CVE-2025-58190

Unscored

Advisory

Published 5 Feb 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,502; of 17,805 indexed, latest versions
Container images: 3,027; deployed by those charts
Fix available: 1 of 1; affected package

Infinite parsing loop in golang.org/x/net

Carried by container images the latest versions of 2,502 of 17,805 indexed charts deploy, on 3,027 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+210 more	0.45.0	3,027

OSV records: GO-2026-4441

Charts affected

2,502 by stars

Chart

Latest

Affected images

Radar Score

galoy-depsgaloymoney

0.10.20

8 of 9 See more

galoy-deps galoymoney 0.10.20

8 of the 9 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.45.0
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0	0.45.0
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0	0.45.0
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

12,011

lndgaloymoney

0.10.6

1 of 3 See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0	0.45.0

Open the chart page →

2,162

monitoringgaloymoney

0.12.21

5 of 6 See more

monitoring galoymoney 0.12.21

5 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0	0.45.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

5,337

galoygaloymoney2

0.34.7

4 of 24 See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.45.0
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0	0.45.0
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0	0.45.0
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0	0.45.0

Open the chart page →

8,731

galoy-depsgaloymoney2

0.10.20

8 of 9 See more

galoy-deps galoymoney2 0.10.20

8 of the 9 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.45.0
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0	0.45.0
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0	0.45.0
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

12,011

lndgaloymoney2

0.10.6

1 of 3 See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0	0.45.0

Open the chart page →

2,162

monitoringgaloymoney2

0.12.21

5 of 6 See more

monitoring galoymoney2 0.12.21

5 of the 6 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0	0.45.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.45.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.45.0

Open the chart page →

5,337

autobrrgeek-cookbook

1.1.3

1 of 1 See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.45.0

Open the chart page →

2,237

dendritegeek-cookbook

6.4.0

1 of 1 See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.45.0

Open the chart page →

2,144

gatusgeek-cookbook

1.1.2

1 of 1 See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0

Open the chart page →

1,882

gonicgeek-cookbook

6.4.2

1 of 1 See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.45.0

Open the chart page →

3,525

gotifygeek-cookbook

1.2.2

1 of 1 See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gotify/server :2.1.4	09c79bc1e403	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.45.0

Open the chart page →

3,133

maddygeek-cookbook

3.2.0

1 of 1 See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/net@v0.0.0-20211011170408-caeb26a5c8c0	0.45.0

Open the chart page →

2,631

minifluxgeek-cookbook

5.2.0

1 of 2 See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/net@v0.0.0-20210916014120-12bc252f5db8	0.45.0

Open the chart page →

2,431

navidromegeek-cookbook

6.4.2

1 of 1 See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0

Open the chart page →

3,598

owncloud-ocisgeek-cookbook

2.4.2

1 of 1 See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.45.0

Open the chart page →

3,244

photoprismgeek-cookbook

7.2.0

1 of 1 See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
photoprism/photoprism :220629-jammy	2954334adbda	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.45.0

Open the chart page →

19,607

pod-gatewaygeek-cookbook

5.6.2

1 of 2 See more

pod-gateway geek-cookbook 5.6.2

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/gateway-admision-controller :v3.5.0	175512bb3f61	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.45.0

Open the chart page →

2,361

pod-gateway-settergeek-cookbook

1.0.0

1 of 1 See more

pod-gateway-setter geek-cookbook 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/gateway-admision-controller :v2.0.0	0d6d0df98fe4	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0

Open the chart page →

1,642

rtsp-to-webgeek-cookbook

2.2.2

1 of 1 See more

rtsp-to-web geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

1,467

searxgeek-cookbook

5.6.2

2 of 4 See more

searx geek-cookbook 5.6.2

2 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
dalf/morty :latest	248a4849c350	golang.org/x/net@v0.0.0-20220421235706-1d1ef9303861	0.45.0
library/caddy :2.2.0-alpine	7367adca165f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.45.0

Open the chart page →

7,505

skypilotgeek-cookbook

0.0.1

3 of 3 See more

skypilot geek-cookbook 0.0.1

3 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	golang.org/x/net@v0.38.0	0.45.0
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	golang.org/x/net@v0.41.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

9,089

torrservergeek-cookbook

1.2.2

1 of 1 See more

torrserver geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
smailkoz/torrserver :1.0.111	7b52d15de8f0	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

3,166

vikunjageek-cookbook

6.2.0

2 of 4 See more

vikunja geek-cookbook 6.2.0

2 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
library/caddy :2.4.2-alpine	fbc51bcf1ab0	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0
vikunja/api :0.17.1	8cba0520bf8c	golang.org/x/net@v0.0.0-20210505024714-0287a6fb4125	0.45.0

