CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,999; of 17,797 indexed, latest versions
Container images: 3,673; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 2,999 of 17,797 indexed charts deploy, on 3,673 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,673

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

2,999 by stars

Chart

Latest

Affected images

Radar Score

kubecostmesosphere-stable

0.37.5

7 of 9 See more

kubecost mesosphere-stable 0.37.5

7 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.30.5	744f84cf7493	golang.org/x/net@v0.23.0	0.55.0
grafana/grafana :9.4.7	1a359d92f40e	golang.org/x/net@v0.4.0	0.55.0
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	golang.org/x/net@v0.18.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	golang.org/x/net@v0.17.0	0.55.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0	0.55.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0	0.55.0
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

17,823

rclonemglants

2.3.4

1 of 1 See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d	0.55.0

Open the chart page →

2,750

helm-ai-kernelmindburn-labs

0.8.5

1 of 2 See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/helmdigest-pinned	105741fa6621	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

2,175

mortalgpumortalgpu

1.3.7

1 of 1 See more

mortalgpu mortalgpu 1.3.7

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/maxiv/mortalgpu :1.3.7	e1c5c194bbf0	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

379

move2kubemove2kube

0.3.15

1 of 1 See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0

Open the chart page →

3,803

nebraskanebraska

3.0.0

1 of 2 See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/nebraska :4.0.0	5c9e99ff7167	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

4,096

keycloak-operatornewsaktuell

0.1.7

1 of 1 See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0

Open the chart page →

5,067

gateway-apinicklasfrahm-gateway-api

0.2.0

1 of 1 See more

gateway-api nicklasfrahm-gateway-api 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.33.3	2c59a3f0726c	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

1,258

aws-xrayokgolove

5.0.0

1 of 1 See more

aws-xray okgolove 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/xray/aws-xray-daemon :3.6.2	43d051eed000	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

273

flagsmithone-acre-fund

0.1.5

1 of 6 See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

6,881

kobotoolboxone-acre-fund

0.7.4

1 of 9 See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

18,543

secrets-injectoronepassword-connect

1.2.0

1 of 1 See more

secrets-injector onepassword-connect 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
1password/kubernetes-secrets-injector :1.0.2	5884757f7879	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

891

openclaw-with-brainopenclaw-with-brain

0.1.67

1 of 3 See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/git :2.47.2	062a01ad7a0e	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

5,224

opentelemetry-ebpfopentelemetry-helm

0.1.7

1 of 4 See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
otel/opentelemetry-ebpf-k8s-watcher :v0.10.2	63a0d1dd2cac	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

2,582

oesopsmx

4.0.32

7 of 25 See more

oes opsmx 4.0.32

7 of the 25 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.55.0
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.55.0
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	golang.org/x/net@v0.7.0	0.55.0
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b	0.55.0
quay.io/opsmxpublic/opa :opa-sidecar-v1.0	3dcbf3caa454	golang.org/x/net@v0.38.0	0.55.0
quay.io/opsmxpublic/opa :1.12.0	84fb1af7401c	golang.org/x/net@v0.47.0	0.55.0
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.55.0

Open the chart page →

108,354

ipfs-clusterparadeum-team

0.0.19

2 of 2 See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/net@v0.0.0-20220517181318-183a9ca12b87	0.55.0
ipfs/ipfs-cluster :1.0.2	1511f6d57994	golang.org/x/net@v0.0.0-20220517181318-183a9ca12b87	0.55.0

Open the chart page →

3,771

permifypermify

0.5.0

1 of 1 See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

1,004

platzioplatz-io

0.6.5

1 of 2 See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
platzio/backend :v0.6.5	d5e5972f344b	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

2,879

plecopleco

0.24.0

1 of 1 See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

1,353

pomeriumpomerium

34.0.1

1 of 1 See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
pomerium/pomerium :v0.22.1	9c69b10a2126	golang.org/x/net@v0.9.0	0.55.0

Open the chart page →

1,949

prometheus-systemd-exporterprometheus-community

0.5.2

1 of 1 See more

prometheus-systemd-exporter prometheus-community 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/systemd-exporter :v0.7.0	78c03f875dfb	golang.org/x/net@v0.33.0	0.55.0

Open the chart page →

725

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc	0.55.0
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.55.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.55.0

Open the chart page →

12,134

qgis-serverqgis-server

0.1.10

1 of 3 See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/net@v0.35.0	0.55.0

Open the chart page →

5,483

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.55.0

Open the chart page →

2,731

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-07-23T15-54-02Z	d249d1fb6966	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

13,692

rqliterqlite

2.0.0

1 of 1 See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rqlite/rqlite :9.1.3	7b992a526eee	golang.org/x/net@v0.46.0	0.55.0

