CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,999; of 17,797 indexed, latest versions
Container images: 3,673; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 2,999 of 17,797 indexed charts deploy, on 3,673 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,673

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

2,999 by stars

Chart

Latest

Affected images

Radar Score

helm-controllerazureorkestra

0.1.1

2 of 2 See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
fluxcd/helm-controller :v0.9.0	92b891e495d8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0
fluxcd/source-controller :v0.10.0	31a8c79a6803	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0

Open the chart page →

7,723

keptn-addonsazureorkestra

0.1.0

3 of 4 See more

keptn-addons azureorkestra 0.1.0

3 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
keptn/distributor :0.8.3	6bc3df9e0d6a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
keptncontrib/prometheus-service :0.6.0	29969dd547de	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.55.0
keptnsandbox/job-executor-service :0.1.3	6e6d323dd7ae	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.55.0

Open the chart page →

10,629

prometheusazureorkestra

14.8.0

3 of 6 See more

prometheus azureorkestra 14.8.0

3 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.55.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.55.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.55.0

Open the chart page →

9,669

krakendbaboulinet

0.1.34

1 of 1 See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :2.7.0	9219cda867e2	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

1,198

ragflowbaboulinet

0.1.1

1 of 5 See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

5,909

prometheus-blackbox-exporterbackbox-exporter

7.8.0

1 of 1 See more

prometheus-blackbox-exporter backbox-exporter 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.23.0	ca04aa9d9093	golang.org/x/net@v0.2.0	0.55.0

Open the chart page →

1,501

backlokto-operatorbacklokto

0.0.1

1 of 1 See more

backlokto-operator backlokto 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
piblokto/backlokto-operator :v0.0.20	963cda71e393	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

694

balance-registrationbalance-registration

0.1.0

1 of 4 See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
conduction/balance-registration-php :dev	c36094a41369	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

8,417

qbittorrent-vpnbdclark-helm-charts

0.7.6

1 of 2 See more

qbittorrent-vpn bdclark-helm-charts 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
qmcgaw/gluetun :v3.41.1	1a5bf4b4820a	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

1,010

berichtserviceberichtservice

1.0.0

1 of 3 See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/berichtservice-php :latest	ee6a21e66ff0	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

7,352

trident-operatorberyju-org

21.10.0

1 of 1 See more

trident-operator beryju-org 21.10.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
netapp/trident-operator :21.10.0	49cfe552d9c2	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0

Open the chart page →

2,079

algorand-participationbiatec-repo

4.4.1

1 of 1 See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	golang.org/x/net@v0.35.0	0.55.0

Open the chart page →

7,266

algorand-relaybiatec-repo

4.4.1

1 of 1 See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

5,138

mx-nodebicarus-labs

0.1.0

1 of 1 See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.55.0

Open the chart page →

8,086

mx-notifierbicarus-labs

1.1.9

1 of 1 See more

mx-notifier bicarus-labs 1.1.9

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bicarus/mx-notifier :1.1.8	bed688d16762	golang.org/x/net@v0.2.0	0.55.0

Open the chart page →

3,771

wg-access-serverbicarus-labs

0.9.9

1 of 1 See more

wg-access-server bicarus-labs 0.9.9

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bicarus/wg-access-server :v0.8.2	06cab48e9334	golang.org/x/net@v0.0.0-20220418201149-a630d4f3e7a2	0.55.0

Open the chart page →

2,755

bitpokebitpoke

1.8.19

1 of 1 See more

bitpoke bitpoke 1.8.19

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gcr.io/press-labs-public/dashboard :1.8.19	b88f88070fb0	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

2,343

stackbitpoke

0.12.4

5 of 6 See more

stack bitpoke 0.12.4

5 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/net@v0.8.0	0.55.0
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/net@v0.8.0	0.55.0
bitpoke/wordpress-operator :v0.12.2	7fb3aad37b5f	golang.org/x/net@v0.8.0	0.55.0
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.3.0	549e71a6ca24	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

9,900

wordpress-operatorbitpoke

0.12.4

1 of 1 See more

wordpress-operator bitpoke 0.12.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitpoke/wordpress-operator :v0.12.4	21284d1df473	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

1,124

sm-operatorbitwarden

2.0.3

1 of 1 See more

sm-operator bitwarden 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/bitwarden/sm-operator :2.1.0	846624161f32	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

533

baserowblackbird-cloud

1.0.17

1 of 6 See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

10,234

prometheus-domain-exporterblackbox-domain-exporter

1.0.0

1 of 1 See more

prometheus-domain-exporter blackbox-domain-exporter 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bulich/domain-exporter :latest	6d0b780f7c7b	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

1,408

firehoseblip-firehose

0.0.18

3 of 11 See more

firehose blip-firehose 0.0.18

3 of the 11 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
blipai/deckard :0.0.28	737d5d19a312	golang.org/x/net@v0.10.0	0.55.0
hashicorp/vault :1.15.2	6b4e5dadf082	golang.org/x/net@v0.17.0	0.55.0
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

