CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,007; of 17,803 indexed, latest versions
Container images: 3,683; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 3,007 of 17,803 indexed charts deploy, on 3,683 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,683

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

3,007 by stars

Chart

Latest

Affected images

Radar Score

scienceboxsciencebox

0.0.7

2 of 17 See more

sciencebox sciencebox 0.0.7

2 of the 17 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/net@v0.0.0-20220325170049-de3da57026de	0.55.0
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb	0.55.0

Open the chart page →

6,598

iopsciencemesh

0.4.0

1 of 2 See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

4,063

secrethorsecrethor

1.1.2

1 of 1 See more

secrethor secrethor 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bonovoo/secrethor :1.1.2	bb93b68fcd17	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

529

selenosis-deployselenosis

2.1.3

4 of 4 See more

selenosis-deploy selenosis 2.1.3

4 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alcounit/browser-controller :v1.0.0	93b7cdbab14b	golang.org/x/net@v0.47.0	0.55.0
alcounit/browser-service :v0.0.9	4bd10defc324	golang.org/x/net@v0.47.0	0.55.0
alcounit/browser-ui :v0.0.9	6a977c92ef27	golang.org/x/net@v0.47.0	0.55.0
alcounit/selenosis :v2.1.1	d01a9dbbd943	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

1,579

sentry-operatorsentry-operator

1.2.5

1 of 1 See more

sentry-operator sentry-operator 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/agjmills/sentry-operator :v1.2.5	00389ef6a00e	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

463

vuiseriohub

1.0.6

1 of 3 See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dserio83/velero-api :0.3.1	6b3d9115fee2	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

11,604

session-manager-agentsession-manager-agent

1.9.0

1 of 2 See more

session-manager-agent session-manager-agent 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-agent :1.9.0	b9f23db99051	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

486

session-manager-serversession-manager-server

0.1.0-gfu-dev

1 of 1 See more

session-manager-server session-manager-server 0.1.0-gfu-dev

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server :0.1.0-gfu-dev	b9537499ff9e	golang.org/x/net@v0.35.0	0.55.0

Open the chart page →

802

k8s-appliershlomibendavid

1.0.1

1 of 1 See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
shlomibendavid/k8s-applier :0311240529	a22ffbe0f04e	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

1,206

clickhousesignoz

24.1.18

2 of 3 See more

clickhouse signoz 24.1.18

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0	0.55.0
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

4,701

cosignedsigstore

0.1.23

2 of 2 See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gcr.io/projectsigstore/cosigneddigest-pinned	784518ff3ee7	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.55.0
gcr.io/projectsigstore/policy-webhookdigest-pinned	82940e8c3e0d	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	0.55.0

Open the chart page →

5,132

scaffoldsigstore

0.6.115

5 of 15 See more

scaffold sigstore 0.6.115

5 of the 15 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	7f59f7c08d1a	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.31	3a061734c5be	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/createdbdigest-pinned	3cee6c78973b	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.31	e5232e8c9122	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/ct_server :v0.7.31	66664ba563e7	golang.org/x/net@v0.46.0	0.55.0

Open the chart page →

7,849

simply-dns-webhooksimply-dns-webhook

1.10.0

1 of 1 See more

simply-dns-webhook simply-dns-webhook 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/runnerm/simply-dns-webhook :v1.10.0	fdfffa3984a5	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

429

mongodb-backupsinextra

1.1.0

1 of 1 See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

4,637

postgresql-singlesinextra

1.15.1

1 of 1 See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

4,971

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0

Open the chart page →

6,422

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f	0.55.0

Open the chart page →

2,201

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

2,301

wg-easyslybase-wg-easy

1.2.0

1 of 1 See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15.4.0	0e7bc9d34e86	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

736

wireguardslybase-wireguard

2.0.6

1 of 1 See more

wireguard slybase-wireguard 2.0.6

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
linuxserver/wireguard :1.0.20260223-r0-ls122	dca67384e3e9	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

446

smallest-self-hostsmallest-self-host

0.2.2

6 of 12 See more

smallest-self-host smallest-self-host 0.2.2

6 of the 12 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0	0.55.0
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	golang.org/x/net@v0.25.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0	0.55.0
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	golang.org/x/net@v0.25.0	0.55.0
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

7,728

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	golang.org/x/net@v0.2.0	0.55.0

Open the chart page →

1,151

artifact-hubsoftonic

1.19.0

4 of 8 See more

artifact-hub softonic 1.19.0

4 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	golang.org/x/net@v0.11.0	0.55.0
artifacthub/hub :v1.19.0	111918d8c399	golang.org/x/net@v0.26.0	0.55.0
artifacthub/scanner :v1.19.0	323d026e78c3	golang.org/x/net@v0.21.0	0.55.0
artifacthub/tracker :v1.19.0	6596c8c4d955	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

