CVE-2025-58190

Unscored

Advisory

Published 5 Feb 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,502; of 17,805 indexed, latest versions
Container images: 3,027; deployed by those charts
Fix available: 1 of 1; affected package

Infinite parsing loop in golang.org/x/net

Carried by container images the latest versions of 2,502 of 17,805 indexed charts deploy, on 3,027 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+210 more	0.45.0	3,027

OSV records: GO-2026-4441

Charts affected

2,502 by stars

Chart

Latest

Affected images

Radar Score

opentelemetry-demogpg-dev

0.33.8

8 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	golang.org/x/net@v0.29.0	0.45.0
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	golang.org/x/net@v0.19.0	0.45.0
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/net@v0.31.0	0.45.0
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/net@v0.27.0	0.45.0
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	golang.org/x/net@v0.25.0	0.45.0
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/net@v0.25.0	0.45.0
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/net@v0.19.0	0.45.0
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/net@v0.30.0	0.45.0

Open the chart page →

49,912

prometheus-operator-admission-webhookgpg-dev

0.18.1

2 of 2 See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/admission-webhook :v0.79.2	d4c97a1b2d67	golang.org/x/net@v0.32.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0	0.45.0

Open the chart page →

1,686

grafana-cloud-onboardinggrafana

0.4.7

1 of 5 See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	golang.org/x/net@v0.23.0	0.45.0

Open the chart page →

4,738

grafana-samplinggrafana

1.1.7

2 of 2 See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.11.3	8c7256f412fe	golang.org/x/net@v0.43.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0	0.45.0

Open the chart page →

3,412

mimir-openshift-experimentalgrafana

2.1.0

3 of 4 See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.45.0
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.45.0
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.45.0

Open the chart page →

17,811

pyroscope-monitoringgrafana

0.1.1

5 of 6 See more

pyroscope-monitoring grafana 0.1.1

5 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/otel-lgtm :0.11.10	09d8c3ce4f3a	golang.org/x/net@v0.38.0	0.45.0
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	golang.org/x/net@v0.41.0	0.45.0
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

8,491

prometheusgrafana-uxadax

26.0.1

6 of 6 See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/net@v0.30.0	0.45.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0	0.45.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0	0.45.0

Open the chart page →

5,323

grafregistratiecomponentgrafregistratiecomponent

1.0.0

1 of 3 See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0

Open the chart page →

7,521

grapple-installergrapple-installer

0.3.22

1 of 1 See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

83,462

fasttrackmlgresearch

0.1.0

1 of 1 See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gresearch/fasttrackml :latest	16d1228220fc	golang.org/x/net@v0.24.0	0.45.0

Open the chart page →

1,398

siembolgresearch

0.1.6

1 of 4 See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0

Open the chart page →

14,303

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	golang.org/x/net@v0.27.0	0.45.0

Open the chart page →

2,608

loki-proxygroundcover

0.1.1

1 of 1 See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0

Open the chart page →

2,183

tailscale-subnet-routergtaylor

1.2.1

1 of 1 See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	golang.org/x/net@v0.1.0	0.45.0

Open the chart page →

1,835

minifluxhajowieland

1.0.0

1 of 1 See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.8	3a11ac10969e	golang.org/x/net@v0.39.0	0.45.0

Open the chart page →

1,258

docker-authhalkeye

0.1.1

1 of 1 See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.45.0

Open the chart page →

2,382

matrix-media-repohalkeye

1.0.5

1 of 1 See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0

Open the chart page →

4,463

hawk-envoy-pluginhawk

0.1.0

1 of 4 See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/privacyengineering/consumer :main	73f59c032812	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb	0.45.0

Open the chart page →

65,966

cert-manager-webhook-arvanhbahadorzadeh

0.1.1

1 of 1 See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.45.0

Open the chart page →

3,030

kubernetes-event-exporterhbahadorzadeh

0.1.0

1 of 1 See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	golang.org/x/net@v0.0.0-20200520182314-0ba52f642ac2	0.45.0

Open the chart page →

2,638

heliconehelicone

0.1.42

1 of 14 See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
supabase/gotrue :v2.91.0	7174d551d720	golang.org/x/net@v0.10.0	0.45.0

Open the chart page →

76,907

hello_worldcharthellohelm

0.1.0

1 of 1 See more

hello_worldchart hellohelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
dockerdaemon0901/rolldice :v1	4e5bfe179c7e	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

