CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,017; of 17,790 indexed, latest versions
Container images: 3,695; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 3,017 of 17,790 indexed charts deploy, on 3,695 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,695

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

3,017 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

91.4.1

1 of 6 See more

kube-prometheus-stack prometheus-community 91.4.1

1 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

655

argo-cdargo

10.9.1

2 of 3 See more

argo-cd argo 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/net@v0.50.0	0.55.0
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

3,003

ingress-nginxingress-nginx

4.15.1

2 of 2 See more

ingress-nginx ingress-nginx 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	golang.org/x/net@v0.52.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

1,548

harborharbor

1.19.2

2 of 8 See more

harbor harbor 1.19.2

2 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	golang.org/x/net@v0.54.0	0.55.0
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

1,686

jenkinsjenkinsci

5.9.62

1 of 2 See more

jenkins jenkinsci 5.9.62

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-jdk21	c1e4c349365f	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

2,538

gitlab-runnergitlab

0.92.2

1 of 1 See more

gitlab-runner gitlab 0.92.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.3.2	5448611a3c54	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

290

airflowapache-airflow

1.22.0

1 of 4 See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/prometheus/statsd-exporter :v0.30.0	378cb79c4ac7	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

3,218

velerovmware-tanzu

12.1.0

1 of 1 See more

velero vmware-tanzu 12.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.1	11459094b1b2	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

1,347

metallbmetallb

0.16.1

3 of 4 See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	golang.org/x/net@v0.53.0	0.55.0
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	golang.org/x/net@v0.39.0	0.55.0
quay.io/metallb/speaker :v0.16.1	16561e96531e	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

2,149

argo-workflowsargo

2.0.6

1 of 3 See more

argo-workflows argo 2.0.6

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-workflows-crdinstaller :v4.1.3	94a031823f2a	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

259

rancherrancher-stable

2.15.1

2 of 2 See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/net@v0.52.0	0.55.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

1,487

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

2,745

artifact-hubartifact-hub

1.23.0

3 of 7 See more

artifact-hub artifact-hub 1.23.0

3 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	golang.org/x/net@v0.48.0	0.55.0
artifacthub/scanner :v1.23.0	2d8365601f0e	golang.org/x/net@v0.48.0	0.55.0
artifacthub/tracker :v1.23.0	5368d21a6e5c	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

10,840

alloygrafana

1.12.1

1 of 2 See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.91.0	7d9e4eea5f11	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

1,151

prometheus-blackbox-exporterprometheus-community

11.18.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

600

deschedulerdescheduler

0.36.0

1 of 1 See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

576

argo-cdargo-cd-oci

10.9.1

2 of 3 See more

argo-cd argo-cd-oci 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/net@v0.50.0	0.55.0
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

3,003

jupyterhubjupyterhub

4.4.2

1 of 7 See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

7,937

mimir-distributedgrafana

6.2.0

2 of 6 See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0	0.55.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0	0.55.0

Open the chart page →

4,548

natsnats

2.14.6

1 of 3 See more

nats nats 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.7	ffce8bd10338	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

2,315

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

1,773

falcofalcosecurity

9.1.0

3 of 3 See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
falcosecurity/falco :0.44.1	d0cfe422d6ac	golang.org/x/net@v0.49.0	0.55.0
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	golang.org/x/net@v0.53.0	0.55.0
falcosecurity/falcoctl :0.13.0	0eeb79adc580	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

5,398

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0

Open the chart page →

2,315

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

1,369

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

976

grafanagrafana-community

13.2.5

1 of 1 See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

432

victoria-metrics-k8s-stackvictoriametrics

0.92.1

2 of 7 See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	golang.org/x/net@v0.49.0	0.55.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

1,910

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	golang.org/x/net@v0.2.0	0.55.0

