CVE-2025-58190

Unscored

Advisory

Published 5 Feb 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,502; of 17,805 indexed, latest versions
Container images: 3,027; deployed by those charts
Fix available: 1 of 1; affected package

Infinite parsing loop in golang.org/x/net

Carried by container images the latest versions of 2,502 of 17,805 indexed charts deploy, on 3,027 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+210 more	0.45.0	3,027

OSV records: GO-2026-4441

Charts affected

2,502 by stars

Chart

Latest

Affected images

Radar Score

opentelemetry-demogpg-dev

0.33.8

8 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	golang.org/x/net@v0.29.0	0.45.0
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	golang.org/x/net@v0.19.0	0.45.0
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/net@v0.31.0	0.45.0
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/net@v0.27.0	0.45.0
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	golang.org/x/net@v0.25.0	0.45.0
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/net@v0.25.0	0.45.0
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/net@v0.19.0	0.45.0
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/net@v0.30.0	0.45.0

Open the chart page →

49,912

prometheus-operator-admission-webhookgpg-dev

0.18.1

2 of 2 See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/admission-webhook :v0.79.2	d4c97a1b2d67	golang.org/x/net@v0.32.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0	0.45.0

Open the chart page →

1,686

grafana-cloud-onboardinggrafana

0.4.7

1 of 5 See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	golang.org/x/net@v0.23.0	0.45.0

Open the chart page →

4,738

grafana-samplinggrafana

1.1.7

2 of 2 See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.11.3	8c7256f412fe	golang.org/x/net@v0.43.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0	0.45.0

Open the chart page →

3,412

mimir-openshift-experimentalgrafana

2.1.0

3 of 4 See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.45.0
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.45.0
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.45.0

Open the chart page →

17,811

pyroscope-monitoringgrafana

0.1.1

5 of 6 See more

pyroscope-monitoring grafana 0.1.1

5 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/otel-lgtm :0.11.10	09d8c3ce4f3a	golang.org/x/net@v0.38.0	0.45.0
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	golang.org/x/net@v0.41.0	0.45.0
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

8,491

prometheusgrafana-uxadax

26.0.1

6 of 6 See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/net@v0.30.0	0.45.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0	0.45.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0	0.45.0

Open the chart page →

5,323

grafregistratiecomponentgrafregistratiecomponent

1.0.0

1 of 3 See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0

Open the chart page →

7,521

grapple-installergrapple-installer

0.3.22

1 of 1 See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

83,462

fasttrackmlgresearch

0.1.0

1 of 1 See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gresearch/fasttrackml :latest	16d1228220fc	golang.org/x/net@v0.24.0	0.45.0

Open the chart page →

1,398

siembolgresearch

0.1.6

1 of 4 See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0

Open the chart page →

14,303

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	golang.org/x/net@v0.27.0	0.45.0

Open the chart page →

2,608

loki-proxygroundcover

0.1.1

1 of 1 See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0

Open the chart page →

2,183

tailscale-subnet-routergtaylor

1.2.1

1 of 1 See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	golang.org/x/net@v0.1.0	0.45.0

Open the chart page →

1,835

minifluxhajowieland

1.0.0

1 of 1 See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/miniflux/miniflux :2.2.8	3a11ac10969e	golang.org/x/net@v0.39.0	0.45.0

Open the chart page →

1,258

docker-authhalkeye

0.1.1

1 of 1 See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.45.0

Open the chart page →

2,382

matrix-media-repohalkeye

1.0.5

1 of 1 See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0

Open the chart page →

4,463

hawk-envoy-pluginhawk

0.1.0

1 of 4 See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/privacyengineering/consumer :main	73f59c032812	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb	0.45.0

Open the chart page →

65,966

cert-manager-webhook-arvanhbahadorzadeh

0.1.1

1 of 1 See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.45.0

Open the chart page →

3,030

kubernetes-event-exporterhbahadorzadeh

0.1.0

1 of 1 See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	golang.org/x/net@v0.0.0-20200520182314-0ba52f642ac2	0.45.0

Open the chart page →

2,638

heliconehelicone

0.1.42

1 of 14 See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
supabase/gotrue :v2.91.0	7174d551d720	golang.org/x/net@v0.10.0	0.45.0

Open the chart page →

76,907

hello_worldcharthellohelm

0.1.0

1 of 1 See more

hello_worldchart hellohelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
dockerdaemon0901/rolldice :v1	4e5bfe179c7e	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

863

helm-airportshelm-airports

0.1.0

1 of 7 See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

12,680

airports-kafkahelm-airports-dan

0.1.0

1 of 2 See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

4,559

helm-airportshelm-airports-dan

0.1.0

1 of 7 See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

5,586

airports-kafkahelm-airports-kafka

0.1.0

1 of 2 See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

4,559

adguard-homehelm-chart-roei

0.107.59

1 of 2 See more

adguard-home helm-chart-roei 0.107.59

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.59	5d5e3aef39a8	golang.org/x/net@v0.37.0	0.45.0

