CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,017; of 17,790 indexed, latest versions
Container images: 3,695; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 3,017 of 17,790 indexed charts deploy, on 3,695 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,695

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

3,017 by stars

Chart

Latest

Affected images

Radar Score

cert-managerkubeblocks

1.17.2

4 of 4 See more

cert-manager kubeblocks 1.17.2

4 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.17.2	ec56edb1161d	golang.org/x/net@v0.38.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.17.2	2c314feeb5e8	golang.org/x/net@v0.38.0	0.55.0
quay.io/jetstack/cert-manager-startupapicheck :v1.17.2	e18989b4f912	golang.org/x/net@v0.38.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.17.2	37b16a9dff00	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

2,914

difykubeblocks

0.5.1

1 of 5 See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/net@v0.20.0	0.55.0

Open the chart page →

20,461

ks-corekubeblocks

1.1.3

2 of 5 See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubesphere/ks-extensions-museum :latest	29681958f220	golang.org/x/net@v0.17.0	0.55.0
kubesphere/kubectl :v1.27.16	49b445b1b732	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

4,739

kubebrowsekubebrowse

1.7.0

3 of 5 See more

kubebrowse kubebrowse 1.7.0

3 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	golang.org/x/net@v0.39.0	0.55.0
ghcr.io/browsersec/kubebrowse :sha-09dfa1f	b853e9e6372a	golang.org/x/net@v0.40.0	0.55.0
ghcr.io/browsersec/kubebrowse-frontend :chore-improve-back	bd6bea5e487c	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

4,165

kubefedkubefed

0.10.0

1 of 2 See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/kubernetes-multicluster/kubefed :v0.10.0	c4635c95730e	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

2,425

kubegems-installerkubegems

1.24.10

1 of 1 See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

3,390

kubegems-localkubegems

1.24.10

2 of 2 See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubegems/kubectl :latest	c3b4be9a54f5	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.55.0
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

6,099

kube-monkeykubemonkey

1.6.0

1 of 1 See more

kube-monkey kubemonkey 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.4	0a5bb6fc3f3f	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

120

kubernetes-events-exporterkubernetes-events-exporter

0.1.2

1 of 1 See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/ownkube/kubernetes-events-exporter :0.1.2	bcb7f0f733f5	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

503

owncloudkubernetes-homelab-helm-charts

0.1.0

1 of 3 See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
owncloud/server :10.16.2	74c53d341076	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

9,983

tailscalekubernetes-homelab-helm-charts

0.1.2

1 of 2 See more

tailscale kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
tailscale/tailscale :v1.96.5	dbeff02d2337	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

1,038

kubernetes-stateless-chartkubernetes-stateless-chart

1.0.3

1 of 1 See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.18.4-alpine	3e61aaee1341	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

3,284

kubescoutkubescoute

0.1.1

1 of 1 See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/haedalwang/kubescout :0.1.1	07d51f838f0d	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

723

kubeseal-webguikubeseal-webgui

6.0.4

1 of 2 See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/jaydee94/kubeseal-webgui/api :4.5.3	3cceb9462ae1	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

4,112

kube-site-followerkube-site-follower

0.1.14

1 of 2 See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/net@v0.32.0	0.55.0

Open the chart page →

909

juicefskubesphere-stable

0.16.2

1 of 4 See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.20.0	43978fc60798	golang.org/x/net@v0.9.0	0.55.0