Open the chart page →

6,905

webhook-receivergeek-cookbook

0.0.1

1 of 1 See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	golang.org/x/net@v0.15.0	0.45.0

Open the chart page →

1,369

chproxygeneral-helm-charts

0.0.2

1 of 1 See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
contentsquareplatform/chproxy :v1.26.5	24555f22d4be	golang.org/x/net@v0.23.0	0.45.0

Open the chart page →

3,762

kafkagengxiankun-charts

0.2.0

1 of 1 See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0

Open the chart page →

4,559

geonetwork-k8sgeonetwork-k8s

4.2.8

1 of 5 See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	golang.org/x/net@v0.11.0	0.45.0

Open the chart page →

35,007

istiogetindata

1.11.1

2 of 2 See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.45.0

Open the chart page →

16,896

ghostghost

0.1.0

1 of 4 See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
litestream/litestream :0.3	c5a1e1b01916	golang.org/x/net@v0.14.0	0.45.0

Open the chart page →

9,143

gitanagitana

1.4.0

1 of 1 See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/net@v0.0.0-20210929161516-d455829e376d	0.45.0

Open the chart page →

3,479

gitlab-goproxygitlab-goproxy

0.2.2

1 of 1 See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/net@v0.10.0	0.45.0

Open the chart page →

1,332

apid-helpergkarthiks

0.1.4

1 of 1 See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/net@v0.11.0	0.45.0

Open the chart page →

2,616

prometheus-container-resource-exportergkarthiks

0.3.1

1 of 1 See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
gkarthics/container-resource-exporter :latest	6799af333e8a	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0

Open the chart page →

2,219

glassflow-etlglassflow

0.5.21

3 of 16 See more

glassflow-etl glassflow 0.5.21

3 of the 16 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0	0.45.0
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/net@v0.28.0	0.45.0
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

12,434

glassflow-operatorglassflow-operator

0.8.5

1 of 3 See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/net@v0.43.0	0.45.0

Open the chart page →

773

glauthglauth

0.3.17

1 of 2 See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/glauth :2.5	2e6e09fa77dd	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

2,688

gliderglider

0.1.5

1 of 1 See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
nadoo/glider :0.16	38aadefbd607	golang.org/x/net@v0.28.0	0.45.0

Open the chart page →

895

gnp-stackgnp-stack

0.0.5

5 of 14 See more

gnp-stack gnp-stack 0.0.5

5 of the 14 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.32	9289da488b07	golang.org/x/net@v0.38.0	0.45.0
quay.io/prometheus-operator/prometheus-operator :v0.85.0	890b3bb05cf4	golang.org/x/net@v0.43.0	0.45.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.3	3d671cf20a35	golang.org/x/net@v0.44.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/net@v0.41.0	0.45.0

Open the chart page →

7,725

go-file-servergo-file-server

1.0.0

1 of 2 See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/net@v0.27.0	0.45.0

Open the chart page →

2,222

gorsegorse-io

0.4.2

3 of 4 See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/net@v0.7.0	0.45.0
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/net@v0.7.0	0.45.0
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/net@v0.7.0	0.45.0

Open the chart page →

4,437

gotwaygotway

0.8.0

1 of 1 See more

gotway gotway 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
ghcr.io/gotway/gotway :v0.0.13	7ed73c1979ee	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0

Open the chart page →

1,827

Governify-Bluejaygovernify

0.1.0

1 of 12 See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.45.0

Open the chart page →

22,720

Governify-Falcongovernify

0.1.0

1 of 10 See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.45.0

Open the chart page →

24,508

goweeklygoweekly

2.0.0

1 of 1 See more

goweekly goweekly 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/goweekly :v2.0.0	08dcc130fbea	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.45.0

Open the chart page →

1,230

harborgpg-dev

1.18.3

1 of 8 See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
goharbor/trivy-adapter-photon :v2.14.3	5c6f7162804c	golang.org/x/net@v0.28.0	0.45.0

Open the chart page →

3,460

ingress-nginxgpg-dev

4.9.0

2 of 2 See more

ingress-nginx gpg-dev 4.9.0

2 of the 2 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.9.5	b3aba22b1da8	golang.org/x/net@v0.17.0	0.45.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0	0.45.0

Open the chart page →

2,316

jaegergpg-dev

3.3.3

3 of 5 See more

jaeger gpg-dev 3.3.3

3 of the 5 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0	0.45.0
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0	0.45.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0	0.45.0

Open the chart page →

19,390

kubernetes-dashboardgpg-dev

7.5.0

4 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

4 of the 5 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.7.0	60595892c2cf	golang.org/x/net@v0.25.0	0.45.0
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	golang.org/x/net@v0.22.0	0.45.0
kubernetesui/dashboard-metrics-scraper :1.1.1	7747d363c9fe	golang.org/x/net@v0.21.0	0.45.0
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	golang.org/x/net@v0.25.0	0.45.0

