CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,017; of 17,790 indexed, latest versions
Container images: 3,695; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 3,017 of 17,790 indexed charts deploy, on 3,695 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,695

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

3,017 by stars

Chart

Latest

Affected images

Radar Score

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/net@v0.11.0	0.55.0
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

10,373

uptraceuptrace

2.0.2

1 of 2 See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
uptrace/uptrace :2.0.2	34a02c3b2d12	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

1,627

valkey-operatorvalkey

0.6.0

1 of 1 See more

valkey-operator valkey 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/valkey-io/valkey-operator :v0.6.0	52a0f1ed0c03	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

141

vaultvault

1.22.0

3 of 4 See more

vault vault 1.22.0

3 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.5	d870622d0040	golang.org/x/net@v0.48.0	0.55.0
hashicorp/vault :2.0.1	755355002715	golang.org/x/net@v0.54.0	0.55.0
prom/statsd-exporter :v0.29.0	632f70580492	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

4,266

vouchvouch

3.2.0

1 of 1 See more

vouch vouch 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	golang.org/x/net@v0.5.0	0.55.0

Open the chart page →

1,031

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/net@v0.13.0	0.55.0

Open the chart page →

1,350

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.55.0

Open the chart page →

2,245

api-firewallwallarm

0.9.6

1 of 1 See more

api-firewall wallarm 0.9.6

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
wallarm/api-firewall :v0.9.6	4d45db0ff240	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

1,000

wallarm-ingresswallarm

5.3.10-1

2 of 2 See more

wallarm-ingress wallarm 5.3.10-1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
wallarm/ingress-controller :5.3.10.1	a1fecfdf987e	golang.org/x/net@v0.34.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

1,301

wallarm-sidecarwallarm

6.13.1

1 of 3 See more

wallarm-sidecar wallarm 6.13.1

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/net@v0.22.0	0.55.0

Open the chart page →

965

argo-cdwenerme

10.9.1

2 of 3 See more

argo-cd wenerme 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/net@v0.50.0	0.55.0
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

3,003

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758	0.55.0

Open the chart page →

6,085

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/net@v0.0.0-20220325170049-de3da57026de	0.55.0
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0

Open the chart page →

10,047

buildkitdwiremind

0.33.0

1 of 1 See more

buildkitd wiremind 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.32.2-rootless	504731e577c2	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

1,161

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0

Open the chart page →

4,713

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0

Open the chart page →

4,049

adcs-issueradcs-issuer

3.0.2

1 of 1 See more

adcs-issuer adcs-issuer 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

829

kubernetes-etcd-backupadfinis

1.6.2

1 of 1 See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

1,851

no-latest-tag-webhookadmission-webhook-no-latest

1.0.14

1 of 1 See more

no-latest-tag-webhook admission-webhook-no-latest 1.0.14

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/omkar-shelke25/admission-webhook-no-latest :sha-3316545	5976a1d3236a	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

162

agentareaagentarea

0.0.18

3 of 16 See more

agentarea agentarea 0.0.18

3 of the 16 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/net@v0.27.0	0.55.0
temporalio/auto-setup :1.29.1	5b3502a3b685	golang.org/x/net@v0.35.0	0.55.0
temporalio/ui :2.39.0	b768f87f18b5	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

15,049

alertmanager-matrixalertmanager-matrix

0.1.16

1 of 1 See more

alertmanager-matrix alertmanager-matrix 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
silkeh/alertmanager_matrix :0.6.1	900010497f8c	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

461

clearml-servingallegroai

1.6.2

3 of 9 See more

clearml-serving allegroai 1.6.2

3 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.3	76dcf36e7d2a	golang.org/x/net@v0.4.0	0.55.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0	0.55.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

17,897

soft-servealphani-helm-charts

0.4.0

1 of 1 See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
charmcli/soft-serve :v0.4.0	39523c1a6ba8	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

3,119

smockerandrcuns

0.0.4

1 of 1 See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
andrcuns/smocker :0.18.5	b4a8eb20581a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

2,173

cloudflare-operatorankra-charts

0.2.0

1 of 1 See more

cloudflare-operator ankra-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
adyanth/cloudflare-operatordigest-pinned	6b168dc237d5	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

499

upcloud-csiankra-charts

0.4.0

8 of 8 See more

upcloud-csi ankra-charts 0.4.0

8 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.13	7a319b15cfc9	golang.org/x/net@v0.43.0	0.55.0
ghcr.io/upcloudltd/upcloud-csidigest-pinned	5af91c663788	golang.org/x/net@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v3.4.0	8b9c313c05f5	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.0	4fd21f36075b	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v4.2.1	818f35653f2e	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0
registry.k8s.io/sig-storage/snapshot-controller :v4.2.1	95587f8777d7	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

14,969

annotations-exporterannotations-exporter

0.5.0

1 of 1 See more

annotations-exporter annotations-exporter 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/alex123012/annotations-exporter :v0.5.0	4c2b8dbc798e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0

