CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,007; of 17,803 indexed, latest versions
Container images: 3,683; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 3,007 of 17,803 indexed charts deploy, on 3,683 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,683

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

3,007 by stars

Chart

Latest

Affected images

Radar Score

ks-corekubeblocks

1.1.3

2 of 5 See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubesphere/ks-extensions-museum :latest	29681958f220	golang.org/x/net@v0.17.0	0.55.0
kubesphere/kubectl :v1.27.16	49b445b1b732	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

4,740

kubebrowsekubebrowse

1.7.0

3 of 5 See more

kubebrowse kubebrowse 1.7.0

3 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	golang.org/x/net@v0.39.0	0.55.0
ghcr.io/browsersec/kubebrowse :sha-09dfa1f	b853e9e6372a	golang.org/x/net@v0.40.0	0.55.0
ghcr.io/browsersec/kubebrowse-frontend :chore-improve-back	bd6bea5e487c	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

4,290

kubefedkubefed

0.10.0

1 of 2 See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/kubernetes-multicluster/kubefed :v0.10.0	c4635c95730e	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

2,426

kubegems-installerkubegems

1.24.10

1 of 1 See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

3,397

kubegems-localkubegems

1.24.10

2 of 2 See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubegems/kubectl :latest	c3b4be9a54f5	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.55.0
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

6,106

kube-monkeykubemonkey

1.6.0

1 of 1 See more

kube-monkey kubemonkey 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.4	0a5bb6fc3f3f	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

120

kubernetes-events-exporterkubernetes-events-exporter

0.1.2

1 of 1 See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/ownkube/kubernetes-events-exporter :0.1.2	bcb7f0f733f5	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

503

owncloudkubernetes-homelab-helm-charts

0.1.0

1 of 3 See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
owncloud/server :10.16.2	74c53d341076	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

10,063

tailscalekubernetes-homelab-helm-charts

0.1.2

1 of 2 See more

tailscale kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
tailscale/tailscale :v1.96.5	dbeff02d2337	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

1,038

kubernetes-stateless-chartkubernetes-stateless-chart

1.0.3

1 of 1 See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.18.4-alpine	3e61aaee1341	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

3,284

kubescoutkubescoute

0.1.1

1 of 1 See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/haedalwang/kubescout :0.1.1	07d51f838f0d	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

747

kubeseal-webguikubeseal-webgui

6.0.4

1 of 2 See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/jaydee94/kubeseal-webgui/api :4.5.3	3cceb9462ae1	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

4,286

kube-site-followerkube-site-follower

0.1.14

1 of 2 See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/net@v0.32.0	0.55.0

Open the chart page →

909

juicefskubesphere-stable

0.16.2

1 of 4 See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.20.0	43978fc60798	golang.org/x/net@v0.9.0	0.55.0

Open the chart page →

2,522

mesherykubesphere-stable

0.5.0

12 of 13 See more

meshery kubesphere-stable 0.5.0

12 of the 13 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
layer5/meshery :stable-latest	78a8be21bef3	golang.org/x/net@v0.39.0	0.55.0
layer5/meshery-app-mesh :stable-latest	77d59943b3d6	golang.org/x/net@v0.2.0	0.55.0
layer5/meshery-consul :stable-latest	25a4cc38abcd	golang.org/x/net@v0.17.0	0.55.0
layer5/meshery-cpx :stable-latest	8c20a8a1d6a4	golang.org/x/net@v0.0.0-20190827160401-ba9fcec4b297	0.55.0
layer5/meshery-istio :stable-latest	fde47c141ec6	golang.org/x/net@v0.36.0	0.55.0
layer5/meshery-kuma :stable-latest	9d25f029a8a2	golang.org/x/net@v0.17.0	0.55.0
layer5/meshery-linkerd :stable-latest	b99c73bac1f5	golang.org/x/net@v0.19.0	0.55.0
layer5/meshery-nginx-sm :stable-latest	b3864dfd47ad	golang.org/x/net@v0.9.0	0.55.0
layer5/meshery-nsm :stable-latest	ebd6a8faf21f	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.55.0
layer5/meshery-operator :stable-latest	6f58a28fe422	golang.org/x/net@v0.33.0	0.55.0
layer5/meshery-osm :stable-latest	ec898e5786c6	golang.org/x/net@v0.5.0	0.55.0
layer5/meshery-traefik-mesh :stable-latest	797fa7a03570	golang.org/x/net@v0.9.0	0.55.0