Open the chart page →

762

logging-stackhelm-charts-alexis-carbillet

0.1.0

5 of 9 See more

logging-stack helm-charts-alexis-carbillet 0.1.0

5 of the 9 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0
grafana/grafana :11.1.0	079600c9517b	golang.org/x/net@v0.26.0	0.45.0
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0
grafana/loki :2.8.2	b1da1d23037e	golang.org/x/net@v0.7.0	0.45.0
grafana/loki-canary :2.6.1	ab2a2569307b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0

Open the chart page →

12,697

monitoring-stackhelm-charts-alexis-carbillet

0.1.0

8 of 11 See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

8 of the 11 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0	0.45.0
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/net@v0.17.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.70.0	e20576b76ffd	golang.org/x/net@v0.19.0	0.45.0
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0	0.45.0
quay.io/prometheus/node-exporter :v1.7.0	4cb2b9019f17	golang.org/x/net@v0.17.0	0.45.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	golang.org/x/net@v0.10.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

10,699

teslamate-apihelm-charts-darox

1.0.1

1 of 1 See more

teslamate-api helm-charts-darox 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
tobiasehlert/teslamateapi :1.20.2	cf09259ad0ea	golang.org/x/net@v0.37.0	0.45.0

Open the chart page →

1,189

aws-ebs-csi-driverhelm-charts-nr

2.17.4

6 of 6 See more

aws-ebs-csi-driver helm-charts-nr 2.17.4

6 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver :v1.16.1	1564359e1e0e	golang.org/x/net@v0.4.0	0.45.0
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher :v4.1.0-eks-1-25-latest	701eea03388c	golang.org/x/net@v0.4.0	0.45.0
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner :v3.4.0-eks-1-25-latest	460ee1a59fea	golang.org/x/net@v0.4.0	0.45.0
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer :v1.7.0-eks-1-25-latest	e711da25e7a0	golang.org/x/net@v0.4.0	0.45.0
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe :v2.9.0-eks-1-25-latest	8a305e162caa	golang.org/x/net@v0.7.0	0.45.0
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar :v2.7.0-eks-1-25-latest	f4345e67df8f	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

6,527

cortex-gatewayhelm-charts-nr

0.1.9

1 of 1 See more

cortex-gateway helm-charts-nr 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/net@v0.0.0-20220403103023-749bd193bc2b	0.45.0

Open the chart page →

2,242

dregsyhelm-charts-nr

0.1.5

1 of 1 See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.45.0

Open the chart page →

2,978

hoppscotchhelm-charts-nr

0.3.1

1 of 1 See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

3,480

k8s-cloudwatch-adapterhelm-charts-nr

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter helm-charts-nr 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.45.0

Open the chart page →

2,476

k8s-event-loggerhelm-charts-nr

1.1.9

1 of 1 See more

k8s-event-logger helm-charts-nr 1.1.9

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
maxrocketinternet/k8s-event-logger :2.1	11224534789d	golang.org/x/net@v0.8.0	0.45.0

Open the chart page →

864

kube-benchhelm-charts-nr

0.1.17

1 of 1 See more

kube-bench helm-charts-nr 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0	0.45.0

Open the chart page →

1,624

labelsmanager-controllerhelm-charts-nr

1.0.4

1 of 1 See more

labelsmanager-controller helm-charts-nr 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0

Open the chart page →

2,306

listmonkhelm-charts-nr

0.1.12

1 of 1 See more

listmonk helm-charts-nr 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0

Open the chart page →

2,538

node-local-dnshelm-charts-nr

2.1.4

1 of 1 See more

node-local-dns helm-charts-nr 2.1.4

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	golang.org/x/net@v0.17.0	0.45.0

Open the chart page →

2,303

node-problem-detectorhelm-charts-nr

2.3.17

1 of 1 See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	golang.org/x/net@v0.27.0	0.45.0

Open the chart page →

2,491

weblatehelm-charts-nr

0.3.2

1 of 3 See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859	0.45.0

Open the chart page →

8,023

helmfile-gitops-agenthelmfile-gitops-agent

1.1.96

1 of 3 See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/helmfile/helmfile :v1.7.4	f20e612d5a98	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

2,639

discount-bandithelmforge

2.0.8

1 of 3 See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

30,503

gophishhelmforge

0.1.5

1 of 1 See more

gophish helmforge 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gophish/gophish :0.12.1	8a57cd171999	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3	0.45.0

Open the chart page →

2,820

jenkinshelmforge

1.0.9

1 of 1 See more

jenkins helmforge 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-lts-jdk21	c1e4c349365f	golang.org/x/net@v0.38.0	0.45.0

