CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,017; of 17,790 indexed, latest versions
Container images: 3,695; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 3,017 of 17,790 indexed charts deploy, on 3,695 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,695

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

3,017 by stars

Chart

Latest

Affected images

Radar Score

ceph-csi-rbdceph-csi

3.17.1

6 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/net@v0.53.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/net@v0.47.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/net@v0.51.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

4,103

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	golang.org/x/net@v0.52.0	0.55.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	golang.org/x/net@v0.52.0	0.55.0
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

6,415

csi-driver-nfscsi-driver-nfs

4.13.4

4 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.4

4 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

3,391

mariadb-operatormariadb-operator

26.6.0

1 of 1 See more

mariadb-operator mariadb-operator 26.6.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/mariadb-operator/mariadb-operator :26.6.0	a5e17b48f08e	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

377

atlantisatlantis

6.15.1

1 of 1 See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

1,899

grafana-agentgrafana

0.44.2

1 of 2 See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/net@v0.33.0	0.55.0

Open the chart page →

3,526

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80	0.55.0

Open the chart page →

2,461

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.55.0
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/net@v0.10.0	0.55.0
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/net@v0.0.0-20220706163947-c90051bbdb60	0.55.0
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

32,420

cockroachdbcockroachdb

22.0.3

1 of 3 See more

cockroachdb cockroachdb 22.0.3

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	07a49acec18d	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

763

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0	0.55.0

Open the chart page →

10,695

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

2,228

signozsignoz

0.141.1

2 of 5 See more

signoz signoz 0.141.1

2 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0	0.55.0
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

7,607

community-operatormongodb-helm-charts

0.13.0

1 of 1 See more

community-operator mongodb-helm-charts 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

1,126

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

716

node-local-dnsdeliveryhero

2.9.2

1 of 1 See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/net@v0.46.0	0.55.0

Open the chart page →

1,708

rancherrancher-latest

2.15.1

2 of 2 See more

rancher rancher-latest 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/net@v0.52.0	0.55.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

1,487

sealed-secretsbitnami

2.5.19

1 of 1 See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

643

difydouban

0.10.0

2 of 6 See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	golang.org/x/net@v0.42.0	0.55.0
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

19,544

dragonflydragonfly

1.8.4

1 of 3 See more

dragonfly dragonfly 1.8.4

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dragonflyoss/scheduler :v2.5.2-rc.0	6d710dc2bae0	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

3,830

secrets-store-csi-driversecret-store-csi-driver

1.6.1

2 of 4 See more

secrets-store-csi-driver secret-store-csi-driver 1.6.1

2 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.18.0	c4cc074199c0	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

1,802

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

2,139

opensearch-operatoropensearch-operator

3.0.2

1 of 1 See more

opensearch-operator opensearch-operator 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-operator :3.0.0-alpha	f78bbdd1a386	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

610

pulsarapache

4.7.0

6 of 10 See more

pulsar apache 4.7.0

6 of the 10 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.47.0	0.55.0
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/net@v0.49.0	0.55.0
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
victoriametrics/operator :v0.68.3	f52e1bd679cb	golang.org/x/net@v0.49.0	0.55.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

9,891

miniocloudpirates-minio

0.13.4

1 of 1 See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

968

vertical-pod-autoscalercowboysysop

11.1.1

4 of 4 See more

vertical-pod-autoscaler cowboysysop 11.1.1

4 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	golang.org/x/net@v0.19.0	0.55.0
registry.k8s.io/autoscaling/vpa-admission-controller :1.5.1	9928d59477fb	golang.org/x/net@v0.43.0	0.55.0
registry.k8s.io/autoscaling/vpa-recommender :1.5.1	e629c61b75eb	golang.org/x/net@v0.43.0	0.55.0
registry.k8s.io/autoscaling/vpa-updater :1.5.1	cba2aa4b3239	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

6,960

difydify-helm

0.38.0

1 of 11 See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.15	750e1111426e	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

22,214

pyroscopegrafana

2.3.1

2 of 3 See more

pyroscope grafana 2.3.1

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.12.2	f94b1c82957a	golang.org/x/net@v0.46.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

3,214

botkubeinfracloudio

1.14.0

1 of 1 See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

1,104

operatorminio-operator

7.1.1

1 of 1 See more

operator minio-operator 7.1.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/minio/operator :v7.1.1	cd587f60c43d	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

874

ambassadordatawire

6.9.5

1 of 2 See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0

Open the chart page →

4,093

oktetookteto

0.0.0-2026-08-17

3 of 10 See more

okteto okteto 0.0.0-2026-08-17

3 of the 10 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/okteto/backend :0.0.0-2026-08-17	629bdce31b4d	golang.org/x/net@v0.47.0	0.55.0
ghcr.io/okteto/buildkit :0.0.0-2026-08-17	14527ca5d2a9	golang.org/x/net@v0.35.0	0.55.0
ghcr.io/okteto/okteto :3.22.0	4585017f52f6	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

5,532

hydraory

0.64.0

1 of 2 See more

hydra ory 0.64.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
oryd/hydra :v26.2.0	ff67c7fb5f95	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

1,163

prometheus-msteamsprometheus-msteams

1.3.6

1 of 1 See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/prometheusmsteams/prometheus-msteams :v1.5.3	a9f4d31ab811	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

