CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,003; of 17,792 indexed, latest versions
Container images: 3,669; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 3,003 of 17,792 indexed charts deploy, on 3,669 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,669

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

3,003 by stars

Chart

Latest

Affected images

Radar Score

selenosis-deployselenosis

2.1.3

4 of 4 See more

selenosis-deploy selenosis 2.1.3

4 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alcounit/browser-controller :v1.0.0	93b7cdbab14b	golang.org/x/net@v0.47.0	0.55.0
alcounit/browser-service :v0.0.9	4bd10defc324	golang.org/x/net@v0.47.0	0.55.0
alcounit/browser-ui :v0.0.9	6a977c92ef27	golang.org/x/net@v0.47.0	0.55.0
alcounit/selenosis :v2.1.1	d01a9dbbd943	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

1,579

sentry-operatorsentry-operator

1.2.5

1 of 1 See more

sentry-operator sentry-operator 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/agjmills/sentry-operator :v1.2.5	00389ef6a00e	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

463

vuiseriohub

1.0.6

1 of 3 See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dserio83/velero-api :0.3.1	6b3d9115fee2	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

11,578

session-manager-agentsession-manager-agent

1.9.0

1 of 2 See more

session-manager-agent session-manager-agent 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-agent :1.9.0	b9f23db99051	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

486

session-manager-serversession-manager-server

0.1.0-gfu-dev

1 of 1 See more

session-manager-server session-manager-server 0.1.0-gfu-dev

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server :0.1.0-gfu-dev	b9537499ff9e	golang.org/x/net@v0.35.0	0.55.0

Open the chart page →

802

k8s-appliershlomibendavid

1.0.1

1 of 1 See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
shlomibendavid/k8s-applier :0311240529	a22ffbe0f04e	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

1,206

clickhousesignoz

24.1.18

2 of 3 See more

clickhouse signoz 24.1.18

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0	0.55.0
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

4,698

cosignedsigstore

0.1.23

2 of 2 See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gcr.io/projectsigstore/cosigneddigest-pinned	784518ff3ee7	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.55.0
gcr.io/projectsigstore/policy-webhookdigest-pinned	82940e8c3e0d	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.55.0

Open the chart page →

5,132

scaffoldsigstore

0.6.115

5 of 15 See more

scaffold sigstore 0.6.115

5 of the 15 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	7f59f7c08d1a	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.31	3a061734c5be	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/createdbdigest-pinned	3cee6c78973b	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.31	e5232e8c9122	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/ct_server :v0.7.31	66664ba563e7	golang.org/x/net@v0.46.0	0.55.0

Open the chart page →

7,686

simply-dns-webhooksimply-dns-webhook

1.10.0

1 of 1 See more

simply-dns-webhook simply-dns-webhook 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/runnerm/simply-dns-webhook :v1.10.0	fdfffa3984a5	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

422

mongodb-backupsinextra

1.1.0

1 of 1 See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

4,277

postgresql-singlesinextra

1.15.1

1 of 1 See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

4,937

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0

Open the chart page →

6,420

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f	0.55.0

Open the chart page →

2,200

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

2,301

wg-easyslybase-wg-easy

1.2.0

1 of 1 See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15.4.0	0e7bc9d34e86	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

725

wireguardslybase-wireguard

2.0.6

1 of 1 See more

wireguard slybase-wireguard 2.0.6

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
linuxserver/wireguard :1.0.20260223-r0-ls122	dca67384e3e9	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

443

smallest-self-hostsmallest-self-host

0.2.2

6 of 12 See more

smallest-self-host smallest-self-host 0.2.2

6 of the 12 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0	0.55.0
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	golang.org/x/net@v0.25.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0	0.55.0
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	golang.org/x/net@v0.25.0	0.55.0
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

7,705

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	golang.org/x/net@v0.2.0	0.55.0

Open the chart page →

1,151

artifact-hubsoftonic

1.19.0

4 of 8 See more

artifact-hub softonic 1.19.0

4 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	golang.org/x/net@v0.11.0	0.55.0
artifacthub/hub :v1.19.0	111918d8c399	golang.org/x/net@v0.26.0	0.55.0
artifacthub/scanner :v1.19.0	323d026e78c3	golang.org/x/net@v0.21.0	0.55.0
artifacthub/tracker :v1.19.0	6596c8c4d955	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

14,550

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.55.0

Open the chart page →

2,643

go-ratelimitsoftonic

1.0.7

1 of 3 See more

go-ratelimit softonic 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553	0.55.0

Open the chart page →

5,105

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

2,591

sogosogo

0.3.5

1 of 2 See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

7,204

gloosolo-gloo-edge

0.0.0-fork

4 of 5 See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

9,256

sp-otel-collectorsp-otel-collector

1.1.6

1 of 1 See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	golang.org/x/net@v0.11.0	0.55.0

