CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,997; of 17,781 indexed, latest versions
Container images: 3,655; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 2,997 of 17,781 indexed charts deploy, on 3,655 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+219 more	0.55.0	3,655

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

2,997 by stars

Chart

Latest

Affected images

Radar Score

openstack-cinder-csicloud-provider-openstack

2.36.5

7 of 7 See more

openstack-cinder-csi cloud-provider-openstack 2.36.5

7 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/cinder-csi-plugin :v1.36.0	78adaeb154c7	golang.org/x/net@v0.53.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	golang.org/x/net@v0.40.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	golang.org/x/net@v0.40.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.4.0	c7e0a3718832	golang.org/x/net@v0.39.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

3,604

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

1,513

dependabot-gitlabdependabot-gitlab

6.3.0

1 of 3 See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
andrcuns/dependabot-gitlab :7.7.0-alpha.1	43060f159f4c	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

4,556

devtron-operatordevtron

0.23.3

8 of 11 See more

devtron-operator devtron 0.23.3

8 of the 11 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420	0.55.0
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0	0.55.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0

Open the chart page →

32,902

drone-runner-kubedrone

0.1.10

1 of 1 See more

drone-runner-kube drone 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

2,067

gatekeepergogatekeeper

0.1.64

1 of 1 See more

gatekeeper gogatekeeper 0.1.64

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/gogatekeeper/gatekeeper :4.9.0	dcf583aba224	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

553

hcloud-csihcloud

2.23.0

5 of 6 See more

hcloud-csi hcloud 2.23.0

5 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/net@v0.47.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/net@v0.51.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.18.0	c4cc074199c0	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

2,630

envoy-gatewayhelmforge

2.1.0

1 of 3 See more

envoy-gateway helmforge 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
helmforge/kubectl :1.35.3	c3f97e954c47	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

2,379

ilumilum

6.7.3

7 of 19 See more

ilum ilum 6.7.3

7 of the 19 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0	0.55.0
bitnamilegacy/minio :2025.3.12-debian-12-r0	ba9f3b4b0b00	golang.org/x/net@v0.37.0	0.55.0
bitnamisecure/gitdigest-pinned	72ae5bd9715f	golang.org/x/net@v0.38.0	0.55.0
gitea/gitea :1.22.3	76f516a1a8c2	golang.org/x/net@v0.28.0	0.55.0
ilum/api :6.7.3	624fd09528c8	golang.org/x/net@v0.37.0	0.55.0
ilum/mongodb :6.0.5	42b6d774c37d	golang.org/x/net@v0.8.0	0.55.0
minio/mc :RELEASE.2025-04-16T18-13-26Z	aead63c77f9d	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

23,228

kube-greenkube-green-official

0.7.1

1 of 1 See more

kube-green kube-green-official 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubegreen/kube-green :0.7.1	2dc0f0a6034c	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

493

temporallemontech

0.37.0

5 of 13 See more

temporal lemontech 0.37.0

5 of the 13 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/net@v0.7.0	0.55.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.55.0

Open the chart page →

14,893

litmuslitmuschaos

3.30.0

2 of 6 See more

litmus litmuschaos 3.30.0

2 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :8.0.13-debian-12-r0	2579e968033e	golang.org/x/net@v0.40.0	0.55.0
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

7,007

netris-controllernetrisai

2.8.2

3 of 14 See more

netris-controller netrisai 2.8.2

3 of the 14 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.55.0
haproxytech/haproxy-alpine :2.8.0	8951be4b4e1c	golang.org/x/net@v0.11.0	0.55.0
netrisai/controller-grpc :4.6.0.007	53178bf173c2	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

30,326

nfs-server-provisionernfs-ganesha-server-and-external-provisioner

1.8.0

1 of 1 See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0

Open the chart page →

2,315

nuclionuclio

0.23.8

1 of 2 See more

nuclio nuclio 0.23.8

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/nuclio/dashboard :1.17.8-amd64	b5f5bd4efbee	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

963

syftopenmined

0.9.5

2 of 6 See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/traefik :v2.11.0	0a5157f742d2	golang.org/x/net@v0.20.0	0.55.0
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/net@v0.21.0	0.55.0