941

proxmox-csi-pluginproxmox-csi

0.5.12

3 of 7 See more

proxmox-csi-plugin proxmox-csi 0.5.12

3 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

1,828

volsyncbackube-helm-charts

0.16.0

1 of 1 See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/backube/volsync :0.16.0	0d03a6aad575	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

1,386

concourseconcourse

20.3.0

1 of 2 See more

concourse concourse 20.3.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
concourse/concourse :8.3.0	40a143ce5873	golang.org/x/net@v0.50.0	0.55.0

Open the chart page →

2,054

san-iscsi-csienix

4.0.2

1 of 7 See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
enix/san-iscsi-csi :v4.0.2	f963da81ecf7	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b	0.55.0

Open the chart page →

4,168

headscalegabe565

0.16.0

1 of 2 See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

2,003

oncallgrafana

1.16.5

7 of 12 See more

oncall grafana 1.16.5

7 of the 12 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/net@v0.26.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.8.0	595c548dee6f	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.8.0	fd798a5a773e	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

16,282

k8sgpt-operatork8sgpt

0.2.29

2 of 2 See more

k8sgpt-operator k8sgpt 0.2.29

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/k8sgpt-ai/k8sgpt-operator :v0.2.29	82d0adcce816	golang.org/x/net@v0.53.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

980

openbaoopenbao

0.29.4

1 of 2 See more

openbao openbao 0.29.4

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

1,516

kratosory

0.64.0

1 of 1 See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
oryd/kratos :v26.2.0	2a13bb8d362c	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

873

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.3	f09282d281f6	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0

Open the chart page →

11,431

aws-cloudwatch-metricsaws

0.0.11

1 of 1 See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

1,563

zabbixcetic

3.1.3

1 of 5 See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

33,928

csi-driver-smbcsi-driver-smb

1.20.3

3 of 6 See more

csi-driver-smb csi-driver-smb 1.20.3

3 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

3,005

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0

Open the chart page →

4,925

hpe-csi-driverhpe-storage

3.3.0

3 of 14 See more

hpe-csi-driver hpe-storage 3.3.0

3 of the 14 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

1,700

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

2,373

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

1,460

Container images carrying it

3,695 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	2ef460356b17	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.13.1	34796e9f760b	golang.org/x/net@v0.20.0	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.10.2	8319aa662b49	golang.org/x/net@v0.7.0	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	db6ceff2aab4	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa :v1.10.2	eb612b929eaa	golang.org/x/net@v0.7.0	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	30ce73388ae5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.13.1	53d9aa4d2c7a	golang.org/x/net@v0.20.0	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	golang.org/x/net@v0.7.0	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	b2cd45b8a8a4	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	bac158dfb0c7	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/default-domain	5e0429b70299	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.2.5	23baa1932232	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping	e384a295069b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.10.2	f66c41ad7a73	golang.org/x/net@v0.7.0	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook	15f1ce7f35b4	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.10.2	7368aaddf2be	golang.org/x/net@v0.7.0	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.2.5	847bb97e3844	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	1282a399cbb9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.10.2	4305209ce498	golang.org/x/net@v0.7.0	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.13.1	700c69915dc7	golang.org/x/net@v0.20.0	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.2.5	9084ea8498ea	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	d27b4495ccc3	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.55.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	f16c0e022203	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0	1
gcr.io/kubecost1/cost-model :prod-2.5.5	02b90651367f	golang.org/x/net@v0.33.0	0.55.0	1
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	golang.org/x/net@v0.18.0	0.55.0	1
gcr.io/kubecost1/cost-model :prod-1.82.2	989a60847416	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	golang.org/x/net@v0.34.0	0.55.0	1
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.55.0	1
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.55.0	1
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	golang.org/x/net@v0.21.0	0.55.0	1
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
gcr.io/ml-pipeline/cache-server :2.3.0	293941ee4f65	golang.org/x/net@v0.21.0	0.55.0	1
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
gcr.io/ml-pipeline/persistenceagent :2.3.0	109ac1b38c41	golang.org/x/net@v0.21.0	0.55.0	1
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
gcr.io/ml-pipeline/scheduledworkflow :2.3.0	f7e67e0bc071	golang.org/x/net@v0.21.0	0.55.0	1
gcr.io/ml-pipeline/viewer-crd-controller :2.0.0-alpha.5	34403f9f94be	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
gcr.io/ml-pipeline/viewer-crd-controller :2.3.0	8cf8213d69e4	golang.org/x/net@v0.21.0	0.55.0	1
gcr.io/ml-pipeline/workflow-controller :v3.3.8-license-compliance	6c8e4e2a6443	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
gcr.io/press-labs-public/dashboard :1.8.19	b88f88070fb0	golang.org/x/net@v0.10.0	0.55.0	1
gcr.io/projectsigstore/cosigned	784518ff3ee7	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.55.0	1
gcr.io/projectsigstore/policy-webhook	82940e8c3e0d	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.55.0	1
gcr.io/spotit-today/spot-ocean-admission-controller :0.1.6	4f634aeb31b8	golang.org/x/net@v0.44.0	0.55.0	1
ghcr.io/0xerr0r/blocky :v0.29.0	a6d99f323d30	golang.org/x/net@v0.51.0	0.55.0	1
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
ghcr.io/abcdesktopio/keysgenerator :4.4	ca0662bc92a4	golang.org/x/net@v0.49.0	0.55.0	1
ghcr.io/abstract-foundation/zksync-external-node-sidecar :v1.0.0	3e705d0eb1ce	golang.org/x/net@v0.7.0	0.55.0	1