CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,031; of 17,805 indexed, latest versions
Container images: 3,675; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 3,031 of 17,805 indexed charts deploy, on 3,675 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,675

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

3,031 by stars

Chart

Latest

Affected images

Radar Score

ingress-nginxwener

4.15.1

2 See more

ingress-nginx wener 4.15.1

2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

—

juicefs-csi-driverwener

0.33.0

4 See more

juicefs-csi-driver wener 0.33.0

4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	golang.org/x/net@v0.52.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	golang.org/x/net@v0.13.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/net@v0.13.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.12.0	5baeb4a6d7d5	golang.org/x/net@v0.18.0	0.55.0

Open the chart page →

—

kube-prometheus-stackwener

91.4.1

1 See more

kube-prometheus-stack wener 91.4.1

1 container image this version deploys carries CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

—

kubernetes-dashboardwener

7.14.0

4 See more

kubernetes-dashboard wener 7.14.0

4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.14.0	96a702cfd339	golang.org/x/net@v0.40.0	0.55.0
kubernetesui/dashboard-auth :1.4.0	53e9917898bf	golang.org/x/net@v0.38.0	0.55.0
kubernetesui/dashboard-metrics-scraper :1.2.2	5154b68252bd	golang.org/x/net@v0.34.0	0.55.0
kubernetesui/dashboard-web :1.7.0	cc7c31bd2d84	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

—

logging-operatorwener

3.17.10

1 See more

logging-operator wener 3.17.10

1 container image this version deploys carries CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.55.0

Open the chart page →

—

longhornwener

1.2.3

1 See more

longhorn wener 1.2.3

1 container image this version deploys carries CVE-2026-25680.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0

Open the chart page →

—

minio-operatorwener

4.3.7

1 See more

minio-operator wener 4.3.7

1 container image this version deploys carries CVE-2026-25680.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758	0.55.0

Open the chart page →

—

natswener

2.14.6

1 See more

nats wener 2.14.6

1 container image this version deploys carries CVE-2026-25680.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.7	ffce8bd10338	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

—

nfs-subdir-external-provisionerwener

4.0.18

1 See more

nfs-subdir-external-provisioner wener 4.0.18

1 container image this version deploys carries CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

—

openebswener

3.10.0

3 See more

openebs wener 3.10.0

3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

—

prometheus-blackbox-exporterwener

11.18.0

1 See more

prometheus-blackbox-exporter wener 11.18.0

1 container image this version deploys carries CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

—

prometheus-statsd-exporterwener

1.0.0

1 See more

prometheus-statsd-exporter wener 1.0.0

1 container image this version deploys carries CVE-2026-25680.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/net@v0.29.0	0.55.0

Open the chart page →

—

rancherwener

2.15.1

2 See more

rancher wener 2.15.1

2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/net@v0.52.0	0.55.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

—

temporalwener

0.15.1

5 See more

temporal wener 0.15.1

5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.55.0
prom/prometheus :v2.16.0	e4ca62c0d62f	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.55.0
temporalio/admin-tools :1.15.1	35034611d981	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0
temporalio/server :1.15.1	e26758f5a1bf	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

—

traefikwener

9.1.1

1 See more

traefik wener 9.1.1

1 container image this version deploys carries CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/traefik :2.2.8	f5af5a5ce17f	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.55.0

Open the chart page →

—

victoria-metrics-k8s-stackwener

0.92.1

2 See more

victoria-metrics-k8s-stack wener 0.92.1

2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	golang.org/x/net@v0.49.0	0.55.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

—

ambassadorwenerme

6.9.5

1 of 2 See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0

Open the chart page →

4,127

apisixwenerme

2.17.0

1 of 3 See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

3,166

argo-eventswenerme

2.4.27

1 of 1 See more

argo-events wenerme 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

1,093

athens-proxywenerme

0.5.2

2 of 2 See more

athens-proxy wenerme 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gomods/athens :v0.11.0	efb811df7844	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0	0.55.0
jaegertracing/all-in-one :latest	ab6f1a1f0fb4	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

5,007

cadencewenerme

0.23.0

2 of 5 See more

cadence wenerme 0.23.0

2 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ubercadence/server :0.23.2	2ac5491d13bb	golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102	0.55.0
ghcr.io/banzaicloud/tcheck :latest	0147d87c2019	golang.org/x/net@v0.0.0-20170114055629-f2499483f923	0.55.0

Open the chart page →

10,148

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

72,845

filebrowserwenerme

1.0.0

1 of 1 See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.13.0	c5d0a75a0041	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.55.0

Open the chart page →

3,174

frpcwenerme

1.0.1

1 of 1 See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
wener/frpc :v0.37.0	cc9fd4da44c0	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.55.0

Open the chart page →

3,359

gitlab-runnerwenerme

0.93.0

1 of 1 See more

gitlab-runner wenerme 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.4.0	a4838319e55b	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