Open the chart page →

1,319

qbittorrent-vpnrtomik-helm-charts

0.0.2

1 of 2 See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
qmcgaw/gluetun :v3.40.0	2b42bfa04675	golang.org/x/net@v0.31.0	0.55.0

Open the chart page →

1,219

seaweedfs-csi-driverseaweedfs-csi-driver

0.2.38

5 of 7 See more

seaweedfs-csi-driver seaweedfs-csi-driver 0.2.38

5 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

5,321

seldon-core-operatorseldon

1.19.0

1 of 1 See more

seldon-core-operator seldon 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
seldonio/seldon-core-operator :1.19.0	544e3bf71bd1	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

860

bentoself-hosters-by-night

0.9.1

1 of 1 See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/warpstreamlabs/bento :1.8.1	21715979aefa	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

1,053

appshini4i

0.4.0

1 of 1 See more

app shini4i 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.10.2	1474027c3166	golang.org/x/net@v0.25.0	0.55.0

Open the chart page →

537

skypilotskypilot

0.13.0

3 of 3 See more

skypilot skypilot 0.13.0

3 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
berkeleyskypilot/skypilot :0.13.0	3bc8bf8f4d83	golang.org/x/net@v0.38.0	0.55.0
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	golang.org/x/net@v0.41.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

5,943

corednssoftizy

0.2.0

1 of 1 See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
coredns/coredns :1.10.1	a0ead06651cf	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

1,670

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0

Open the chart page →

12,537

miniosolidcharts

0.5.0

1 of 1 See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/coollabsio/minio :RELEASE.2025-10-15T17-29-55Z	69b55a1c1c5d	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

1,070

forecastlestakater

2.1.1

1 of 1 See more

forecastle stakater 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
stakater/forecastle :v2.0.2	382cd9572352	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

711

ingressmonitorcontrollerstakater

2.2.13

1 of 1 See more

ingressmonitorcontroller stakater 2.2.13

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/stakater/ingressmonitorcontroller :v2.2.13	3301afb61c10	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

583

sn-platformstreamnative

1.11.44

5 of 9 See more

sn-platform streamnative 1.11.44

5 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	golang.org/x/net@v0.8.0	0.55.0
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0	0.55.0
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0	0.55.0
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

15,620

pocketbasetechwolf12

0.29.3

1 of 1 See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/techwolf12/pocketbase :0.29.3	106099641679	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

1,448

feedbacksystemthm-mni-ii

0.47.1

4 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

4 of the 10 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	golang.org/x/net@v0.19.0	0.55.0
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0	0.55.0
library/docker :20.10.21-dind	3153fa63f546	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

28,692

topaztopaz

0.2.5

1 of 1 See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/aserto-dev/topaz :0.32.59	4c708ecf7dc4	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

1,503

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.55.0

Open the chart page →

4,145

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.55.0

Open the chart page →

9,271

k8s-ttl-controllertwin

0.4.0

1 of 1 See more

k8s-ttl-controller twin 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/twin/k8s-ttl-controller :v1.4.0	0525a7def93d	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

471

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/net@v0.11.0	0.55.0
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

10,382

uptraceuptrace

2.0.2

1 of 2 See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
uptrace/uptrace :2.0.2	34a02c3b2d12	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

1,627

valkey-operatorvalkey

0.6.0

1 of 1 See more

valkey-operator valkey 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/valkey-io/valkey-operator :v0.6.0	52a0f1ed0c03	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

141

vaultvault

1.22.0

3 of 4 See more

vault vault 1.22.0

3 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.5	d870622d0040	golang.org/x/net@v0.48.0	0.55.0
hashicorp/vault :2.0.1	755355002715	golang.org/x/net@v0.54.0	0.55.0
prom/statsd-exporter :v0.29.0	632f70580492	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

4,261

vouchvouch

3.2.0

1 of 1 See more

vouch vouch 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	golang.org/x/net@v0.5.0	0.55.0