Open the chart page →

1,445

openebsopenebs

4.6.1

15 of 35 See more

openebs openebs 4.6.1

15 of the 35 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/net@v0.37.0	0.55.0
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/net@v0.34.0	0.55.0
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	golang.org/x/net@v0.38.0	0.55.0
openebs/lvm-driver :1.10.1	41f73aba7f31	golang.org/x/net@v0.48.0	0.55.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0	0.55.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	golang.org/x/net@v0.34.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	golang.org/x/net@v0.34.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	golang.org/x/net@v0.43.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	golang.org/x/net@v0.39.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	golang.org/x/net@v0.34.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	golang.org/x/net@v0.31.0	0.55.0
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/net@v0.31.0	0.55.0

Open the chart page →

24,128

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

937

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	golang.org/x/net@v0.12.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.55.0

Open the chart page →

2,890

vpafairwinds-stable

5.0.1

1 of 4 See more

vpa fairwinds-stable 5.0.1

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

1,233

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.55.0

Open the chart page →

2,059

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

3,118

zabbixzabbix-community

7.1.0

1 of 5 See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

13,880

graylogkong-z

3.0.33

1 of 5 See more

graylog kong-z 3.0.33

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

2,701

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	golang.org/x/net@v0.50.0	0.55.0
1password/connect-sync :1.8.2	6297ca6136c0	golang.org/x/net@v0.50.0	0.55.0

Open the chart page →

2,584

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

1,984

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/net@v0.29.0	0.55.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/net@v0.29.0	0.55.0

Open the chart page →

2,497

openfaasopenfaas

15.0.13

1 of 6 See more

openfaas openfaas 15.0.13

1 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/faas-netes :0.18.17	6cfe35401d25	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

3,558

flux2fluxcd-community

2.19.0

1 of 7 See more

flux2 fluxcd-community 2.19.0

1 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

3,006

jaeger-operatorjaegertracing

2.57.0

1 of 1 See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	golang.org/x/net@v0.29.0	0.55.0

Open the chart page →

566

netboxnetbox

8.3.77

1 of 5 See more

netbox netbox 8.3.77

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/kubectl :v1.36.2	06c7a7a97727	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

1,068

vault-secrets-operatorhashicorp

1.5.1

1 of 2 See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

1,054

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

1,374

snapshot-controllerpiraeus-charts

5.2.0

1 of 1 See more

snapshot-controller piraeus-charts 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

235

rocketchatrocketchat-server

7.0.2

3 of 12 See more

rocketchat rocketchat-server 7.0.2

3 of the 12 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0	0.55.0
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/net@v0.7.0	0.55.0
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

12,286

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

2,109

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	golang.org/x/net@v0.33.0	0.55.0
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

2,944

ceph-csi-cephfsceph-csi

3.17.1

6 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/net@v0.53.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/net@v0.47.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/net@v0.51.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