280

haproxy-ingresswenerme

0.16.1

1 of 1 See more

haproxy-ingress wenerme 0.16.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/jcmoraisjr/haproxy-ingress :v0.16.1	6fd744191ef6	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

794

harborwenerme

1.19.2

2 of 8 See more

harbor wenerme 1.19.2

2 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	golang.org/x/net@v0.54.0	0.55.0
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

1,738

juicefs-csi-driverwenerme

0.33.0

4 of 5 See more

juicefs-csi-driver wenerme 0.33.0

4 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	golang.org/x/net@v0.52.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	golang.org/x/net@v0.13.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	golang.org/x/net@v0.13.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.12.0	5baeb4a6d7d5	golang.org/x/net@v0.18.0	0.55.0

Open the chart page →

8,992

kubernetes-dashboardwenerme

7.14.0

4 of 5 See more

kubernetes-dashboard wenerme 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.14.0	96a702cfd339	golang.org/x/net@v0.40.0	0.55.0
kubernetesui/dashboard-auth :1.4.0	53e9917898bf	golang.org/x/net@v0.38.0	0.55.0
kubernetesui/dashboard-metrics-scraper :1.2.2	5154b68252bd	golang.org/x/net@v0.34.0	0.55.0
kubernetesui/dashboard-web :1.7.0	cc7c31bd2d84	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

3,540

logging-operatorwenerme

3.17.10

1 of 1 See more

logging-operator wenerme 3.17.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.55.0

Open the chart page →

1,646

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0

Open the chart page →

15,437

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.55.0

Open the chart page →

6,949

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.55.0

Open the chart page →

6,172

nfs-subdir-external-provisionerwenerme

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

2,745

openebswenerme

3.10.0

3 of 3 See more

openebs wenerme 3.10.0

3 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

10,613

prometheus-snmp-exporterwenerme

9.18.0

1 of 1 See more

prometheus-snmp-exporter wenerme 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/prometheus/snmp-exporter :v0.30.1	e5fd5e8b43ac	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

509

prometheus-statsd-exporterwenerme

1.0.0

1 of 1 See more

prometheus-statsd-exporter wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/net@v0.29.0	0.55.0

Open the chart page →

783

rancherwenerme

2.15.1

2 of 2 See more

rancher wenerme 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/net@v0.52.0	0.55.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

1,528

temporalwenerme

0.15.1

5 of 13 See more

temporal wenerme 0.15.1

5 of the 13 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.55.0
prom/prometheus :v2.16.0	e4ca62c0d62f	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.55.0
temporalio/admin-tools :1.15.1	35034611d981	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0
temporalio/server :1.15.1	e26758f5a1bf	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

22,710

traefikwenerme

9.1.1

1 of 1 See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/traefik :2.2.8	f5af5a5ce17f	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.55.0

Open the chart page →

3,378

victoria-metrics-k8s-stackwenerme

0.92.1

2 of 7 See more

victoria-metrics-k8s-stack wenerme 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	golang.org/x/net@v0.49.0	0.55.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

1,953

wexa-studiowexa-studio

1.2.0

6 of 15 See more

wexa-studio wexa-studio 1.2.0

6 of the 15 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.15.4	0b01ed3924e6	golang.org/x/net@v0.17.0	0.55.0
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	golang.org/x/net@v0.19.0	0.55.0
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	golang.org/x/net@v0.39.0	0.55.0
temporalio/server :1.29.1	c1e3326b2ce1	golang.org/x/net@v0.40.0	0.55.0
temporalio/ui :2.44.0	0b36e00aad30	golang.org/x/net@v0.34.0	0.55.0
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

15,376

whereaboutswhereabouts

0.3.0

1 of 1 See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/whereabouts :v0.9.4	f279fd7dc112	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

618

ceph-csi-cephfswikimedia

0.1.8

5 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

5 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/csi-provisioner :v3.2.1	4ad5fcdbe7e9	golang.org/x/net@v0.0.0-20220403103023-749bd193bc2b	0.55.0
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.1	0103eee7c35e	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.5.0	8f7520bd957e	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v6.0.1	ad16874e2140	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

10,333

ceph-csi-rbdwikimedia

0.1.13

6 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

6 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/csi-provisioner :v3.2.1	4ad5fcdbe7e9	golang.org/x/net@v0.0.0-20220403103023-749bd193bc2b	0.55.0
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v3.5.0	dd245051317e	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.1	0103eee7c35e	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.5.0	8f7520bd957e	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v6.0.1	ad16874e2140	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

11,839

jaegerwikimedia

3.1.2

3 of 4 See more

jaeger wikimedia 3.1.2

3 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0	0.55.0
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0	0.55.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

9,354

opentelemetry-collectorwikimedia

0.62.7

1 of 1 See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.81.0	c6671841470b	golang.org/x/net@v0.11.0	0.55.0