Open the chart page →

6,104

metrics-servergpg-dev

3.12.1

1 of 1 See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2025-58190.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/net@v0.20.0	0.45.0

Open the chart page →

1,085

Container images carrying it

3,027 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.45.0	1
quay.io/spotahome/redis-operator :latest	8c772955184e	golang.org/x/net@v0.8.0	0.45.0	1
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	golang.org/x/net@v0.10.0	0.45.0	1
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	golang.org/x/net@v0.41.0	0.45.0	1
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.45.0	1
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/net@v0.26.0	0.45.0	1
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0	1
quay.io/tigera/operator :v1.15.1	c6591da87aa8	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.45.0	1
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.45.0	1
quay.io/uswitch/kiam :v4.0	be3a5846922d	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.45.0	1
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	golang.org/x/net@v0.5.0	0.45.0	1
quay.io/youniqx/heist :v1.1.209	c43b3a9d98ae	golang.org/x/net@v0.28.0	0.45.0	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.45.0	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.45.0	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.45.0	1
registry.gitlab.com/av1o/okd-webhook :v0.1.0	28c3e5eb2650	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.45.0	1
registry.gitlab.com/bitspur/rock8s/easy-olm-operator :0.0.1	779454fea06c	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.45.0	1
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	golang.org/x/net@v0.13.0	0.45.0	1
registry.gitlab.com/bitspur/rock8s/resource-binding-operator :0.1.0	63cf51392ce7	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.45.0	1
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	golang.org/x/net@v0.0.0-20180811021610-c39426892332	0.45.0	1
registry.gitlab.com/dyff/dyff-operator :0.24.20	e9ca51627601	golang.org/x/net@v0.44.0	0.45.0	1
registry.gitlab.com/dyff/workflows-informer :0.4.4	bfbadc49635d	golang.org/x/net@v0.17.0	0.45.0	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend :1.0.31	c7afac3446d6	golang.org/x/net@v0.38.0	0.45.0	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	golang.org/x/net@v0.38.0	0.45.0	1
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup :latest	4369f3ba1d9a	golang.org/x/net@v0.43.0	0.45.0	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.45.0	1
registry.gitlab.com/lenitech/k8s-operator/keycloak-client :v0.6.1	9065cdd80035	golang.org/x/net@v0.38.0	0.45.0	1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	golang.org/x/net@v0.14.0	0.45.0	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.45.0	1
registry.gitlab.com/xrow-public/ci-tools/kubectl :main	9357cfeef63c	golang.org/x/net@v0.38.0	0.45.0	1
registry.gitlab.com/xrow-public/ci-tools/tools :main	9b9d1ed86b6a	golang.org/x/net@v0.40.0	0.45.0	1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	golang.org/x/net@v0.41.0	0.45.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	golang.org/x/net@v0.38.0	0.45.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.34.0	7b172f42533c	golang.org/x/net@v0.38.0	0.45.0	1
registry.k8s.io/autoscaling/vpa-admission-controller :1.4.1	71d817780aa9	golang.org/x/net@v0.39.0	0.45.0	1
registry.k8s.io/autoscaling/vpa-admission-controller :1.5.1	9928d59477fb	golang.org/x/net@v0.43.0	0.45.0	1
registry.k8s.io/autoscaling/vpa-recommender :1.4.1	40b6d76e8526	golang.org/x/net@v0.39.0	0.45.0	1
registry.k8s.io/autoscaling/vpa-recommender :1.5.1	e629c61b75eb	golang.org/x/net@v0.43.0	0.45.0	1
registry.k8s.io/autoscaling/vpa-updater :1.4.1	8ebf269779c1	golang.org/x/net@v0.39.0	0.45.0	1
registry.k8s.io/autoscaling/vpa-updater :1.5.1	cba2aa4b3239	golang.org/x/net@v0.43.0	0.45.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/net@v0.13.0	0.45.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	golang.org/x/net@v0.32.0	0.45.0	1
registry.k8s.io/csi-vsphere/driver :v3.5.0	4bb8350a5a62	golang.org/x/net@v0.38.0	0.45.0	1
registry.k8s.io/csi-vsphere/driver :v3.4.0	f5349a8ae3f3	golang.org/x/net@v0.33.0	0.45.0	1
registry.k8s.io/csi-vsphere/syncer :v3.4.0	179ebf195595	golang.org/x/net@v0.33.0	0.45.0	1
registry.k8s.io/csi-vsphere/syncer :v3.5.0	bb88468fff2a	golang.org/x/net@v0.38.0	0.45.0	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	golang.org/x/net@v0.17.0	0.45.0	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	golang.org/x/net@v0.17.0	0.45.0	1