13,527

csi-driver-nfsbook-k8sinfra-v2

4.12.1

6 of 6 See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

6 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	golang.org/x/net@v0.40.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.3.0	bc7be893ecc3	golang.org/x/net@v0.39.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	golang.org/x/net@v0.40.0	0.55.0
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

6,269

grafanabook-k8sinfra-v2

8.8.2

1 of 1 See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0	0.55.0

Open the chart page →

1,813

jaegerbook-k8sinfra-v2

3.4.0

3 of 5 See more

jaeger book-k8sinfra-v2 3.4.0

3 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0	0.55.0
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0	0.55.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

19,351

jenkinsbook-k8sinfra-v2

5.1.12

1 of 2 See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.440.3-jdk17	de4fea113221	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

8,346

kube-prometheus-stackbook-k8sinfra-v2

65.5.1

5 of 6 See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

5 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :11.2.2-security-01	464eac539793	golang.org/x/net@v0.28.0	0.55.0
quay.io/prometheus-operator/prometheus-operator :v0.77.2	af92db7eac86	golang.org/x/net@v0.29.0	0.55.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

6,049

metallbbook-k8sinfra-v2

0.13.10

2 of 3 See more

metallb book-k8sinfra-v2 0.13.10

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.13.10	1b33357b3595	golang.org/x/net@v0.8.0	0.55.0
quay.io/metallb/speaker :v0.13.10	00406ccb1fa0	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

3,857

nfs-subdir-external-provisionerbook-k8sinfra-v2

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner book-k8sinfra-v2 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.0	3ce0fdba4d8e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

2,745

prometheusbook-k8sinfra-v2

26.0.1

6 of 6 See more

prometheus book-k8sinfra-v2 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/net@v0.30.0	0.55.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0	0.55.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.55.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/net@v0.29.0	0.55.0

Open the chart page →

5,312

pyroscopebook-k8sinfra-v2

1.10.0

2 of 3 See more

pyroscope book-k8sinfra-v2 1.10.0

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.1.1	c3dac4e26471	golang.org/x/net@v0.24.0	0.55.0
grafana/pyroscope :1.10.0	319bf32ae06b	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

3,258

tempobook-k8sinfra-v2

1.10.3

1 of 1 See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

1,867

boundary-softsciboundary-softsci

0.2.4

1 of 1 See more

boundary-softsci boundary-softsci 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
hashicorp/boundary :latest	76a201954ca0	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

734

bitmagnetbrandan-schmitz-helm-charts

1.0.6

1 of 2 See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

1,722

node-appbryopsida

0.5.1

1 of 2 See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

14,576

buildkitbuildkit

0.1.0

1 of 1 See more

buildkit buildkit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
moby/buildkit :master-rootless	07115a67cd22	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

620

buildkit-privilegedbuildkit-privileged

0.1.0

1 of 1 See more

buildkit-privileged buildkit-privileged 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
moby/buildkit :master	bc964521ee58	golang.org/x/net@v0.50.0	0.55.0

Open the chart page →

403

butane-operatorbutane-operator

0.3.0

2 of 2 See more

butane-operator butane-operator 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/naval-group/butane-operator :v0.1.1-rc2	85818b510780	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/net@v0.21.0	0.55.0

Open the chart page →

1,403

butlercibutlerci

0.1.0

1 of 1 See more

butlerci butlerci 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
etejeda/butlerci :0.1.0	737d58183abc	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.55.0

Open the chart page →

2,375

accelerationbuttahtoast

0.1.0

1 of 1 See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
goharbor/harbor-acceld :0.2.13	451103a6c8d8	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

1,409

fluobuttahtoast

0.1.0

1 of 1 See more

fluo buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/flatcar-linux-update-operator :v0.10.0-rc1	f9063e20b1f6	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

1,299

kubermatic-operatorbuttahtoast

2.24.5

1 of 1 See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

2,781

kubevirt-managerbuttahtoast

0.1.3

1 of 1 See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubevirtmanager/kubevirt-manager :1.3.3	df3ea27d4a9e	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

1,497

miniobysamio

1.0.3

1 of 1 See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

1,084

caddycaddy

0.0.4

1 of 1 See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/caddy :2.11.2-alpine	834468128c76	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