Open the chart page →

17,245

spring-petclinic-cloudplatform9-community

0.2.0

5 of 6 See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
platform9community/admin-server :latest	de3fa9b70df1	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
platform9community/api-gateway :latest	40a4970de568	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
platform9community/customers-service :latest	2089811e5cc6	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
platform9community/vets-service :latest	d1165c94dfb3	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
platform9community/visits-service :latest	8d11b50368c6	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0

Open the chart page →

41,872

pyrrarlex

0.14.3

1 of 1 See more

pyrra rlex 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	golang.org/x/net@v0.31.0	0.55.0

Open the chart page →

953

k8s-infrasignoz

0.17.1

1 of 1 See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.139.0	faf125d656fa	golang.org/x/net@v0.46.0	0.55.0

Open the chart page →

1,039

helm-exportersstarcher

0.5.0

1 of 1 See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271	0.55.0

Open the chart page →

4,154

gatustwin

1.5.0

1 of 1 See more

gatus twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v5.34.0	3fff895e77d3	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

721

istio-operatorwiremind

1.18.2

1 of 1 See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
istio/operator :1.18.2	70f9d1fe5fff	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

5,630

home-assistantalekc

2.11.2

1 of 1 See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.2	a1bc133af84e	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

2,133

home-assistantandrenarchy

14.103.0

1 of 1 See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.1	612d76760b54	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

2,133

astarte-operatorastarte

26.5.2

1 of 1 See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

695

awx-operatorawx-operator-helm

3.2.1

2 of 2 See more

awx-operator awx-operator-helm 3.2.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	golang.org/x/net@v0.20.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

9,868

cadvisorckotzbauer

2.4.3

1 of 1 See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.52.1	f40e65878e25	golang.org/x/net@v0.33.0	0.55.0

Open the chart page →

961

codercoder

1.44.6

1 of 2 See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
coderenvs/coder-service :1.44.6	1deffc4670e6	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

6,849

dronecommunity-charts

0.1.5

2 of 2 See more

drone community-charts 0.1.5

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
drone/drone :2.28.2	55897c8fb22d	golang.org/x/net@v0.42.0	0.55.0
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

2,728

cortexcortex

3.3.8

1 of 4 See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.21.1	8577eb292a01	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

3,897

doris-operatordoris

25.8.0

1 of 1 See more

doris-operator doris 25.8.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
apache/doris :operator-latest	3a4422656592	golang.org/x/net@v0.33.0	0.55.0

Open the chart page →

438

uptime-kumaduyet

0.1.7

1 of 1 See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.18.5	a84767d7934f	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.55.0

Open the chart page →

4,515

emqx-operatoremqx-operator

2.3.2

2 of 2 See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/net@v0.31.0	0.55.0
ghcr.io/emqx/emqx-operator :2.3.2	3333ed546165	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

4,531

kube-routerenix

1.10.0

1 of 1 See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
cloudnativelabs/kube-router :v1.6.0	0ec7cd73f43f	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

2,344

gethethereum-helm-charts

1.1.4

1 of 2 See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ethereum/client-go :stable	b8ab3451a117	golang.org/x/net@v0.50.0	0.55.0

Open the chart page →

616

gotifygotify

0.8.1

1 of 1 See more

gotify gotify 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gotify/server :2.9.1	a3af47067ce6	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

568

kubelet-csr-approverkubelet-csr-approver

1.2.15

1 of 1 See more

kubelet-csr-approver kubelet-csr-approver 1.2.15

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/postfinance/kubelet-csr-approver :v1.2.15	6469ef517d2b	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

logging-operatorkube-logging

4.2.3

1 of 1 See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/logging-operator :4.2.2	0dd85dcb1f73	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

880

myipkuoss

0.2.2

1 of 1 See more

myip kuoss 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/myip :v0.1.7	760f5ccae493	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

660

keptnlifecycle-toolkit

0.11.0

3 of 3 See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/net@v0.30.0	0.55.0
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/net@v0.30.0	0.55.0
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