14,605

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.55.0

Open the chart page →

2,644

go-ratelimitsoftonic

1.0.7

1 of 3 See more

go-ratelimit softonic 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553	0.55.0

Open the chart page →

5,106

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

2,592

sogosogo

0.3.5

1 of 2 See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

7,342

gloosolo-gloo-edge

0.0.0-fork

4 of 5 See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

9,258

sp-otel-collectorsp-otel-collector

1.1.6

1 of 1 See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	golang.org/x/net@v0.11.0	0.55.0

Open the chart page →

2,034

sql-operatorsql-operator

0.11.2

1 of 1 See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0

Open the chart page →

1,595

stackradar-scannerstackradar

0.4.0

1 of 1 See more

stackradar-scanner stackradar 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/lockdep/stackradar-scanner :0.4.0	73cbeb990cf4	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

1,222

splunk-operatorstakater

0.0.6

1 of 2 See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb	0.55.0

Open the chart page →

11,461

gethstakewise

2.5.8

1 of 3 See more

geth stakewise 2.5.8

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.15.10	1f36ca5922a5	golang.org/x/net@v0.36.0	0.55.0

Open the chart page →

1,287

graph-nodestakewise

3.1.0

1 of 3 See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.24.0	e3de33bd746b	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

4,732

mayastorstartechnica

0.2.0

3 of 13 See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	golang.org/x/net@v0.0.0-20220921203646-d300de134e69	0.55.0

Open the chart page →

4,369

multusstartechnica

0.1.2

1 of 1 See more

multus startechnica 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :stable	ec4e5dfe12b6	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

525

statpingstatping

0.1.14

1 of 1 See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.55.0

Open the chart page →

3,378

stornxstornx

1.1.1

9 of 9 See more

stornx stornx 1.1.1

9 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0	0.55.0
alazidis/stornx :1.1.1	602d4f7f090c	golang.org/x/net@v0.47.0	0.55.0
istio/pilot :1.29.1	f8b0e412ac4a	golang.org/x/net@v0.48.0	0.55.0
quay.io/kiali/kiali :v2.23.0	7652b1285f50	golang.org/x/net@v0.49.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.90.0	e5aab3be6873	golang.org/x/net@v0.52.0	0.55.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0	0.55.0
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0	0.55.0
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

11,826

stunner-gateway-operatorstunner

1.1.0

2 of 2 See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
l7mp/stunner-auth-server :1.1.0	2f8114477ba6	golang.org/x/net@v0.36.0	0.55.0
l7mp/stunner-gateway-operator :1.1.0	c34f7c931491	golang.org/x/net@v0.36.0	0.55.0

Open the chart page →

1,298

hlf-k8ssubstra

10.2.4

4 of 7 See more

hlf-k8s substra 10.2.4

4 of the 7 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.55.0
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0	0.55.0
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

12,032

supabasesupabse

0.8.0

2 of 11 See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.30.1	3b709e4a0e5e	golang.org/x/net@v0.44.0	0.55.0
supabase/gotrue :v2.189.0	385184459f57	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

18,434

Grafanasurajwarbhe-grafana

0.1.0

1 of 1 See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
surajwarbhe/grafana :v1	85248611e9f1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0

Open the chart page →

2,604

switchboardswitchboard

0.7.4

1 of 1 See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/borchero/switchboard :0.7.4	54a193b757da	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

872

synology-proxy-operatorsynology-proxy-operator

0.0.8

1 of 1 See more

synology-proxy-operator synology-proxy-operator 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/phoeluga/synology-proxy-operator :0.0.8	b26510b26b31	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

210

hello-appsysintelligent

2.0.1

1 of 1 See more

hello-app sysintelligent 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
sysintelligent/hello-app :2.0.1	77fb30df847d	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

1,880

system-upgrade-controllersystem-upgrade

0.2.13

1 of 1 See more

system-upgrade-controller system-upgrade 0.2.13

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/system-upgrade-controller :v0.20.1	aaf4dbf64057	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

125

system-upgrade-controllersystem-upgrade-controller

1.12.0

1 of 1 See more

system-upgrade-controller system-upgrade-controller 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
rancher/system-upgrade-controller :v0.20.1	aaf4dbf64057	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

125

headscaleszpadel-charts

0.30.2

1 of 3 See more

headscale szpadel-charts 0.30.2

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/tale/headplane :0.6.3	9476cc5adb12	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

1,906

terraform-controllerterraform-controller

0.0.20

1 of 1 See more

terraform-controller terraform-controller 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
absaoss/terraform-controller :v0.0.20	ad538a1285a0	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0