Open the chart page →

2,495

mesherykubesphere-stable

0.5.0

12 of 13 See more

meshery kubesphere-stable 0.5.0

12 of the 13 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
layer5/meshery :stable-latest	78a8be21bef3	golang.org/x/net@v0.39.0	0.55.0
layer5/meshery-app-mesh :stable-latest	77d59943b3d6	golang.org/x/net@v0.2.0	0.55.0
layer5/meshery-consul :stable-latest	25a4cc38abcd	golang.org/x/net@v0.17.0	0.55.0
layer5/meshery-cpx :stable-latest	8c20a8a1d6a4	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297	0.55.0
layer5/meshery-istio :stable-latest	fde47c141ec6	golang.org/x/net@v0.36.0	0.55.0
layer5/meshery-kuma :stable-latest	9d25f029a8a2	golang.org/x/net@v0.17.0	0.55.0
layer5/meshery-linkerd :stable-latest	b99c73bac1f5	golang.org/x/net@v0.19.0	0.55.0
layer5/meshery-nginx-sm :stable-latest	b3864dfd47ad	golang.org/x/net@v0.9.0	0.55.0
layer5/meshery-nsm :stable-latest	ebd6a8faf21f	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.55.0
layer5/meshery-operator :stable-latest	6f58a28fe422	golang.org/x/net@v0.33.0	0.55.0
layer5/meshery-osm :stable-latest	ec898e5786c6	golang.org/x/net@v0.5.0	0.55.0
layer5/meshery-traefik-mesh :stable-latest	797fa7a03570	golang.org/x/net@v0.9.0	0.55.0

Open the chart page →

24,785

aws-efs-csi-driverkubesphere-test

0.1.0

1 of 3 See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.55.0

Open the chart page →

2,611

kube-state-metricskubestar-state-metrics

0.1.10

1 of 1 See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

1,575

kubetailkubetail

0.26.0

3 of 3 See more

kubetail kubetail 0.26.0

3 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kubetail-org/kubetail-cluster-agent :0.7.1	a5eee8cab215	golang.org/x/net@v0.38.0	0.55.0
ghcr.io/kubetail-org/kubetail-cluster-api :0.8.2	8e6acd0da9ac	golang.org/x/net@v0.52.0	0.55.0
ghcr.io/kubetail-org/kubetail-dashboard :0.17.0	8617f0a7f703	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

1,872

kube-vault-controllerkube-vault-controller

1.2.0

1 of 1 See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kupnu4x/kube-vault-controller :1.2.0	3be59109f3d6	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

1,550

kube-vip-cloud-providerkube-vip

0.2.10

1 of 1 See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubevip/kube-vip-cloud-provider :v0.0.12	f8f4e3401f76	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

798

kubemodkubmod

0.5.2

2 of 2 See more

kubemod kubmod 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.19.1	1f8154f7e80c	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.55.0
kubemod/kubemod-crt :v1.3.0	028347c9fa77	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.55.0

Open the chart page →

4,542

kubeservice-cosign-webhookkubservice-charts

1.1.1

5 of 5 See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/net@v0.11.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.55.0

Open the chart page →

7,117

kubeservice-cpupools-controllerkubservice-charts

0.1.1

2 of 2 See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	golang.org/x/net@v0.10.0	0.55.0
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

3,128

kubeservice-custom-limitrangekubservice-charts

1.3.0

5 of 5 See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

5 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kubeservice-stack/customlimitrange-manager :v1.3.0	d3ed97d142d4	golang.org/x/net@v0.36.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.55.0

Open the chart page →

5,965

kubeservice-namespace-node-affinitykubservice-charts

1.1.2

5 of 5 See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dongjiang1989/ns-node-affinity :latest	451f7823723c	golang.org/x/net@v0.7.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.55.0

Open the chart page →

6,895

kubeservice-scheduler-pluskubservice-charts

0.2.1

1 of 2 See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

1,803

ingress-annotatorkuoss

0.3.0

1 of 1 See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

486

kube-fencingkvaps

2.4.1

1 of 2 See more

kube-fencing kvaps 2.4.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0

Open the chart page →

2,538

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.55.0
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.55.0

Open the chart page →

15,567

kymaroskymaros

0.6.9

1 of 1 See more

kymaros kymaros 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kymaroshq/kymaros :0.6.9	fb3b88633381	golang.org/x/net@v0.50.0	0.55.0

Open the chart page →

276

authz-pdplabs64io-helm-charts

0.6.0

1 of 1 See more

authz-pdp labs64io-helm-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/cerbos/cerbos :0.51.0	8d35a64e4a99	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