Open the chart page →

2,034

wireguardwireguard-bananas

1.5.0

1 of 1 See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0

Open the chart page →

2,752

csi-driver-host-pathwiremind

0.1.1

8 of 8 See more

csi-driver-host-path wiremind 0.1.1

8 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
registry.k8s.io/sig-storage/csi-external-health-monitor-controller :v0.7.0	80b9ba94aa2a	golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v3.3.0	ee3b525d5b89	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.6.0	425d8f1b7693	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v6.1.0	291334908ddf	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0
registry.k8s.io/sig-storage/hostpathplugin :v1.9.0	92257881c1d6	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	golang.org/x/net@v0.0.0-20220921203646-d300de134e69	0.55.0

Open the chart page →

12,663

dex-k8s-authenticatorwiremind

1.7.0

1 of 1 See more

dex-k8s-authenticator wiremind 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/net@v0.0.0-20190522155817-f3200d17e092	0.55.0

Open the chart page →

2,792

Container images carrying it

3,675 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0	1
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0	1
iomesh/csi-driver :v2.8.0	1a151f602451	golang.org/x/net@v0.8.0	0.55.0	1
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f	0.55.0	1
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/net@v0.19.0	0.55.0	1
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/net@v0.17.0	0.55.0	1
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/net@v0.19.0	0.55.0	1
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/net@v0.19.0	0.55.0	1
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/net@v0.17.0	0.55.0	1
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/net@v0.17.0	0.55.0	1
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/net@v0.17.0	0.55.0	1
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/net@v0.17.0	0.55.0	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0	1
iotaledger/goshimmer :v0.8.6	b02a8f77474f	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.55.0	1
iotaledger/hornet :2.0	01206f1ba89c	golang.org/x/net@v0.14.0	0.55.0	1
iotaledger/inx-dashboard :1.0	12c669cb8748	golang.org/x/net@v0.14.0	0.55.0	1
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/net@v0.0.0-20220517181318-183a9ca12b87	0.55.0	1
ipfs/ipfs-cluster :1.0.2	1511f6d57994	golang.org/x/net@v0.0.0-20220517181318-183a9ca12b87	0.55.0	1
ipfs/kubo :v0.41.0	0661819c2e09	golang.org/x/net@v0.53.0	0.55.0	1
ipfs/kubo :v0.17.0	803fac58ba15	golang.org/x/net@v0.1.0	0.55.0	1
ipfs/kubo :v0.24.0	e3de33bd746b	golang.org/x/net@v0.17.0	0.55.0	1
ipushc/cassandra-web :latest	fa3e0c66c289	golang.org/x/net@v0.8.0	0.55.0	1
isebben/smart-proxy :latest	ab59a71ee9f4	golang.org/x/net@v0.47.0	0.55.0	1
ispras/svacer :11-2-0	42aa9fa9f189	golang.org/x/net@v0.37.0	0.55.0	1
istio/install-cni :1.10.3	2232f365aed6	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.55.0	1
istio/install-cni :1.23.6	ab34c4740f44	golang.org/x/net@v0.37.0	0.55.0	1
istio/install-cni :1.29.0	ce27c9ce43c8	golang.org/x/net@v0.48.0	0.55.0	1
istio/operator :1.10.3	655eefa11c84	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.55.0	1
istio/operator :1.12.0	6cfce8a071b9	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.55.0	1
istio/operator :1.18.2	70f9d1fe5fff	golang.org/x/net@v0.10.0	0.55.0	1
istio/pilot :1.10.0	294ca55bd1cc	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.55.0	1
istio/pilot :1.29.0	325156535773	golang.org/x/net@v0.48.0	0.55.0	1
istio/pilot :1.23.6	9c3d6a218181	golang.org/x/net@v0.37.0	0.55.0	1
istio/pilot :1.16.0	ac0284d75ec9	golang.org/x/net@v0.0.0-20220921155015-db77216a4ee9	0.55.0	1
istio/pilot :1.17.1	ce9d87606701	golang.org/x/net@v0.5.0	0.55.0	1
istio/pilot :1.15.2	db08d6963975	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.55.0	1
istio/pilot :1.10.3	e7e110a421c2	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.55.0	1
istio/pilot :1.29.1	f8b0e412ac4a	golang.org/x/net@v0.48.0	0.55.0	1
istio/proxyv2 :1.9.6	87a9db561d2e	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.55.0	1
istio/proxyv2 :1.10.0	88c6c693e67a	golang.org/x/net@v0.0.0-20210323141857-08027d57d8cf	0.55.0	1
istio/proxyv2 :1.14.1	df69c1a7af7c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.55.0	1
itzg/mc-router :1.16.1	bb552b59fb53	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf	0.55.0	1
itzmanish/ecr-token-renew :latest	02154d1c05b5	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0	1
ixsystems/truecommand :3.2.0	19c218455cd2	golang.org/x/net@v0.42.0	0.55.0	1
j0113/haven-compliancy-dashboard :1.3	696cb8ca9f4e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.55.0	1
jaegertracing/all-in-one :1.29	42822be7888b	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf	0.55.0	1