Open the chart page →

2,032

sql-operatorsql-operator

0.11.2

1 of 1 See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0

Open the chart page →

1,594

stackradar-scannerstackradar

0.3.0

1 of 1 See more

stackradar-scanner stackradar 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/lockdep/stackradar-scanner :0.3.0	dd8a35d50c2d	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

1,218

splunk-operatorstakater

0.0.6

1 of 2 See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb	0.55.0

Open the chart page →

11,459

gethstakewise

2.5.8

1 of 3 See more

geth stakewise 2.5.8

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.15.10	1f36ca5922a5	golang.org/x/net@v0.36.0	0.55.0

Open the chart page →

1,143

graph-nodestakewise

3.1.0

1 of 3 See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.24.0	e3de33bd746b	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

4,694

mayastorstartechnica

0.2.0

3 of 13 See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	golang.org/x/net@v0.0.0-20220921203646-d300de134e69	0.55.0

Open the chart page →

4,367

multusstartechnica

0.1.2

1 of 1 See more

multus startechnica 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :stable	ec4e5dfe12b6	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

512

statpingstatping

0.1.14

1 of 1 See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.55.0

Open the chart page →

3,378

stornxstornx

1.1.1

9 of 9 See more

stornx stornx 1.1.1

9 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0	0.55.0
alazidis/stornx :1.1.1	602d4f7f090c	golang.org/x/net@v0.47.0	0.55.0
istio/pilot :1.29.1	f8b0e412ac4a	golang.org/x/net@v0.48.0	0.55.0
quay.io/kiali/kiali :v2.23.0	7652b1285f50	golang.org/x/net@v0.49.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.90.0	e5aab3be6873	golang.org/x/net@v0.52.0	0.55.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0	0.55.0
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0	0.55.0
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

11,735

stunner-gateway-operatorstunner

1.1.0

2 of 2 See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
l7mp/stunner-auth-server :1.1.0	2f8114477ba6	golang.org/x/net@v0.36.0	0.55.0
l7mp/stunner-gateway-operator :1.1.0	c34f7c931491	golang.org/x/net@v0.36.0	0.55.0

Open the chart page →

1,292

hlf-k8ssubstra

10.2.4

4 of 7 See more

hlf-k8s substra 10.2.4

4 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.55.0
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0	0.55.0
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

12,030

supabasesupabse

0.8.0

2 of 11 See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.30.1	3b709e4a0e5e	golang.org/x/net@v0.44.0	0.55.0
supabase/gotrue :v2.189.0	385184459f57	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

18,327

Grafanasurajwarbhe-grafana

0.1.0

1 of 1 See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
surajwarbhe/grafana :v1	85248611e9f1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0

Open the chart page →

2,604

switchboardswitchboard

0.7.4

1 of 1 See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/borchero/switchboard :0.7.4	54a193b757da	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

844

synology-proxy-operatorsynology-proxy-operator

0.0.8

1 of 1 See more

synology-proxy-operator synology-proxy-operator 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/phoeluga/synology-proxy-operator :0.0.8	b26510b26b31	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

210

hello-appsysintelligent

2.0.1

1 of 1 See more

hello-app sysintelligent 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
sysintelligent/hello-app :2.0.1	77fb30df847d	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

1,880

system-upgrade-controllersystem-upgrade

0.2.13

1 of 1 See more

system-upgrade-controller system-upgrade 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/system-upgrade-controller :v0.20.1	aaf4dbf64057	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

125

system-upgrade-controllersystem-upgrade-controller

1.12.0

1 of 1 See more

system-upgrade-controller system-upgrade-controller 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/system-upgrade-controller :v0.20.1	aaf4dbf64057	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

125

headscaleszpadel-charts

0.30.2

1 of 3 See more

headscale szpadel-charts 0.30.2

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/tale/headplane :0.6.3	9476cc5adb12	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

1,880

terraform-controllerterraform-controller

0.0.20

1 of 1 See more

terraform-controller terraform-controller 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
absaoss/terraform-controller :v0.0.20	ad538a1285a0	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0

Open the chart page →

3,538

jenkinstestchart

0.1.9

1 of 2 See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

9,119

jenkinstest-jenkins

9.1.0

1 of 2 See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

9,119

base-clusterteuto-net

12.4.0

1 of 1 See more

base-cluster teuto-net 12.4.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :1.33.4	261a9ed843eb	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

436

tocktock

0.6.3

1 of 9 See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.5-debian-11-r6	6fe59ed5d79f	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