863

helm-airportshelm-airports

0.1.0

1 of 7 See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

12,680

airports-kafkahelm-airports-dan

0.1.0

1 of 2 See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

4,559

helm-airportshelm-airports-dan

0.1.0

1 of 7 See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

5,586

airports-kafkahelm-airports-kafka

0.1.0

1 of 2 See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

4,559

adguard-homehelm-chart-roei

0.107.59

1 of 2 See more

adguard-home helm-chart-roei 0.107.59

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.59	5d5e3aef39a8	golang.org/x/net@v0.37.0	0.45.0

Open the chart page →

762

logging-stackhelm-charts-alexis-carbillet

0.1.0

5 of 9 See more

logging-stack helm-charts-alexis-carbillet 0.1.0

5 of the 9 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0
grafana/grafana :11.1.0	079600c9517b	golang.org/x/net@v0.26.0	0.45.0
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0
grafana/loki :2.8.2	b1da1d23037e	golang.org/x/net@v0.7.0	0.45.0
grafana/loki-canary :2.6.1	ab2a2569307b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0

Open the chart page →

12,697

monitoring-stackhelm-charts-alexis-carbillet

0.1.0

8 of 11 See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

8 of the 11 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0	0.45.0
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/net@v0.17.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.70.0	e20576b76ffd	golang.org/x/net@v0.19.0	0.45.0
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0	0.45.0
quay.io/prometheus/node-exporter :v1.7.0	4cb2b9019f17	golang.org/x/net@v0.17.0	0.45.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	golang.org/x/net@v0.10.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

10,699

teslamate-apihelm-charts-darox

1.0.1

1 of 1 See more

teslamate-api helm-charts-darox 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
tobiasehlert/teslamateapi :1.20.2	cf09259ad0ea	golang.org/x/net@v0.37.0	0.45.0

Open the chart page →

1,189

aws-ebs-csi-driverhelm-charts-nr

2.17.4

6 of 6 See more

aws-ebs-csi-driver helm-charts-nr 2.17.4

6 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	golang.org/x/net@v0.4.0	0.45.0
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	golang.org/x/net@v0.4.0	0.45.0
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	golang.org/x/net@v0.4.0	0.45.0
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	golang.org/x/net@v0.4.0	0.45.0
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	golang.org/x/net@v0.7.0	0.45.0
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

6,527

cortex-gatewayhelm-charts-nr

0.1.9

1 of 1 See more

cortex-gateway helm-charts-nr 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/net@v0.0.0-20220403103023-749bd193bc2b	0.45.0

Open the chart page →

2,242

dregsyhelm-charts-nr

0.1.5

1 of 1 See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0

Open the chart page →

2,978

hoppscotchhelm-charts-nr

0.3.1

1 of 1 See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

3,480

k8s-cloudwatch-adapterhelm-charts-nr

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter helm-charts-nr 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.45.0

Open the chart page →

2,476

k8s-event-loggerhelm-charts-nr

1.1.9

1 of 1 See more

k8s-event-logger helm-charts-nr 1.1.9

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
maxrocketinternet/k8s-event-logger :2.1	11224534789d	golang.org/x/net@v0.8.0	0.45.0

Open the chart page →

864

kube-benchhelm-charts-nr

0.1.17

1 of 1 See more

kube-bench helm-charts-nr 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0	0.45.0

Open the chart page →

1,624

labelsmanager-controllerhelm-charts-nr

1.0.4

1 of 1 See more

labelsmanager-controller helm-charts-nr 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0

Open the chart page →

2,306

listmonkhelm-charts-nr

0.1.12

1 of 1 See more

listmonk helm-charts-nr 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0

Open the chart page →

2,538

node-local-dnshelm-charts-nr

2.1.4

1 of 1 See more

node-local-dns helm-charts-nr 2.1.4

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

2,303

node-problem-detectorhelm-charts-nr

2.3.17

1 of 1 See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	golang.org/x/net@v0.27.0	0.45.0

Open the chart page →

2,491

weblatehelm-charts-nr

0.3.2

1 of 3 See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859	0.45.0

Open the chart page →

8,023

helmfile-gitops-agenthelmfile-gitops-agent

1.1.96

1 of 3 See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/helmfile/helmfile :v1.7.4	f20e612d5a98	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

2,639

discount-bandithelmforge

2.0.8

1 of 3 See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

30,503

gophishhelmforge

0.1.5

1 of 1 See more

gophish helmforge 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gophish/gophish :0.12.1	8a57cd171999	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3	0.45.0

Open the chart page →

2,820

jenkinshelmforge

1.0.9

1 of 1 See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-lts-jdk21	c1e4c349365f	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

2,545

ryothelmforge

1.0.0

1 of 2 See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	golang.org/x/net@v0.33.0	0.45.0

