CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,997; of 17,781 indexed, latest versions
Container images: 3,655; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 2,997 of 17,781 indexed charts deploy, on 3,655 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+219 more	0.55.0	3,655

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

2,997 by stars

Chart

Latest

Affected images

Radar Score

openstack-cinder-csicloud-provider-openstack

2.36.5

7 of 7 See more

openstack-cinder-csi cloud-provider-openstack 2.36.5

7 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/cinder-csi-plugin :v1.36.0	78adaeb154c7	golang.org/x/net@v0.53.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	golang.org/x/net@v0.40.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	golang.org/x/net@v0.40.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	golang.org/x/net@v0.40.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	golang.org/x/net@v0.39.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.4.0	c7e0a3718832	golang.org/x/net@v0.39.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

3,604

kubeviewcowboysysop

6.0.0

1 of 1 See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :0.1.31	f8e7cd7325a3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

1,513

dependabot-gitlabdependabot-gitlab

6.3.0

1 of 3 See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
andrcuns/dependabot-gitlab :7.7.0-alpha.1	43060f159f4c	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

4,556

devtron-operatordevtron

0.23.3

8 of 11 See more

devtron-operator devtron 0.23.3

8 of the 11 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420	0.55.0
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0	0.55.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0

Open the chart page →

32,902

drone-runner-kubedrone

0.1.10

1 of 1 See more

drone-runner-kube drone 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

2,067

gatekeepergogatekeeper

0.1.64

1 of 1 See more

gatekeeper gogatekeeper 0.1.64

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/gogatekeeper/gatekeeper :4.9.0	dcf583aba224	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

553

hcloud-csihcloud

2.23.0

5 of 6 See more

hcloud-csi hcloud 2.23.0

5 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/net@v0.47.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/net@v0.51.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.18.0	c4cc074199c0	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

2,630

envoy-gatewayhelmforge

2.1.0

1 of 3 See more

envoy-gateway helmforge 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
helmforge/kubectl :1.35.3	c3f97e954c47	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

2,379

ilumilum

6.7.3

7 of 19 See more

ilum ilum 6.7.3

7 of the 19 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/net@v0.38.0	0.55.0
bitnamilegacy/minio :2025.3.12-debian-12-r0	ba9f3b4b0b00	golang.org/x/net@v0.37.0	0.55.0
bitnamisecure/gitdigest-pinned	72ae5bd9715f	golang.org/x/net@v0.38.0	0.55.0
gitea/gitea :1.22.3	76f516a1a8c2	golang.org/x/net@v0.28.0	0.55.0
ilum/api :6.7.3	624fd09528c8	golang.org/x/net@v0.37.0	0.55.0
ilum/mongodb :6.0.5	42b6d774c37d	golang.org/x/net@v0.8.0	0.55.0
minio/mc :RELEASE.2025-04-16T18-13-26Z	aead63c77f9d	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

23,228

kube-greenkube-green-official

0.7.1

1 of 1 See more

kube-green kube-green-official 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubegreen/kube-green :0.7.1	2dc0f0a6034c	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

493

temporallemontech

0.37.0

5 of 13 See more

temporal lemontech 0.37.0

5 of the 13 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/net@v0.7.0	0.55.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.55.0

Open the chart page →

14,893

litmuslitmuschaos

3.30.0

2 of 6 See more

litmus litmuschaos 3.30.0

2 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :8.0.13-debian-12-r0	2579e968033e	golang.org/x/net@v0.40.0	0.55.0
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

7,007

netris-controllernetrisai

2.8.2

3 of 14 See more

netris-controller netrisai 2.8.2

3 of the 14 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.55.0
haproxytech/haproxy-alpine :2.8.0	8951be4b4e1c	golang.org/x/net@v0.11.0	0.55.0
netrisai/controller-grpc :4.6.0.007	53178bf173c2	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