Open the chart page →

1,149

alazanteon

0.12.0

1 of 1 See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ddosify/alaz :v0.12.0	ea602056d9ce	golang.org/x/net@v0.20.0	0.55.0

Open the chart page →

3,395

anteonanteon

2.6.4

4 of 13 See more

anteon anteon 2.6.4

4 of the 13 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
chrislusf/seaweedfs :3.64	634b094b2183	golang.org/x/net@v0.21.0	0.55.0
ddosify/selfhosted_hammer :2.0.0	181965edb12e	golang.org/x/net@v0.8.0	0.55.0
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9	0.55.0
prom/prometheus :v2.37.9	8176adea328e	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

22,304

api-usage-serverapi-usage-server

1.16.0

1 of 1 See more

api-usage-server api-usage-server 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-server :1.16.0	8f9c32b866b0	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

740

gateway-helmappscode

0.0.0-latest

1 of 2 See more

gateway-helm appscode 0.0.0-latest

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/gateway :v0.0.1	a8a144f14889	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

1,096

scannerappscode

2026.1.15

3 of 3 See more

scanner appscode 2026.1.15

3 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/kine :v0.11.4	12889bbcd1e8	golang.org/x/net@v0.17.0	0.55.0
ghcr.io/appscode/scanner :v0.0.21	16907aae5de1	golang.org/x/net@v0.47.0	0.55.0
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

5,315

smtprelayappscode

2026.9.11

1 of 1 See more

smtprelay appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/smtprelay :v0.0.4	79c9c76a78e6	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

872

stash-enterpriseappscode

0.42.0

4 of 4 See more

stash-enterprise appscode 0.42.0

4 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0
ghcr.io/appscode/kubectl-nonroot :1.31	83d43cc41590	golang.org/x/net@v0.26.0	0.55.0
ghcr.io/stashed/stash-crd-installer :v0.42.1	d6c9b7a1f7b8	golang.org/x/net@v0.38.0	0.55.0
ghcr.io/stashed/stash-enterprise :v0.42.1	759f3850eda9	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

3,628

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

5,249

argocd-rbac-operatorargocd-rbac-operator

0.4.5

1 of 1 See more

argocd-rbac-operator argocd-rbac-operator 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-rbac-operator :v0.2.4	51dded00137a	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

961

kedaarieotech

0.1.0

2 of 3 See more

keda arieotech 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.16.0	02348a19aeae	golang.org/x/net@v0.30.0	0.55.0
ghcr.io/kedacore/keda-metrics-apiserver :2.16.0	73a2ebae4413	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

2,290

s3dartur9010

1.0.1

1 of 1 See more

s3d artur9010 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/siafoundation/s3d :bf33bf3	b3fcc85f7282	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

1,736

arvancloud-webhookarvancloud-webhook

1.0.0

1 of 1 See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

2,327

cert-exporterarzu

3.0.1

1 of 1 See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
joeelliott/cert-exporter :v2.7.0	b4acd14642d0	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0

Open the chart page →

2,819

siemassist-iot-cybersecurity-monitroting-siem

0.1.0

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0

Open the chart page →

10,740

dltbrokerassist-iot-distributed-broker

0.2.0

4 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

4 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
assistiot/distributed_broker :1.0.0	33e02dad168f	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

77,883

dltloggingassist-iot-logging-auditing

0.2.0

4 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

4 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
assistiot/logging_auditing :1.0.0	790dbb198e86	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

77,863

astradnsastradns

0.2.9

2 of 2 See more

astradns astradns 0.2.9

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	golang.org/x/net@v0.51.0	0.55.0
ghcr.io/astradns/astradns-operator :v0.2.9	09e58b62416a	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

2,649

cso-proxyav1o-charts

0.1.3

1 of 1 See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/net@v0.0.0-20210908191846-a5e095526f91	0.55.0

Open the chart page →

4,308

dex-k8sav1o-charts

0.2.1

1 of 1 See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.55.0

Open the chart page →

3,398

kube-image-webhookav1o-charts

0.1.3

1 of 1 See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0

Open the chart page →

3,731

kubebrowseravisto

1.4.0

1 of 1 See more

kubebrowser avisto 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/avistotelecom/kubebrowser :0.10.0	a354b8dc7e6a	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

677

db-backupballe-petersen

0.1.4

1 of 1 See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/net@v0.0.0-20191109021931-daa7c04131f5	0.55.0

Open the chart page →

4,821

music-assistantbdclark-helm-charts

0.4.13

1 of 1 See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.10.3	885872224fa5	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