Open the chart page →

6,154

openbashelm-openbas

1.8.14

3 of 7 See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
openbas/caldera-server :5.1.0	a277796d9724	golang.org/x/net@v0.14.0	0.45.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0	0.45.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0	0.45.0

Open the chart page →

25,500

svacerhelm-svacer

0.6.0

1 of 1 See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ispras/svacer :11-2-0	42aa9fa9f189	golang.org/x/net@v0.37.0	0.45.0

Open the chart page →

6,129

goshimmerhiveroad

0.2.14

1 of 1 See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
iotaledger/goshimmer :v0.8.6	b02a8f77474f	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.45.0

Open the chart page →

2,552

Container images carrying it

3,027 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	golang.org/x/net@v0.19.0	0.45.0	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0	1
quay.io/backube/snapscheduler :3.5.0	35ac95c51780	golang.org/x/net@v0.38.0	0.45.0	1
quay.io/backube/volsync :0.16.0	0d03a6aad575	golang.org/x/net@v0.40.0	0.45.0	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.45.0	1
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/net@v0.7.0	0.45.0	1
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/net@v0.17.0	0.45.0	1
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/net@v0.17.0	0.45.0	1
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	golang.org/x/net@v0.21.0	0.45.0	1
quay.io/brancz/kube-rbac-proxy :v0.18.0	754ab2a723c8	golang.org/x/net@v0.26.0	0.45.0	1
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.45.0	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	golang.org/x/net@v0.19.0	0.45.0	1
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	golang.org/x/net@v0.41.0	0.45.0	1
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	golang.org/x/net@v0.41.0	0.45.0	1
quay.io/cilium/hubble-relay :v1.18.2	6079308ee15e	golang.org/x/net@v0.42.0	0.45.0	1
quay.io/cilium/hubble-ui-backend :v0.13.3	db1454e45dc3	golang.org/x/net@v0.42.0	0.45.0	1
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	golang.org/x/net@v0.19.0	0.45.0	1
quay.io/cilium/operator-generic :v1.18.2	cb4e4ffc5789	golang.org/x/net@v0.42.0	0.45.0	1
quay.io/cilium/tetragon :v1.1.0	96fac2482898	golang.org/x/net@v0.24.0	0.45.0	1
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de	0.45.0	1
quay.io/cilium/tetragon-operator :v0.8.3	4ab8e6604204	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de	0.45.0	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.45.0	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	golang.org/x/net@v0.14.0	0.45.0	1
quay.io/codefresh/dind :3.0.25	0885ab519dac	golang.org/x/net@v0.43.0	0.45.0	1
quay.io/coreos/etcd :v3.5.11	842975891182	golang.org/x/net@v0.17.0	0.45.0	1
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/net@v0.23.0	0.45.0	1
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.45.0	1
quay.io/ddn/exascaler-csi-file-driver :v2.2.6	fe2e2e5a2751	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.45.0	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
quay.io/everythingascode/apishift-backend :v0.3.0	14ff275b2e61	golang.org/x/net@v0.25.0	0.45.0	1
quay.io/evryfs/github-actions-runner-operator :v0.11.1	6b084e0bd082	golang.org/x/net@v0.12.0	0.45.0	1
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	golang.org/x/net@v0.33.0	0.45.0	1
quay.io/fiware/dsba-pdp :0.3.2	0cca71497e9e	golang.org/x/net@v0.1.0	0.45.0	1
quay.io/fiware/envoy-configmap-updater :0.4.3	9eabc3f3e1e2	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0	1
quay.io/fiware/vcverifier :6.21.2	51ed1e979094	golang.org/x/net@v0.38.0	0.45.0	1
quay.io/fiware/vcverifier :2.0.1	cd36290dc849	golang.org/x/net@v0.8.0	0.45.0	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	golang.org/x/net@v0.8.0	0.45.0	1
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/net@v0.5.0	0.45.0	1
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/net@v0.5.0	0.45.0	1
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/net@v0.5.0	0.45.0	1
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	golang.org/x/net@v0.5.0	0.45.0	1
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	golang.org/x/net@v0.11.0	0.45.0	1
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.45.0	1
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/net@v0.11.0	0.45.0	1
quay.io/groundcover/caretta :v0.0.16	ed8f5118e3a4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.45.0	1
quay.io/groundcover/victoria-metrics :v1.85.3	80ddeb90d18d	golang.org/x/net@v0.4.0	0.45.0	1
quay.io/gustavojst/kube-botblocker :0.2.0	4de059bb32ac	golang.org/x/net@v0.41.0	0.45.0	1