Open the chart page →

3,538

jenkinstestchart

0.1.9

1 of 2 See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

9,131

Container images carrying it

3,683 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	golang.org/x/net@v0.0.0-20220621193019-9d032be2e588	0.55.0	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	golang.org/x/net@v0.33.0	0.55.0	1
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	golang.org/x/net@v0.40.0	0.55.0	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/net@v0.17.0	0.55.0	1
quay.io/argoproj/argocli :v3.7.11	577fc18f86ad	golang.org/x/net@v0.47.0	0.55.0	1
quay.io/argoproj/argocli :v3.7.1	6efd1cb89dc1	golang.org/x/net@v0.40.0	0.55.0	1
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	golang.org/x/net@v0.19.0	0.55.0	1
quay.io/argoproj/argo-events :v1.9.10	a83d2699ae53	golang.org/x/net@v0.49.0	0.55.0	1
quay.io/argoprojlabs/argocd-extension-metrics :v1.0.3	0d614816c4b7	golang.org/x/net@v0.10.0	0.55.0	1
quay.io/argoprojlabs/argocd-image-updater :v1.2.1	3c56f354fac5	golang.org/x/net@v0.52.0	0.55.0	1
quay.io/argoprojlabs/argocd-operator :v0.18.0	a09814522a72	golang.org/x/net@v0.49.0	0.55.0	1
quay.io/argoprojlabs/argocd-operator :v0.4.0	cf8faa986789	golang.org/x/net@v0.0.0-20220621193019-9d032be2e588	0.55.0	1
quay.io/argoprojlabs/argocd-rbac-operator :v0.2.4	51dded00137a	golang.org/x/net@v0.40.0	0.55.0	1
quay.io/argoproj/workflow-controller :v3.7.1	66388d1b2f08	golang.org/x/net@v0.40.0	0.55.0	1
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	golang.org/x/net@v0.19.0	0.55.0	1
quay.io/argoproj/workflow-controller :v3.7.11	c46aa0ded8ed	golang.org/x/net@v0.47.0	0.55.0	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
quay.io/backube/snapscheduler :3.5.0	35ac95c51780	golang.org/x/net@v0.38.0	0.55.0	1
quay.io/backube/volsync :0.16.0	0d03a6aad575	golang.org/x/net@v0.40.0	0.55.0	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.55.0	1
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/net@v0.7.0	0.55.0	1
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/net@v0.17.0	0.55.0	1
quay.io/bentoml/yatai-image-builder :3.0.44	01d8538c4f48	golang.org/x/net@v0.47.0	0.55.0	1
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/net@v0.17.0	0.55.0	1
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	golang.org/x/net@v0.21.0	0.55.0	1
quay.io/brancz/kube-rbac-proxy :v0.18.0	754ab2a723c8	golang.org/x/net@v0.26.0	0.55.0	1
quay.io/brancz/kube-rbac-proxy :v0.20.1	f5fbfec6a2b2	golang.org/x/net@v0.47.0	0.55.0	1
quay.io/camel-tooling/camel-dashboard-operator :latest	5e867d01846e	golang.org/x/net@v0.52.0	0.55.0	1
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0	1
quay.io/cephcsi/ceph-csi-operator :v0.5.0	14fe2f1bffc3	golang.org/x/net@v0.49.0	0.55.0	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	golang.org/x/net@v0.19.0	0.55.0	1
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	golang.org/x/net@v0.41.0	0.55.0	1
quay.io/cilium/cilium :v1.17.14	cdcfab5b4466	golang.org/x/net@v0.47.0	0.55.0	1
quay.io/cilium/cilium-envoy :v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be	60031f396695	golang.org/x/net@v0.49.0	0.55.0	1
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	golang.org/x/net@v0.41.0	0.55.0	1
quay.io/cilium/hubble-relay :v1.18.2	6079308ee15e	golang.org/x/net@v0.42.0	0.55.0	1
quay.io/cilium/hubble-ui-backend :v0.13.3	db1454e45dc3	golang.org/x/net@v0.42.0	0.55.0	1
quay.io/cilium/operator-generic :v1.17.14	773886ec9337	golang.org/x/net@v0.47.0	0.55.0	1
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	golang.org/x/net@v0.19.0	0.55.0	1
quay.io/cilium/operator-generic :v1.18.2	cb4e4ffc5789	golang.org/x/net@v0.42.0	0.55.0	1
quay.io/cilium/tetragon :v1.1.0	96fac2482898	golang.org/x/net@v0.24.0	0.55.0	1
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de	0.55.0	1
quay.io/cilium/tetragon-operator :v0.8.3	4ab8e6604204	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de	0.55.0	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.55.0	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	golang.org/x/net@v0.14.0	0.55.0	1
quay.io/codefresh/dind :3.0.25	0885ab519dac	golang.org/x/net@v0.43.0	0.55.0	1
quay.io/coreos/etcd :v3.5.11	842975891182	golang.org/x/net@v0.17.0	0.55.0	1
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/net@v0.23.0	0.55.0	1
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.55.0	1
quay.io/cortexproject/cortex :v1.21.1	8577eb292a01	golang.org/x/net@v0.49.0	0.55.0	1