Open the chart page →

24,958

aws-efs-csi-driverkubesphere-test

0.1.0

1 of 3 See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.55.0

Open the chart page →

2,612

kube-state-metricskubestar-state-metrics

0.1.10

1 of 1 See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

1,575

kubetailkubetail

0.26.0

3 of 3 See more

kubetail kubetail 0.26.0

3 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kubetail-org/kubetail-cluster-agent :0.7.1	a5eee8cab215	golang.org/x/net@v0.38.0	0.55.0
ghcr.io/kubetail-org/kubetail-cluster-api :0.8.2	8e6acd0da9ac	golang.org/x/net@v0.52.0	0.55.0
ghcr.io/kubetail-org/kubetail-dashboard :0.17.0	8617f0a7f703	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

1,896

kube-vault-controllerkube-vault-controller

1.2.0

1 of 1 See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kupnu4x/kube-vault-controller :1.2.0	3be59109f3d6	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

1,550

kube-vip-cloud-providerkube-vip

0.2.10

1 of 1 See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubevip/kube-vip-cloud-provider :v0.0.12	f8f4e3401f76	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

806

kubemodkubmod

0.5.2

2 of 2 See more

kubemod kubmod 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.19.1	1f8154f7e80c	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.55.0
kubemod/kubemod-crt :v1.3.0	028347c9fa77	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.55.0

Open the chart page →

4,543

kubeservice-cosign-webhookkubservice-charts

1.1.1

5 of 5 See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/net@v0.11.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.55.0

Open the chart page →

7,132

kubeservice-cpupools-controllerkubservice-charts

0.1.1

2 of 2 See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	golang.org/x/net@v0.10.0	0.55.0
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

3,129

kubeservice-custom-limitrangekubservice-charts

1.3.0

5 of 5 See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

5 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kubeservice-stack/customlimitrange-manager :v1.3.0	d3ed97d142d4	golang.org/x/net@v0.36.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.55.0

Open the chart page →

6,124

kubeservice-namespace-node-affinitykubservice-charts

1.1.2

5 of 5 See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dongjiang1989/ns-node-affinity :latest	451f7823723c	golang.org/x/net@v0.7.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.55.0

Open the chart page →

6,911

kubeservice-scheduler-pluskubservice-charts

0.2.1

1 of 2 See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

1,803

ingress-annotatorkuoss

0.3.0

1 of 1 See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

494

kube-fencingkvaps

2.4.1

1 of 2 See more

kube-fencing kvaps 2.4.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0

Open the chart page →

2,538

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.55.0
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.55.0

Open the chart page →

15,573

kymaroskymaros

0.6.9

1 of 1 See more

kymaros kymaros 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/kymaroshq/kymaros :0.6.9	fb3b88633381	golang.org/x/net@v0.50.0	0.55.0

Open the chart page →

283

authz-pdplabs64io-helm-charts

0.8.0

1 of 1 See more

authz-pdp labs64io-helm-charts 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/cerbos/cerbos :0.51.0	8d35a64e4a99	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

817

lagoon-remotelagoon-charts

0.106.0

1 of 1 See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

2,279

landelijketabellencataloguslandelijketabellencatalogus

1.0.0

1 of 3 See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

7,520

lgtmlgtm

0.27.0

1 of 9 See more

lgtm lgtm 0.27.0

1 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.1-distroless	3600073f45a9	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

1,123

lgtm-stacklgtm-stack

0.1.3

3 of 8 See more

lgtm-stack lgtm-stack 0.1.3

3 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.0	121a7a9ece6d	golang.org/x/net@v0.49.0	0.55.0
minio/mc :RELEASE.2024-01-16T16-06-34Z	591b097ea2d4	golang.org/x/net@v0.19.0	0.55.0
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

5,912

keptn-cert-managerlifecycle-toolkit

0.3.0

1 of 1 See more

keptn-cert-manager lifecycle-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