1,927

mattermost-operatormattermost

1.0.5

1 of 1 See more

mattermost-operator mattermost 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
mattermost/mattermost-operator :v1.25.4	bac00a2bbd33	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

273

mercuremercure

0.24.0

1 of 1 See more

mercure mercure 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dunglas/mercure :v0.24.0	80fcb704a741	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

1,409

meshery-operatormeshery

1.0.69

1 of 2 See more

meshery-operator meshery 1.0.69

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.6	b7a12c5ddf26	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

2,415

missing-container-metricsmissing-container-metrics

0.1.1

1 of 1 See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

2,409

tailscale-relaymvisonneau

0.2.7

1 of 1 See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

1,356

system-upgrade-controllernimbolus

0.7.0

1 of 1 See more

system-upgrade-controller nimbolus 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/system-upgrade-controller :v0.18.0	9813f85653c8	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

318

ketoory

0.64.0

1 of 1 See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
oryd/keto :v26.2.0	bfdb8b9e283a	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

817

oathkeeperory

0.64.0

1 of 1 See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
oryd/oathkeeper :v26.2.0	467329abde34	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

769

redis-enterprise-operatorredis-enterprise-operator-official

8.0.18-11

1 of 1 See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
redislabs/operator :8.0.18-11	9078e713bb6a	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

896

backstagerhdh-chart

4.0.1

1 of 2 See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/rhdh/rhdh-hub-rhel9 :latest	0b26358f5793	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

1,339

Container images carrying it

3,655 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/net@v0.44.0	0.55.0	5
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.55.0	5
sigma2as/goidc-proxy :next	656ac798963a	golang.org/x/net@v0.51.0	0.55.0	5
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/net@v0.39.0	0.55.0	5
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946	0.55.0	5
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0	5
quay.io/prometheus/blackbox-exporter :latest :v0.28.0	e753ff9f3fc4	golang.org/x/net@v0.47.0	0.55.0	5
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0	0.55.0	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0	0.55.0	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0	0.55.0	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0	0.55.0	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/net@v0.28.0	0.55.0	5
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/net@v0.47.0	0.55.0	5
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.55.0	5
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/net@v0.51.0	0.55.0	5
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0	0.55.0	5
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0	0.55.0	5
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0	0.55.0	5
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/net@v0.49.0	0.55.0	5
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0	0.55.0	4
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1	0.55.0	4
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.55.0	4
grafana/grafana :13.1.0	121a7a9ece6d	golang.org/x/net@v0.49.0	0.55.0	4
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0	4
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	4
grafana/loki :3.6.7	3c8fd3570dd9	golang.org/x/net@v0.47.0	0.55.0	4
grafana/tempo :2.9.0	65a578975943	golang.org/x/net@v0.43.0	0.55.0	4
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	4
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	4
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	4
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0	0.55.0	4
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0	0.55.0	4
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0	0.55.0	4
library/mongo :5.0-focal	5e15a3f014ed	golang.org/x/net@v0.47.0	0.55.0	4
library/registry :3.1.1 :latest	1be55279f18a	golang.org/x/net@v0.52.0	0.55.0	4
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/net@v0.52.0	0.55.0	4
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/net@v0.49.0	0.55.0	4
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/net@v0.18.0	0.55.0	4
ghcr.io/appscode/petset :v0.1.0	93fa0daf603c	golang.org/x/net@v0.47.0	0.55.0	4
ghcr.io/curium-rocks/docker-kubectl :main	d04c003d7593	golang.org/x/net@v0.23.0	0.55.0	4
ghcr.io/kubestash/kubestash :v0.29.0	43e01ed32486	golang.org/x/net@v0.47.0	0.55.0	4
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/net@v0.5.0	0.55.0	4
ghcr.io/sigstore/scaffolding/createtree :v0.7.31	e5232e8c9122	golang.org/x/net@v0.46.0	0.55.0	4
ghcr.io/synapsecns/sanguine/omnirpc :latest	5217e3d1fc70	golang.org/x/net@v0.35.0	0.55.0	4
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0	0.55.0	4
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0	0.55.0	4
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.55.0	4
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.55.0	4
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0	0.55.0	4
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0	0.55.0	4