807

lagoon-remotelagoon-charts

0.106.0

1 of 1 See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

2,122

landelijketabellencataloguslandelijketabellencatalogus

1.0.0

1 of 3 See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

7,519

lgtmlgtm

0.27.0

1 of 9 See more

lgtm lgtm 0.27.0

1 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.1-distroless	3600073f45a9	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

1,043

lgtm-stacklgtm-stack

0.1.3

3 of 8 See more

lgtm-stack lgtm-stack 0.1.3

3 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.0	121a7a9ece6d	golang.org/x/net@v0.49.0	0.55.0
minio/mc :RELEASE.2024-01-16T16-06-34Z	591b097ea2d4	golang.org/x/net@v0.19.0	0.55.0
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

5,667

keptn-cert-managerlifecycle-toolkit

0.3.0

1 of 1 See more

keptn-cert-manager lifecycle-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

507

keptn-lifecycle-operatorlifecycle-toolkit

0.6.0

1 of 1 See more

keptn-lifecycle-operator lifecycle-toolkit 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

602

keptn-metrics-operatorlifecycle-toolkit

0.5.0

1 of 1 See more

keptn-metrics-operator lifecycle-toolkit 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

832

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.55.0

Open the chart page →

4,459

linkerd-jaegerlinkerd2-edge

30.14.11-edge

2 of 4 See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.55.0
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/net@v0.14.0	0.55.0

Open the chart page →

4,406

litlyxlitlyx

0.2.0

1 of 5 See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/mongo :8.0.11	dca8d11fe467	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

7,923

go-hello-worldloafoe

0.14.0

1 of 1 See more

go-hello-world loafoe 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/go-hello-world :v2.13.0	d3fb171f20e1	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

679

home-assistantloeken-at-home

2026.5.1

1 of 1 See more

home-assistant loeken-at-home 2026.5.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
loeken/home-assistant :2026.5.1	4ce6abc553b3	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

3,013

jspolicyloft

0.2.2

1 of 1 See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
loftsh/jspolicy :0.2.2	25deb9bd2683	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0

Open the chart page →

2,309

vcluster-eksloft

0.0.0-ci.3

1 of 4 See more

vcluster-eks loft 0.0.0-ci.3

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.55.0

Open the chart page →

3,311

vcluster-k0sloft

0.0.0-ci.3

1 of 2 See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0	0.55.0

Open the chart page →

3,146

log2rbac-operatorlog2rbac-operator

0.0.5

1 of 1 See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jkremser/log2rbac :v0.0.5	e35cf56ef183	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

1,945

logclilogcli

0.1.0

1 of 1 See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	golang.org/x/net@v0.0.0-20210505214959-0714010a04ed	0.55.0