4,103

Container images carrying it

3,695 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	golang.org/x/net@v0.23.0	0.55.0	1
ghcr.io/crashappsec/chalk-operator :v0.1.1	28eee62e9bfa	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/crazy-max/cloudflared :2025.9.1	9b4e856d18f6	golang.org/x/net@v0.40.0	0.55.0	1
ghcr.io/cronschedules/cronjob-scale-down-operator :0.4.4	1c4e803d7169	golang.org/x/net@v0.52.0	0.55.0	1
ghcr.io/csepulveda/trivy-webhook-aws-security-hub :v0.1.20	6836b779b060	golang.org/x/net@v0.50.0	0.55.0	1
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/net@v0.17.0	0.55.0	1
ghcr.io/cubefs/cfs-csi-driver :3.2.0.150.0	8723616a976a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
ghcr.io/cybozu-go/accurate :1.9.0	7877e91ed723	golang.org/x/net@v0.53.0	0.55.0	1
ghcr.io/danieldonoghue/vault-sync-operator :v0.0.1-beta.3	8d7ec69a193c	golang.org/x/net@v0.52.0	0.55.0	1
ghcr.io/daocloud/crproxy/crproxy :v0.8.0	ee1eb3c9c9a1	golang.org/x/net@v0.26.0	0.55.0	1
ghcr.io/dapr/injector :1.17.0-rc.3	7a2fd888ed5f	golang.org/x/net@v0.48.0	0.55.0	1
ghcr.io/dapr/operator :1.17.0-rc.3	d5cc61cbe735	golang.org/x/net@v0.48.0	0.55.0	1
ghcr.io/dapr/placement :1.17.0-rc.3	a237b43cd5c6	golang.org/x/net@v0.48.0	0.55.0	1
ghcr.io/dapr/scheduler :1.17.0-rc.3	6c62e01e736b	golang.org/x/net@v0.48.0	0.55.0	1
ghcr.io/dapr/sentry :1.17.0-rc.3	bf79b03591e0	golang.org/x/net@v0.48.0	0.55.0	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0	0.55.0	1
ghcr.io/davidkarlsen/flyway-operator :0.2.13	66f60b461c0d	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/dcristobalhmad/kube-secrets-exporter :latest	a9043737cb73	golang.org/x/net@v0.23.0	0.55.0	1
ghcr.io/debridmediamanager/zurg-testing :v0.9.3-final	5c47ef99443a	golang.org/x/net@v0.20.0	0.55.0	1
ghcr.io/decayofmind/kube-better-node :master	ccd2ce03b682	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0	1
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0	1
ghcr.io/defensia/agent :1.4.57	e9d40ae44711	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/deliveryhero/field-exporter :v1.4.0	6b71ba4f9297	golang.org/x/net@v0.26.0	0.55.0	1
ghcr.io/devangradadiya/k8s-s3-bucket-operator :0.2.2	58288de9f9fa	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	golang.org/x/net@v0.25.0	0.55.0	1
ghcr.io/devops-ia/steampipe :v2.4.1	a982103d91d3	golang.org/x/net@v0.48.0	0.55.0	1
ghcr.io/devplayer0/lxd8s :0.3.1	e159ba41aede	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.55.0	1
ghcr.io/dexidp/dex :v2.43.1	0881d3c9359b	golang.org/x/net@v0.37.0	0.55.0	1
ghcr.io/dexidp/dex :v2.35.3	13964b29d63e	golang.org/x/net@v0.0.0-20220927171203-f486391704dc	0.55.0	1
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	golang.org/x/net@v0.43.0	0.55.0	1
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	golang.org/x/net@v0.32.0	0.55.0	1
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/net@v0.11.0	0.55.0	1
ghcr.io/digitalis-io/vals-operator :v0.8.1	7c776499b8c9	golang.org/x/net@v0.49.0	0.55.0	1
ghcr.io/dirien/minecraft-exporter :0.24.0	61d89bf99ff7	golang.org/x/net@v0.51.0	0.55.0	1
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	golang.org/x/net@v0.37.0	0.55.0	1
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/net@v0.0.0-20210908191846-a5e095526f91	0.55.0	1
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/net@v0.10.0	0.55.0	1
ghcr.io/dntosas/capi2argo-cluster-operator :v1.5.0	fb8c6457ef6e	golang.org/x/net@v0.40.0	0.55.0	1
ghcr.io/dodevops/azure-advanced-backup :0.4.0	1041d4449e49	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
ghcr.io/doodlescheduling/k8s-pause :v0.1.1	6b3215e37738	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0	1
ghcr.io/doodlescheduling/k8svault-controller :v0.2.0	627e5e211766	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea	0.55.0	1
ghcr.io/dploeger/cloudflare-ddns-update :v0.1.0	ec06685b9ff4	golang.org/x/net@v0.25.0	0.55.0	1
ghcr.io/druggeri/nut_exporter :3.3.0	276460d141c7	golang.org/x/net@v0.35.0	0.55.0	1
ghcr.io/dsp0x4/cloudfront-tenant-operator :0.3.0	eb40174cd20d	golang.org/x/net@v0.51.0	0.55.0	1
ghcr.io/edgelesssys/continuum/continuum-proxy	24c76f294a80	golang.org/x/net@v0.32.0	0.55.0	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0	1
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0	0.55.0	1
ghcr.io/element-hq/ess-helm/matrix-tools :0.3.2	0eac0521be29	golang.org/x/net@v0.36.0	0.55.0	1
ghcr.io/eminaktas/oom-tracer :v0.1.0	c90ca8389c87	golang.org/x/net@v0.38.0	0.55.0	1