Open the chart page →

2,545

ryothelmforge

1.0.0

1 of 2 See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	golang.org/x/net@v0.33.0	0.45.0

Open the chart page →

6,154

openbashelm-openbas

1.8.14

3 of 7 See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
openbas/caldera-server :5.1.0	a277796d9724	golang.org/x/net@v0.14.0	0.45.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0	0.45.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0	0.45.0

Open the chart page →

25,500

svacerhelm-svacer

0.6.0

1 of 1 See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ispras/svacer :11-2-0	42aa9fa9f189	golang.org/x/net@v0.37.0	0.45.0

Open the chart page →

6,129

goshimmerhiveroad

0.2.14

1 of 1 See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
iotaledger/goshimmer :v0.8.6	b02a8f77474f	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.45.0

Open the chart page →

2,552

Container images carrying it

3,027 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	golang.org/x/net@v0.37.0	0.45.0	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0	1
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.45.0	1
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.45.0	1
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.45.0	1
quay.io/influxdb/telegraf-operator :v1.3.11	eec10ef37cc3	golang.org/x/net@v0.17.0	0.45.0	1
quay.io/jcluppnow/vpa-manager :0.6.4	e459d2fba277	golang.org/x/net@v0.27.0	0.45.0	1
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0	1
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	golang.org/x/net@v0.29.0	0.45.0	1
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	golang.org/x/net@v0.24.0	0.45.0	1
quay.io/jetstack/cert-manager-cainjector :v1.18.2	af59e01ad975	golang.org/x/net@v0.38.0	0.45.0	1
quay.io/jetstack/cert-manager-cainjector :v1.10.1	b5657161d2c2	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9	0.45.0	1
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
quay.io/jetstack/cert-manager-cainjector :v1.12.0	e0a5b06b231c	golang.org/x/net@v0.9.0	0.45.0	1
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
quay.io/jetstack/cert-manager-controller :v1.10.1	1143471c90db	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9	0.45.0	1
quay.io/jetstack/cert-manager-controller :v1.12.0	4a9d0264055b	golang.org/x/net@v0.9.0	0.45.0	1
quay.io/jetstack/cert-manager-controller :v1.18.2	81316365dc0b	golang.org/x/net@v0.38.0	0.45.0	1
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	golang.org/x/net@v0.24.0	0.45.0	1
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	golang.org/x/net@v0.29.0	0.45.0	1
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	golang.org/x/net@v0.17.0	0.45.0	1
quay.io/jetstack/cert-manager-ctl :v1.8.0	595c548dee6f	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
quay.io/jetstack/cert-manager-ctl :v1.12.0	8d54fe9d0c0d	golang.org/x/net@v0.9.0	0.45.0	1
quay.io/jetstack/cert-manager-startupapicheck :v1.14.5	0f5b104bdd1b	golang.org/x/net@v0.24.0	0.45.0	1
quay.io/jetstack/cert-manager-startupapicheck :v1.18.2	1075e0974151	golang.org/x/net@v0.38.0	0.45.0	1
quay.io/jetstack/cert-manager-startupapicheck :v1.16.1	b4a5e42f6dbf	golang.org/x/net@v0.29.0	0.45.0	1
quay.io/jetstack/cert-manager-webhook :v1.10.1	64121721c665	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9	0.45.0	1
quay.io/jetstack/cert-manager-webhook :v1.16.1	6edf44244b2a	golang.org/x/net@v0.29.0	0.45.0	1
quay.io/jetstack/cert-manager-webhook :v1.18.2	9431f0d8b510	golang.org/x/net@v0.38.0	0.45.0	1
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
quay.io/jetstack/cert-manager-webhook :v1.12.0	ec4306b243d9	golang.org/x/net@v0.9.0	0.45.0	1
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	golang.org/x/net@v0.24.0	0.45.0	1
quay.io/jetstack/cert-manager-webhook :v1.8.0	fd798a5a773e	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
quay.io/jetstack/kube-oidc-proxy :v0.3.0	e045b26eb6df	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0	1
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0	1
quay.io/keycloak/keycloak-operator :19.0.2-legacy	15fa0ed662b1	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0	1
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0	1
quay.io/kiali/kiali :v1.89.3	0dcdb1c1e747	golang.org/x/net@v0.24.0	0.45.0	1
quay.io/kiali/kiali-operator :v2.32.0	96c5264d54ab	golang.org/x/net@v0.33.0	0.45.0	1
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0	1
quay.io/kube-ops/loki :2.2.1	4fbd63194674	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.45.0	1
quay.io/kube-ops/promtail :2.2.1	34de6387233b	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.45.0	1
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	golang.org/x/net@v0.19.0	0.45.0	1
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/net@v0.8.0	0.45.0	1
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/net@v0.9.0	0.45.0	1
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0	1
quay.io/kubernetes-multicluster/kubefed :v0.10.0	c4635c95730e	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.45.0	1