1,677

etcdcagriekin

0.1.5

1 of 1 See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

899

kafkacagriekin

0.2.0

1 of 2 See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

2,402

ct-singlecalltelemetry

0.8.4

1 of 7 See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.55.0

Open the chart page →

10,672

stablecalltelemetry

0.7.1

1 of 9 See more

stable calltelemetry 0.7.1

1 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.55.0

Open the chart page →

7,703

Container images carrying it

3,673 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/alpineworks/katalog-agent :v1.0.4	8f50bd568c2b	golang.org/x/net@v0.29.0	0.55.0	1
ghcr.io/alpineworks/katalog-backend :v1.0.7	7e7a26393cd1	golang.org/x/net@v0.29.0	0.55.0	1
ghcr.io/alpineworks/katalog-migrations :v1.0.5	62c44a384e13	golang.org/x/net@v0.29.0	0.55.0	1
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy :v1.0.0	6e9ced773732	golang.org/x/net@v0.40.0	0.55.0	1
ghcr.io/analogj/scrutiny :master-omnibus	18689773150d	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
ghcr.io/analogj/scrutiny :v0.9.2-web	71be54e99608	golang.org/x/net@v0.49.0	0.55.0	1
ghcr.io/andibraeu/cert-manager-webhook-inwx :v0.9.0	f015e745983e	golang.org/x/net@v0.48.0	0.55.0	1
ghcr.io/andylibrian/terjang :latest	20a46b199247	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.55.0	1
ghcr.io/angelnu/dnsmadeeasy-webhook :v1.9.0	a5ca158b1f02	golang.org/x/net@v0.36.0	0.55.0	1
ghcr.io/angelnu/gateway-admision-controller :v3.12.0	6f6ab596afd5	golang.org/x/net@v0.30.0	0.55.0	1
ghcr.io/angelscloud/prometheus-optimizer :latest	744bc929a579	golang.org/x/net@v0.18.0	0.55.0	1
ghcr.io/antnsn/mal-sync :v1.0.5	2f06e72cef36	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/aplulu/hakoniwa :0.1.0	accf0b921388	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/ace :v0.2.0	b8e03da90e70	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/acerproxy :v0.2.0	21de3771fdd5	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/aceshifter :v0.0.3	e5f5c254a55a	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/auditor :v0.0.1	c62c89ee706d	golang.org/x/net@v0.0.0-20220531201128-c960675eff93	0.55.0	1
ghcr.io/appscode/aws-credential-manager :v0.1.0	0511bbe501c3	golang.org/x/net@v0.53.0	0.55.0	1
ghcr.io/appscode/azure-credential-manager :v0.1.0	f5c797f7fbe7	golang.org/x/net@v0.49.0	0.55.0	1
ghcr.io/appscode/capa-vpc-peering-operator :v0.0.4	b1557553a2b3	golang.org/x/net@v0.17.0	0.55.0	1
ghcr.io/appscode/capi-ops-manager :v0.0.5	7465f35b684c	golang.org/x/net@v0.33.0	0.55.0	1
ghcr.io/appscode/cattleset :v0.0.1	45554a03e448	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/cert-manager-webhook-ace :v0.0.2	dc6b5fdcec06	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/cloudflare-dns-proxy :v0.0.5	dfbef0285e14	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/cluster-connector :v0.0.14	0efd9d9ef6ca	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/docker-machine-operator :v0.0.4	81f6007abb4e	golang.org/x/net@v0.14.0	0.55.0	1
ghcr.io/appscode/falco-ui-server :v0.0.6	6ec488d89b56	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/fileserver :v0.0.2	b1857871e06c	golang.org/x/net@v0.26.0	0.55.0	1
ghcr.io/appscode/gcp-credential-manager :v0.1.0	b58345fe8209	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/gh-ci-webhook :v0.0.20	36ce246d884e	golang.org/x/net@v0.33.0	0.55.0	1
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/grafana :v2025.2.3	67d18880448c	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0	1
ghcr.io/appscode/inbox-agent :v0.0.6	6b99ee9feece	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/kube-rbac-proxy :v0.18.2	7de54b6dedc8	golang.org/x/net@v0.31.0	0.55.0	1
ghcr.io/appscode/kube-rbac-proxy :v0.15.0	d8cc6ffb9819	golang.org/x/net@v0.17.0	0.55.0	1
ghcr.io/appscode/license-proxyserver :v0.0.8	d6c2532ea386	golang.org/x/net@v0.19.0	0.55.0	1
ghcr.io/appscode/offline-license-server :v0.0.76	e4b66308d8f6	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/operator-shard-manager :v0.0.6	4a16c6ccecb8	golang.org/x/net@v0.53.0	0.55.0	1
ghcr.io/appscode/pgoutbox :v0.0.4	a96e06ec5e9f	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/scanner :v0.0.21	16907aae5de1	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/smtprelay :v0.0.4	79c9c76a78e6	golang.org/x/net@v0.34.0	0.55.0	1
ghcr.io/appscode/storage-metrics-server :v0.1.0	9cb4acb742a9	golang.org/x/net@v0.48.0	0.55.0	1
ghcr.io/appscode/supervisor :v0.0.12	23affde10a92	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/taskqueue :v0.0.3	6877c958a3c6	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/trickster :v2.0.0	cdbbed831f28	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	golang.org/x/net@v0.26.0	0.55.0	1
ghcr.io/appscode/vcd-lb-gc :v0.1.0	524c4045cd21	golang.org/x/net@v0.23.0	0.55.0	1
ghcr.io/aquasecurity/trivy-operator :0.16.0	a608b798fda5	golang.org/x/net@v0.14.0	0.55.0	1
ghcr.io/argelbargel/vault-raft-snapshot-agent :v0.12.5	345174727a2b	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/arpa-network/node-client :latest	657a2c9f6e6d	golang.org/x/net@v0.24.0	0.55.0	1