13,017

Container images carrying it

3,669 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0	1
v2fly/v2fly-core :latest	d06727b221fe	golang.org/x/net@v0.46.0	0.55.0	1
vearch/vearch :3.3.4	0768af33f9d9	golang.org/x/net@v0.10.0	0.55.0	1
veecode/devportal	a72cf5cb47b8	golang.org/x/net@v0.48.0	0.55.0	1
veecode/devportal-admin-ui :0.4.30	c69fd286b489	golang.org/x/net@v0.23.0	0.55.0	1
velero/velero :v1.9.0	277fbfaf8dcf	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0	1
velero/velero :v1.8.1	8d784580931c	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0	1
velero/velero :v1.18.0	e4d1e79be2ee	golang.org/x/net@v0.47.0	0.55.0	1
velero/velero-plugin-for-aws :v1.5.0	3d2ea7aab32d	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0	1
velero/velero-plugin-for-aws :v1.14.0	7e82f717f44e	golang.org/x/net@v0.47.0	0.55.0	1
versity/versitygw :v1.0.14	5192635d0353	golang.org/x/net@v0.40.0	0.55.0	1
versity/versitygw :v1.1.0	f730e0dbc1ef	golang.org/x/net@v0.49.0	0.55.0	1
vespaengine/vespa :8.526.15	69b160f58211	golang.org/x/net@v0.39.0	0.55.0	1
victoriametrics/operator :v0.65.0	716b89a3ed79	golang.org/x/net@v0.46.0	0.55.0	1
victoriametrics/operator :v0.47.2	71be93cfafb6	golang.org/x/net@v0.26.0	0.55.0	1
victoriametrics/operator :v0.68.3	f52e1bd679cb	golang.org/x/net@v0.49.0	0.55.0	1
victoriametrics/victoria-metrics :v1.93.5	77a9815d0640	golang.org/x/net@v0.15.0	0.55.0	1
victoriametrics/victoria-metrics :v1.120.0	a1cb2f3dfd45	golang.org/x/net@v0.40.0	0.55.0	1
victoriametrics/victoria-metrics :v1.95.1	f52723a08a44	golang.org/x/net@v0.18.0	0.55.0	1
victoriametrics/vmalert :v1.96.0	150cd08fde94	golang.org/x/net@v0.19.0	0.55.0	1
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0	1
vikunja/api :0.17.1	8cba0520bf8c	golang.org/x/net@v0.0.0-20210505024714-0287a6fb4125	0.55.0	1
vineyardcloudnative/vineyard-operator :latest	9d419aa18faa	golang.org/x/net@v0.23.0	0.55.0	1
vmware/kube-fluentd-operator :latest	f028c138a5f4	golang.org/x/net@v0.17.0	0.55.0	1
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	golang.org/x/net@v0.38.0	0.55.0	1
volcanosh/vc-scheduler :v1.12.1	b24ea8af2d16	golang.org/x/net@v0.38.0	0.55.0	1
volcanosh/vc-webhook-manager :v1.15.2	2fff65aad011	golang.org/x/net@v0.47.0	0.55.0	1
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	golang.org/x/net@v0.30.0	0.55.0	1
voltha/bbsim :1.16.7	d90403d58016	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.55.0	1
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0	1
voltha/bbsim-sadis-server :0.4.0	762b272d439e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0	1
vultr/cert-manager-webhook-vultr :v0.1.0	541c3e0aec58	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.55.0	1
vultr/vultr-cloud-controller-manager :v0.3.0	1806f17d620c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0	1
vultr/vultr-csi :v0.3.0	41d26735d437	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf	0.55.0	1
wait4x/wait4x :3.3.1	4dcd86307de1	golang.org/x/net@v0.39.0	0.55.0	1
wallarm/aih-scanner :2.7.11	f1cb26db1f5b	golang.org/x/net@v0.51.0	0.55.0	1
wallarm/aih-webhook :2.7.11	6363a9cd2ad8	golang.org/x/net@v0.53.0	0.55.0	1
wallarm/api-firewall :v0.9.6	4d45db0ff240	golang.org/x/net@v0.52.0	0.55.0	1
wallarm/ebpf-agent :0.11.0-rc0	c8920e60c726	golang.org/x/net@v0.22.0	0.55.0	1
wallarm/ingress-controller :5.3.10.1	a1fecfdf987e	golang.org/x/net@v0.34.0	0.55.0	1
wallarm/ingress-controller :4.8.0-1	a591b9c91570	golang.org/x/net@v0.10.0	0.55.0	1
wallarm/kong-kubernetes-ingress-controller :2.8	b55ff6cecbd5	golang.org/x/net@v0.4.0	0.55.0	1
wallarm/node-helpers :5.0.2-1	097cadc42336	golang.org/x/net@v0.26.0	0.55.0	1
wallarm/node-helpers :6.10.1	aecd88b24c51	golang.org/x/net@v0.48.0	0.55.0	1
wallarm/node-native-processing :0.23.0	7db2da8fce0b	golang.org/x/net@v0.50.0	0.55.0	1
wallarm/node-next :0.5.2	4314f3d2b918	golang.org/x/net@v0.28.0	0.55.0	1
wateim/lighthouse-launch :latest	2520149ee574	golang.org/x/net@v0.33.0	0.55.0	1
wavefronthq/prometheus-storage-adapter :latest	ded77b38c7c6	golang.org/x/net@v0.17.0	0.55.0	1
wavefronthq/wavefront-hpa-adapter :0.9.12	af5fef9a4768	golang.org/x/net@v0.17.0	0.55.0	1
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0	1