30,326

nfs-server-provisionernfs-ganesha-server-and-external-provisioner

1.8.0

1 of 1 See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0

Open the chart page →

2,315

nuclionuclio

0.23.8

1 of 2 See more

nuclio nuclio 0.23.8

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/nuclio/dashboard :1.17.8-amd64	b5f5bd4efbee	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

963

syftopenmined

0.9.5

2 of 6 See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/traefik :v2.11.0	0a5157f742d2	golang.org/x/net@v0.20.0	0.55.0
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/net@v0.21.0	0.55.0

Open the chart page →

17,245

spring-petclinic-cloudplatform9-community

0.2.0

5 of 6 See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
platform9community/admin-server :latest	de3fa9b70df1	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
platform9community/api-gateway :latest	40a4970de568	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
platform9community/customers-service :latest	2089811e5cc6	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
platform9community/vets-service :latest	d1165c94dfb3	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0
platform9community/visits-service :latest	8d11b50368c6	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0

Open the chart page →

41,872

pyrrarlex

0.14.3

1 of 1 See more

pyrra rlex 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	golang.org/x/net@v0.31.0	0.55.0

Open the chart page →

953

k8s-infrasignoz

0.17.1

1 of 1 See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.139.0	faf125d656fa	golang.org/x/net@v0.46.0	0.55.0

Open the chart page →

1,039

helm-exportersstarcher

0.5.0

1 of 1 See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271	0.55.0

Open the chart page →

4,154

gatustwin

1.5.0

1 of 1 See more

gatus twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v5.34.0	3fff895e77d3	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

721

istio-operatorwiremind

1.18.2

1 of 1 See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
istio/operator :1.18.2	70f9d1fe5fff	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

5,630

home-assistantalekc

2.11.2

1 of 1 See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.2	a1bc133af84e	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

2,133

home-assistantandrenarchy

14.103.0

1 of 1 See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.1	612d76760b54	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

2,133

astarte-operatorastarte

26.5.2

1 of 1 See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

695

awx-operatorawx-operator-helm

3.2.1

2 of 2 See more

awx-operator awx-operator-helm 3.2.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	golang.org/x/net@v0.20.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

9,868

cadvisorckotzbauer

2.4.3

1 of 1 See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.52.1	f40e65878e25	golang.org/x/net@v0.33.0	0.55.0

Open the chart page →

961

codercoder

1.44.6

1 of 2 See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
coderenvs/coder-service :1.44.6	1deffc4670e6	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

6,849

dronecommunity-charts

0.1.5

2 of 2 See more

drone community-charts 0.1.5

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
drone/drone :2.28.2	55897c8fb22d	golang.org/x/net@v0.42.0	0.55.0
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

2,728

cortexcortex

3.3.8

1 of 4 See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.21.1	8577eb292a01	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

3,897

doris-operatordoris

25.8.0

1 of 1 See more

doris-operator doris 25.8.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
apache/doris :operator-latest	3a4422656592	golang.org/x/net@v0.33.0	0.55.0

Open the chart page →

438

uptime-kumaduyet

0.1.7

1 of 1 See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.18.5	a84767d7934f	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.55.0

Open the chart page →

4,515

emqx-operatoremqx-operator

2.3.2

2 of 2 See more

emqx-operator emqx-operator 2.3.2

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/net@v0.31.0	0.55.0
ghcr.io/emqx/emqx-operator :2.3.2	3333ed546165	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

4,531

kube-routerenix

1.10.0

1 of 1 See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
cloudnativelabs/kube-router :v1.6.0	0ec7cd73f43f	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

2,344

gethethereum-helm-charts

1.1.4

1 of 2 See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ethereum/client-go :stable	b8ab3451a117	golang.org/x/net@v0.50.0	0.55.0

Open the chart page →

616

gotifygotify

0.8.1

1 of 1 See more

gotify gotify 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gotify/server :2.9.1	a3af47067ce6	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

568

kubelet-csr-approverkubelet-csr-approver

1.2.15

1 of 1 See more

kubelet-csr-approver kubelet-csr-approver 1.2.15

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/postfinance/kubelet-csr-approver :v1.2.15	6469ef517d2b	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

logging-operatorkube-logging

4.2.3

1 of 1 See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/logging-operator :4.2.2	0dd85dcb1f73	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