Open the chart page →

1,035

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/net@v0.13.0	0.55.0

Open the chart page →

1,350

Container images carrying it

3,673 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/skyhook-io/skyhook-connector :v2.3.2	3deb8e4b1aaa	golang.org/x/net@v0.44.0	0.55.0	1
ghcr.io/skyhook-io/skyhook-connector :v2.5.5	6c4e3336600d	golang.org/x/net@v0.52.0	0.55.0	1
ghcr.io/slok/sloth :v0.16.0	f0f0075b0d45	golang.org/x/net@v0.52.0	0.55.0	1
ghcr.io/snapp-incubator/health-exporter :0.3.2	52a0d8f6278c	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e	0.55.0	1
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	golang.org/x/net@v0.33.0	0.55.0	1
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	golang.org/x/net@v0.33.0	0.55.0	1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	golang.org/x/net@v0.42.0	0.55.0	1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	golang.org/x/net@v0.42.0	0.55.0	1
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins :19f19457ae7cec86457b0411543a3cf21dd9f95a	8edc39be1e22	golang.org/x/net@v0.43.0	0.55.0	1
ghcr.io/spiffe/spiffe-csi-driver :0.2.3	4144101005b2	golang.org/x/net@v0.7.0	0.55.0	1
ghcr.io/spiffe/spire-agent :1.6.0	62517726d0c4	golang.org/x/net@v0.7.0	0.55.0	1
ghcr.io/spiffe/spire-controller-manager :0.2.2	5e90b2d092df	golang.org/x/net@v0.7.0	0.55.0	1
ghcr.io/spiffe/spire-server :1.6.0	635b9024cad2	golang.org/x/net@v0.7.0	0.55.0	1
ghcr.io/squat/generic-device-plugin :0.2.0	66c8d5c270eb	golang.org/x/net@v0.49.0	0.55.0	1
ghcr.io/squat/generic-device-plugin :latest	dc192e164c69	golang.org/x/net@v0.51.0	0.55.0	1
ghcr.io/stakater/ingressmonitorcontroller :v2.2.13	3301afb61c10	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/stakater/reloader :v1.4.4	a571c5b32c0f	golang.org/x/net@v0.39.0	0.55.0	1
ghcr.io/stashed/stash :v0.42.0	3a98245a7667	golang.org/x/net@v0.26.0	0.55.0	1
ghcr.io/stashed/stash-crd-installer :v0.42.0	76f0a650e44b	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/stashed/stash-crd-installer :v0.32.0	c6f2a844b5dd	golang.org/x/net@v0.15.0	0.55.0	1
ghcr.io/stashed/stash-crd-installer :v0.42.1	d6c9b7a1f7b8	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/stashed/stash-enterprise :v0.42.1	759f3850eda9	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/stashed/stash-enterprise :v0.32.0	e9bde36e34b7	golang.org/x/net@v0.15.0	0.55.0	1
ghcr.io/stefanprodan/podinfo :6.1.3	f25ebb9c6788	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0	1
ghcr.io/stenic/k8status :0.17.0	93298e03089e	golang.org/x/net@v0.26.0	0.55.0	1
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0	1
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	golang.org/x/net@v0.19.0	0.55.0	1
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.55.0	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	golang.org/x/net@v0.41.0	0.55.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.55.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	golang.org/x/net@v0.0.0-20220812174116-3211cb980234	0.55.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/net@v0.39.0	0.55.0	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	golang.org/x/net@v0.23.0	0.55.0	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	golang.org/x/net@v0.23.0	0.55.0	1
ghcr.io/strrl/supabase-operator :2026.7.25	87d083ab8980	golang.org/x/net@v0.46.0	0.55.0	1
ghcr.io/strrl/wonder-mesh-net :v2026.629.0	625b140372fd	golang.org/x/net@v0.46.0	0.55.0	1
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0	1
ghcr.io/substra/orchestrator-server :1.0.0	647e45284a80	golang.org/x/net@v0.28.0	0.55.0	1
ghcr.io/substratusai/lingo :v0.2.1	2c807cd41ed4	golang.org/x/net@v0.22.0	0.55.0	1
ghcr.io/supabase-community/supabase-operator :v0.1.3	253a6dcbf4f0	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/synapsecns/sanguine/agents :6e3887fc2a05aff0d159453cedbfbe5024b910bf	81a9ebc899a4	golang.org/x/net@v0.7.0	0.55.0	1
ghcr.io/synapsecns/sanguine/cctp-relayer :b5a1dd5288f1a18eb05994e130d626fed45a56fc	2f1408c94168	golang.org/x/net@v0.8.0	0.55.0	1
ghcr.io/synapsecns/sanguine/explorer :latest	00131e3d1eaf	golang.org/x/net@v0.35.0	0.55.0	1
ghcr.io/synapsecns/sanguine/promexporter :4a9aad096c2bd1160e56e5472ddac77fa0cde2e9	416c1c5aeb86	golang.org/x/net@v0.10.0	0.55.0	1
ghcr.io/synapsecns/sanguine/screener-api :latest	b3de2050460a	golang.org/x/net@v0.35.0	0.55.0	1
ghcr.io/synapsecns/sanguine/scribe :6e3887fc2a05aff0d159453cedbfbe5024b910bf	5e0a3dfa9f96	golang.org/x/net@v0.7.0	0.55.0	1
ghcr.io/synapsecns/sanguine/scribe :latest	81edba952403	golang.org/x/net@v0.35.0	0.55.0	1
ghcr.io/synapsecns/sanguine/sinner :latest	3e98a98f6074	golang.org/x/net@v0.19.0	0.55.0	1