507

keptn-lifecycle-operatorlifecycle-toolkit

0.6.0

1 of 1 See more

keptn-lifecycle-operator lifecycle-toolkit 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

609

keptn-metrics-operatorlifecycle-toolkit

0.5.0

1 of 1 See more

keptn-metrics-operator lifecycle-toolkit 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

840

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.55.0

Open the chart page →

4,472

linkerd-jaegerlinkerd2-edge

30.14.11-edge

2 of 4 See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.55.0
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/net@v0.14.0	0.55.0

Open the chart page →

4,409

litlyxlitlyx

0.2.0

1 of 5 See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/mongo :8.0.11	dca8d11fe467	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

8,094

go-hello-worldloafoe

0.14.0

1 of 1 See more

go-hello-world loafoe 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/go-hello-world :v2.13.0	d3fb171f20e1	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

687

home-assistantloeken-at-home

2026.5.1

1 of 1 See more

home-assistant loeken-at-home 2026.5.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
loeken/home-assistant :2026.5.1	4ce6abc553b3	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

3,052

jspolicyloft

0.2.2

1 of 1 See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
loftsh/jspolicy :0.2.2	25deb9bd2683	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0

Open the chart page →

2,312

vcluster-eksloft

0.0.0-ci.3

1 of 4 See more

vcluster-eks loft 0.0.0-ci.3

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.55.0

Open the chart page →

3,311

vcluster-k0sloft

0.0.0-ci.3

1 of 2 See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0	0.55.0

Open the chart page →

3,154

log2rbac-operatorlog2rbac-operator

0.0.5

1 of 1 See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jkremser/log2rbac :v0.0.5	e35cf56ef183	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

1,952

logclilogcli

0.1.0

1 of 1 See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	golang.org/x/net@v0.0.0-20210505214959-0714010a04ed	0.55.0

Open the chart page →

2,954

lumenvoxlumenvox

7.1.0

9 of 11 See more

lumenvox lumenvox 7.1.0

9 of the 11 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
lumenvox/admin-portal :7.1	12310cf52f79	golang.org/x/net@v0.52.0	0.55.0
lumenvox/archive :7.1	5114f08ab8ef	golang.org/x/net@v0.52.0	0.55.0
lumenvox/configuration :7.1	82bf01d9ebec	golang.org/x/net@v0.52.0	0.55.0
lumenvox/deployment :7.1	dadac2a74be6	golang.org/x/net@v0.52.0	0.55.0
lumenvox/file-store :7.1	38aa8711c9ef	golang.org/x/net@v0.52.0	0.55.0
lumenvox/license :7.1	35d0b1ac053e	golang.org/x/net@v0.52.0	0.55.0
lumenvox/management-api :7.1	6420a6e7d6c2	golang.org/x/net@v0.52.0	0.55.0
lumenvox/resource :7.1	93fd6ff1d62c	golang.org/x/net@v0.52.0	0.55.0
lumenvox/storage :7.1	c961fe78e2ca	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

5,152

voice-biometricslumenvox

2.0.1

5 of 26 See more

voice-biometrics lumenvox 2.0.1

5 of the 26 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.55.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.55.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.55.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.55.0