880

myipkuoss

0.2.2

1 of 1 See more

myip kuoss 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/myip :v0.1.7	760f5ccae493	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

660

keptnlifecycle-toolkit

0.11.0

3 of 3 See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/net@v0.30.0	0.55.0
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/net@v0.30.0	0.55.0
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

1,927

mattermost-operatormattermost

1.0.5

1 of 1 See more

mattermost-operator mattermost 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
mattermost/mattermost-operator :v1.25.4	bac00a2bbd33	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

273

mercuremercure

0.24.0

1 of 1 See more

mercure mercure 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dunglas/mercure :v0.24.0	80fcb704a741	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

1,409

meshery-operatormeshery

1.0.69

1 of 2 See more

meshery-operator meshery 1.0.69

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.6	b7a12c5ddf26	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

2,415

missing-container-metricsmissing-container-metrics

0.1.1

1 of 1 See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

2,409

tailscale-relaymvisonneau

0.2.7

1 of 1 See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

1,356

system-upgrade-controllernimbolus

0.7.0

1 of 1 See more

system-upgrade-controller nimbolus 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/system-upgrade-controller :v0.18.0	9813f85653c8	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

318

ketoory

0.64.0

1 of 1 See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
oryd/keto :v26.2.0	bfdb8b9e283a	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

817

oathkeeperory

0.64.0

1 of 1 See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
oryd/oathkeeper :v26.2.0	467329abde34	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

769

redis-enterprise-operatorredis-enterprise-operator-official

8.0.18-11

1 of 1 See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
redislabs/operator :8.0.18-11	9078e713bb6a	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

896

backstagerhdh-chart

4.0.1

1 of 2 See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/rhdh/rhdh-hub-rhel9 :latest	0b26358f5793	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

1,339

Container images carrying it

3,655 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	golang.org/x/net@v0.42.0	0.55.0	2
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/net@v0.38.0	0.55.0	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9	0.55.0	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0	0.55.0	2
bitnamisecure/git	72ae5bd9715f	golang.org/x/net@v0.38.0	0.55.0	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/net@v0.8.0	0.55.0	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/net@v0.8.0	0.55.0	2
bloomberg/goldpinger :3.11.2	a1fb87c2e9d9	golang.org/x/net@v0.49.0	0.55.0	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.55.0	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	golang.org/x/net@v0.20.0	0.55.0	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0	2
coredns/coredns :1.13.1	9b9128672209	golang.org/x/net@v0.45.0	0.55.0	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/net@v0.0.0-20210423184538-5f58ad60dda6	0.55.0	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de	0.55.0	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0	0.55.0	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.55.0	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0	0.55.0	2
danielqsj/kafka-exporter :latest	a51b280b55a7	golang.org/x/net@v0.51.0	0.55.0	2
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0	2
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/net@v0.36.0	0.55.0	2
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	2
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/net@v0.22.0	0.55.0	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.55.0	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/net@v0.24.0	0.55.0	2
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/net@v0.24.0	0.55.0	2
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0	0.55.0	2
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0	0.55.0	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/net@v0.0.0-20220403103023-749bd193bc2b	0.55.0	2
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0	2
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	2
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/net@v0.37.0	0.55.0	2
grafana/alloy :v1.12.2	f94b1c82957a	golang.org/x/net@v0.46.0	0.55.0	2
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0	2
grafana/grafana :11.1.0	079600c9517b	golang.org/x/net@v0.26.0	0.55.0	2
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/net@v0.46.0	0.55.0	2
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4	0.55.0	2
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.55.0	2
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/net@v0.26.0	0.55.0	2
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/net@v0.47.0	0.55.0	2
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/net@v0.29.0	0.55.0	2
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/net@v0.49.0	0.55.0	2
grafana/loki :3.6.11	44148ad243c0	golang.org/x/net@v0.52.0	0.55.0	2