Open the chart page →

2,954

Container images carrying it

3,695 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
nocodb/nocodb :0.84.15	f9b799933aa8	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0	1
novosga/novosga :latest	34b9acbe6e51	golang.org/x/net@v0.53.0	0.55.0	1
ntakashi/cole :1.2.3	f7b68bee2a68	golang.org/x/net@v0.10.0	0.55.0	1
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/net@v0.0.0-20210929161516-d455829e376d	0.55.0	1
nvidia/dcgm-exporter :2.2.9-2.4.1-ubuntu20.04	91b20b66d1cd	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
obolnetwork/charon-dkg-sidecar :main	e263be0a7440	golang.org/x/net@v0.44.0	0.55.0	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	golang.org/x/net@v0.21.0	0.55.0	1
ofekmeister/csi-gcs :v0.9.0	30d70fa9211b	golang.org/x/net@v0.0.0-20220513224357-95641704303c	0.55.0	1
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	golang.org/x/net@v0.38.0	0.55.0	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	golang.org/x/net@v0.21.0	0.55.0	1
okteto/civo-webhook :0.5.3	57cd51176538	golang.org/x/net@v0.15.0	0.55.0	1
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ondrejsika/counter :latest	d95eaeee2172	golang.org/x/net@v0.46.0	0.55.0	1
opea/gmcmanager :1.0	514af17c495c	golang.org/x/net@v0.25.0	0.55.0	1
openbas/caldera-server :5.1.0	a277796d9724	golang.org/x/net@v0.14.0	0.55.0	1
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0	1
opencsghq/csghub-portal :v2.4.0-ee	93ad59164d87	golang.org/x/net@v0.28.0	0.55.0	1
opencsghq/csghub-server :v2.4.0-ee	302c9d45d8a8	golang.org/x/net@v0.54.0	0.55.0	1
opencsghq/csghub-xnet :v2.4.0-ee	04121fd19ef9	golang.org/x/net@v0.39.0	0.55.0	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	golang.org/x/net@v0.29.0	0.55.0	1
opencsghq/gitlab-shell :v17.5.0	f6d7e7d6be5d	golang.org/x/net@v0.26.0	0.55.0	1
opencsghq/kubectl :latest	b6d87e1048c2	golang.org/x/net@v0.38.0	0.55.0	1
opencsghq/lws :v0.6.1	de15437db41b	golang.org/x/net@v0.37.0	0.55.0	1
openebs/lvm-driver :1.10.1	41f73aba7f31	golang.org/x/net@v0.48.0	0.55.0	1
openebs/provisioner-nfs :0.11.0	4f41dd782761	golang.org/x/net@v0.10.0	0.55.0	1
openenergyprojects/modbus_exporter :20230617_a144551	58990f24fb25	golang.org/x/net@v0.8.0	0.55.0	1
openfga/openfga :v1.9.2	5e94966c11df	golang.org/x/net@v0.40.0	0.55.0	1
openkruise/agent-sandbox-controller :v0.3.0	e0a3bf7c0dc5	golang.org/x/net@v0.47.0	0.55.0	1
openkruise/kruise-game-manager :v1.1.0	d3c6d69d2c39	golang.org/x/net@v0.43.0	0.55.0	1
openkruise/kruise-manager :v1.8.3	0482722b4e56	golang.org/x/net@v0.33.0	0.55.0	1
openkruise/kruise-manager :v1.9.1	f81ae78a36a4	golang.org/x/net@v0.38.0	0.55.0	1
openkruise/kruise-rollout :v0.6.2	a75e6739ea7d	golang.org/x/net@v0.7.0	0.55.0	1
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/net@v0.8.0	0.55.0	1
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/net@v0.21.0	0.55.0	1
opennms/sentinel :36.0.2	88869082a14f	golang.org/x/net@v0.29.0	0.55.0	1
openpolicyagent/gatekeeper :v3.17.1	b7b4d7cfdd52	golang.org/x/net@v0.27.0	0.55.0	1
openpolicyagent/gatekeeper-crds :v3.17.1	77bc9bf3d163	golang.org/x/net@v0.23.0	0.55.0	1
openpolicyagent/opa :0.53.1	6a58dea59933	golang.org/x/net@v0.10.0	0.55.0	1
opensearchproject/opensearch-operator :3.0.0-alpha	f78bbdd1a386	golang.org/x/net@v0.47.0	0.55.0	1
openvino/model_server :2025.2.1	1e7cd1d70cc1	golang.org/x/net@v0.38.0	0.55.0	1
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	golang.org/x/net@v0.0.0-20200520182314-0ba52f642ac2	0.55.0	1
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/net@v0.17.0	0.55.0	1
orbitalreg/orbitalreg-api :0.1.0	45f2620337af	golang.org/x/net@v0.28.0	0.55.0	1
oryd/hydra :v2.3.0	b94007e19a1f	golang.org/x/net@v0.33.0	0.55.0	1
oryd/hydra :v26.2.0	ff67c7fb5f95	golang.org/x/net@v0.48.0	0.55.0	1
oryd/keto :v26.2.0	bfdb8b9e283a	golang.org/x/net@v0.48.0	0.55.0	1
oryd/kratos :v26.2.0	2a13bb8d362c	golang.org/x/net@v0.48.0	0.55.0	1
oryd/kratos :v1.1.0	8f15006a080d	golang.org/x/net@v0.20.0	0.55.0	1