Open the chart page →

71,428

Container images carrying it

3,683 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/siafoundation/s3d :bf33bf3	b3fcc85f7282	golang.org/x/net@v0.53.0	0.55.0	1
ghcr.io/siderolabs/talos-backup :v0.1.0-beta.2	03a71e140f1d	golang.org/x/net@v0.26.0	0.55.0	1
ghcr.io/sigstore/policy-controller/policy-controller	0bcd60beb93f	golang.org/x/net@v0.39.0	0.55.0	1
ghcr.io/sigstore/scaffolding/server	ae8eb69c7b70	golang.org/x/net@v0.46.0	0.55.0	1
ghcr.io/sigstore/sigstore-probers/prober :v1.0.1	d1e914e6d6b9	golang.org/x/net@v0.54.0	0.55.0	1
ghcr.io/sintef/cert-manager-webhook-gandi :0.6.0	6819b34ccac8	golang.org/x/net@v0.26.0	0.55.0	1
ghcr.io/skyhook-io/skyhook-connector :v2.3.2	3deb8e4b1aaa	golang.org/x/net@v0.44.0	0.55.0	1
ghcr.io/skyhook-io/skyhook-connector :v2.5.5	6c4e3336600d	golang.org/x/net@v0.52.0	0.55.0	1
ghcr.io/slok/sloth :v0.16.0	f0f0075b0d45	golang.org/x/net@v0.52.0	0.55.0	1
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e	0.55.0	1
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	golang.org/x/net@v0.33.0	0.55.0	1
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	golang.org/x/net@v0.33.0	0.55.0	1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	golang.org/x/net@v0.42.0	0.55.0	1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	golang.org/x/net@v0.42.0	0.55.0	1
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins :19f19457ae7cec86457b0411543a3cf21dd9f95a	8edc39be1e22	golang.org/x/net@v0.43.0	0.55.0	1
ghcr.io/spiffe/spiffe-csi-driver :0.2.3	4144101005b2	golang.org/x/net@v0.7.0	0.55.0	1
ghcr.io/spiffe/spire-agent :1.6.0	62517726d0c4	golang.org/x/net@v0.7.0	0.55.0	1
ghcr.io/spiffe/spire-controller-manager :0.2.2	5e90b2d092df	golang.org/x/net@v0.7.0	0.55.0	1
ghcr.io/spiffe/spire-server :1.6.0	635b9024cad2	golang.org/x/net@v0.7.0	0.55.0	1
ghcr.io/squat/generic-device-plugin :0.2.0	66c8d5c270eb	golang.org/x/net@v0.49.0	0.55.0	1
ghcr.io/squat/generic-device-plugin :latest	dc192e164c69	golang.org/x/net@v0.51.0	0.55.0	1
ghcr.io/stakater/ingressmonitorcontroller :v2.2.13	3301afb61c10	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/stakater/reloader :v1.4.4	a571c5b32c0f	golang.org/x/net@v0.39.0	0.55.0	1
ghcr.io/stashed/stash :v0.42.0	3a98245a7667	golang.org/x/net@v0.26.0	0.55.0	1
ghcr.io/stashed/stash-crd-installer :v0.42.0	76f0a650e44b	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/stashed/stash-crd-installer :v0.32.0	c6f2a844b5dd	golang.org/x/net@v0.15.0	0.55.0	1
ghcr.io/stashed/stash-crd-installer :v0.42.1	d6c9b7a1f7b8	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/stashed/stash-enterprise :v0.42.1	759f3850eda9	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/stashed/stash-enterprise :v0.32.0	e9bde36e34b7	golang.org/x/net@v0.15.0	0.55.0	1
ghcr.io/steadybit/extension-container :v1.8.1	ae79f958b479	golang.org/x/net@v0.50.0	0.55.0	1
ghcr.io/steadybit/extension-host :v1.8.1	03a5ef26aac5	golang.org/x/net@v0.50.0	0.55.0	1
ghcr.io/stefanprodan/podinfo :6.1.3	f25ebb9c6788	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0	1
ghcr.io/stenic/k8status :0.17.0	93298e03089e	golang.org/x/net@v0.26.0	0.55.0	1
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0	1
ghcr.io/stenic/well-known :1.11.0	ae85f257a10f	golang.org/x/net@v0.48.0	0.55.0	1
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	golang.org/x/net@v0.19.0	0.55.0	1
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.55.0	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	golang.org/x/net@v0.41.0	0.55.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.55.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.55.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/net@v0.39.0	0.55.0	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	golang.org/x/net@v0.23.0	0.55.0	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	golang.org/x/net@v0.23.0	0.55.0	1
ghcr.io/strrl/supabase-operator :2026.7.25	87d083ab8980	golang.org/x/net@v0.46.0	0.55.0	1
ghcr.io/strrl/wonder-mesh-net :v2026.629.0	625b140372fd	golang.org/x/net@v0.46.0	0.55.0	1
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	1
ghcr.io/substra/orchestrator-server :1.0.0	647e45284a80	golang.org/x/net@v0.28.0	0.55.0	1
ghcr.io/substratusai/lingo :v0.2.1	2c807cd41ed4	golang.org/x/net@v0.22.0	0.55.0	1