1
ghcr.io/mvisonneau/approuvez :v0.1.0	441da62e6cb3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.45.0	1
ghcr.io/nabokihms/events_exporter :latest	68d44646e8b2	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0	1
ghcr.io/nefelim4ag/k8s-ondemand-proxy :0.0.2	078b25d48cf7	golang.org/x/net@v0.13.0	0.45.0	1
ghcr.io/nefelim4ag/k8s-ssh-bastion :0.5.0	4d337e14c80b	golang.org/x/net@v0.23.0	0.45.0	1
ghcr.io/netsoc/iamd :1.1.2	2fe6b69b20d7	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.45.0	1
ghcr.io/netsoc/shhd :0.1.6	0bb44992b62c	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.45.0	1
ghcr.io/netsoc/webspaced :0.5.1	edc238a538a0	golang.org/x/net@v0.0.0-20210716203947-853a461950ff	0.45.0	1
ghcr.io/nicholaswilde/notes :version-ee287b9	ab9bc16465bc	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b	0.45.0	1
ghcr.io/nicholaswilde/olivetin :version-2021-07-19	e1d5c8a01008	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.45.0	1
ghcr.io/nicholaswilde/shiori :version-v1.5.0	e0645abe6777	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.45.0	1
ghcr.io/nicholaswilde/twtxt :version-0.1.1	58736a73ca10	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.45.0	1
ghcr.io/nicholaswilde/wiki :version-900b76a	6c4f261d8f5e	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859	0.45.0	1
ghcr.io/nicholaswilde/writefreely :version-0.13.1	c3c8481b7e56	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.45.0	1
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent :0.1.0	e0c7cf2415f0	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.45.0	1
ghcr.io/nlamirault/bbox_exporter :1.0.0	f5dd1f7794c6	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf	0.45.0	1
ghcr.io/nlamirault/freebox-exporter :1.0.0	2d522b664e12	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.45.0	1
ghcr.io/nnstd/glauth :2.5	2e6e09fa77dd	golang.org/x/net@v0.41.0	0.45.0	1
ghcr.io/nnstd/seaweedfs-operator :1.4	3ebe2fd253f6	golang.org/x/net@v0.42.0	0.45.0	1
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	golang.org/x/net@v0.6.0	0.45.0	1
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	golang.org/x/net@v0.34.0	0.45.0	1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/okteto/buildkit :0.0.0-2026-08-03 :0.0.0-2026-08-17	14527ca5d2a9	golang.org/x/net@v0.35.0	0.45.0	1
ghcr.io/oliverbaehler/cloudflare-tunnel-ingress-controller :0.2.3	0aec31e36d95	golang.org/x/net@v0.37.0	0.45.0	1
ghcr.io/olivetin/olivetin :2025.2.19	a89958921526	golang.org/x/net@v0.33.0	0.45.0	1
ghcr.io/omkar-shelke25/admission-webhook-no-latest :sha-3316545	5976a1d3236a	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/net@v0.14.0	0.45.0	1
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/net@v0.19.0	0.45.0	1
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	golang.org/x/net@v0.17.0	0.45.0	1
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	golang.org/x/net@v0.32.0	0.45.0	1
ghcr.io/openfaasltd/gcp-pubsub-connector :0.0.1	8df071f5b719	golang.org/x/net@v0.35.0	0.45.0	1
ghcr.io/openfaasltd/headroom-controller :v0.0.4	67d587cc2c39	golang.org/x/net@v0.38.0	0.45.0	1
ghcr.io/openfaas/mqtt-connector :0.4.3	3311a30b8fe6	golang.org/x/net@v0.0.0-20200425230154-ff2c4b7c35a0	0.45.0	1
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/net@v0.27.0	0.45.0	1
ghcr.io/openlit/openlit-operator :0.0.2	457bb5ada68b	golang.org/x/net@v0.43.0	0.45.0	1
ghcr.io/openstack-exporter/openstack-exporter :1.7.0	e5146a7dd515	golang.org/x/net@v0.10.0	0.45.0	1
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	golang.org/x/net@v0.25.0	0.45.0	1
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/net@v0.25.0	0.45.0	1
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/net@v0.19.0	0.45.0	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.132.0	5e331c925091	golang.org/x/net@v0.41.0	0.45.0	1
ghcr.io/opnpulse/perses :v2026.4.24	b880da90aa1a	golang.org/x/net@v0.42.0	0.45.0	1
ghcr.io/ot-container-kit/redis-operator/redis-operator :v0.18.0	90bfeb2e0d71	golang.org/x/net@v0.24.0	0.45.0	1
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.45.0	1
ghcr.io/parca-dev/parca :v0.24.2	3776500fde82	golang.org/x/net@v0.43.0	0.45.0	1