3,702

Container images carrying it

3,695 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
udhos/forward :1.1.3	12e120d39fdb	golang.org/x/net@v0.10.0	0.55.0	1
udhos/gateboard :1.12.5	3acc0e7599bf	golang.org/x/net@v0.46.0	0.55.0	1
udhos/gateboard-discovery :1.9.5	5567c9363c4c	golang.org/x/net@v0.46.0	0.55.0	1
udhos/lambdaping :1.0.4	6bd2cf2ac732	golang.org/x/net@v0.33.0	0.55.0	1
udhos/mongoping :1.3.1	03b08b63f524	golang.org/x/net@v0.40.0	0.55.0	1
udhos/rabbitping :1.3.0	474c467bbf42	golang.org/x/net@v0.40.0	0.55.0	1
udhos/redis-enforce-expire :1.0.0	615b6a7d742e	golang.org/x/net@v0.52.0	0.55.0	1
udhos/secrets :1.0.6	daa2b4eaac09	golang.org/x/net@v0.39.0	0.55.0	1
udhos/snsping :1.2.9	6ae70677b6a3	golang.org/x/net@v0.33.0	0.55.0	1
udhos/token-server :1.0.9	728013f2fac1	golang.org/x/net@v0.44.0	0.55.0	1
uffizzi/uffizzi-cluster-operator :v1.4.5	14e528bbd926	golang.org/x/net@v0.8.0	0.55.0	1
uffizzi/uffizzi-cluster-operator :v1.6.5	5ca448a08783	golang.org/x/net@v0.8.0	0.55.0	1
uptrace/uptrace :2.0.2	34a02c3b2d12	golang.org/x/net@v0.42.0	0.55.0	1
utho/utho-app-operator :0.1.4	6e8a690e8b7a	golang.org/x/net@v0.26.0	0.55.0	1
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0	1
v2fly/v2fly-core :latest	d06727b221fe	golang.org/x/net@v0.46.0	0.55.0	1
vearch/vearch :3.3.4	0768af33f9d9	golang.org/x/net@v0.10.0	0.55.0	1
veecode/devportal	a72cf5cb47b8	golang.org/x/net@v0.48.0	0.55.0	1
veecode/devportal-admin-ui :0.4.30	c69fd286b489	golang.org/x/net@v0.23.0	0.55.0	1
velero/velero :v1.18.1	11459094b1b2	golang.org/x/net@v0.53.0	0.55.0	1
velero/velero :v1.9.0	277fbfaf8dcf	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0	1
velero/velero :v1.8.1	8d784580931c	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0	1
velero/velero :v1.18.0	e4d1e79be2ee	golang.org/x/net@v0.47.0	0.55.0	1
velero/velero-plugin-for-aws :v1.5.0	3d2ea7aab32d	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0	1
velero/velero-plugin-for-aws :v1.14.0	7e82f717f44e	golang.org/x/net@v0.47.0	0.55.0	1
versity/versitygw :v1.0.14	5192635d0353	golang.org/x/net@v0.40.0	0.55.0	1
versity/versitygw :v1.1.0	f730e0dbc1ef	golang.org/x/net@v0.49.0	0.55.0	1
vespaengine/vespa :8.526.15	69b160f58211	golang.org/x/net@v0.39.0	0.55.0	1
victoriametrics/operator :v0.65.0	716b89a3ed79	golang.org/x/net@v0.46.0	0.55.0	1
victoriametrics/operator :v0.47.2	71be93cfafb6	golang.org/x/net@v0.26.0	0.55.0	1
victoriametrics/operator :v0.68.3	f52e1bd679cb	golang.org/x/net@v0.49.0	0.55.0	1
victoriametrics/victoria-metrics :v1.93.5	77a9815d0640	golang.org/x/net@v0.15.0	0.55.0	1
victoriametrics/victoria-metrics :v1.120.0	a1cb2f3dfd45	golang.org/x/net@v0.40.0	0.55.0	1
victoriametrics/victoria-metrics :v1.95.1	f52723a08a44	golang.org/x/net@v0.18.0	0.55.0	1
victoriametrics/vmalert :v1.96.0	150cd08fde94	golang.org/x/net@v0.19.0	0.55.0	1
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0	1
vikunja/api :0.17.1	8cba0520bf8c	golang.org/x/net@v0.0.0-20210505024714-0287a6fb4125	0.55.0	1
vineyardcloudnative/vineyard-operator :latest	9d419aa18faa	golang.org/x/net@v0.23.0	0.55.0	1
vmware/kube-fluentd-operator :latest	f028c138a5f4	golang.org/x/net@v0.17.0	0.55.0	1
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	golang.org/x/net@v0.38.0	0.55.0	1
volcanosh/vc-scheduler :v1.12.1	b24ea8af2d16	golang.org/x/net@v0.38.0	0.55.0	1
volcanosh/vc-webhook-manager :v1.15.2	2fff65aad011	golang.org/x/net@v0.47.0	0.55.0	1
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	golang.org/x/net@v0.30.0	0.55.0	1
voltha/bbsim :1.16.7	d90403d58016	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.55.0	1
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0	1
voltha/bbsim-sadis-server :0.4.0	762b272d439e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0	1
vultr/cert-manager-webhook-vultr :v0.1.0	541c3e0aec58	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.55.0	1
vultr/vultr-cloud-controller-manager :v0.3.0	1806f17d620c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0	1
vultr/vultr-csi :v0.3.0	41d26735d437	golang.org/x/net@v0.0.0-20210917221730-978cfadd31cf	0.55.0	1
wait4x/wait4x :3.3.1	4dcd86307de1	golang.org/x/net@v0.39.0	0.55.0	1