CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,091; of 17,813 indexed, latest versions
Container images: 3,744; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 3,091 of 17,813 indexed charts deploy, on 3,744 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,744

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

3,091 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackdevtron

19.3.0

3 of 6 See more

kube-prometheus-stack devtron 19.3.0

3 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b	0.55.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0

Open the chart page →

8,661

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.55.0

Open the chart page →

2,443

winter-soldierdevtron

0.10.6

1 of 1 See more

winter-soldier devtron 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

1,176

zincdevtron

0.1.2

1 of 1 See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.55.0

Open the chart page →

1,514

ai-agentdevtron-labs

0.0.1

1 of 1 See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

9,782

argocddevtron-labs

1.8.1

2 of 3 See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127	0.55.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.55.0

Open the chart page →

10,486

argocd-certificate-refreshdevtron-labs

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.55.0

Open the chart page →

13,205

argo-workflowdevtron-labs

0.1.6

1 of 1 See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

1,587

calicodevtron-labs

0.1.1

3 of 4 See more

calico devtron-labs 0.1.1

3 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0

Open the chart page →

10,099

clairdevtron-labs

0.1.14

1 of 2 See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.55.0

Open the chart page →

6,239

devtron-enterprisedevtron-labs

48.0.0

17 of 28 See more

devtron-enterprise devtron-labs 48.0.0

17 of the 28 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
quay.io/devtron/casbin :172ef62b-9450794d-464-39422	5bf041aacadd	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/cost-sync :172ef62b-1159-39429	edf210d763ca	golang.org/x/net@v0.40.0	0.55.0
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420	0.55.0
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/net@v0.17.0	0.55.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0	0.55.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c	0.55.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

69,760

devtron-in-clustercddevtron-labs

0.10.2

2 of 2 See more

devtron-in-clustercd devtron-labs 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.55.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

5,057

devtron-logs-dumpdevtron-labs

0.1.0

1 of 1 See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

4,993

devtron-operatordevtron-labs

0.23.3

8 of 11 See more

devtron-operator devtron-labs 0.23.3

8 of the 11 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420	0.55.0
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	golang.org/x/net@v0.48.0	0.55.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0	0.55.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0

Open the chart page →

33,411

dgraphdevtron-labs

0.0.20

1 of 1 See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.55.0

Open the chart page →

12,000

jcmhproxy-ingressdevtron-labs

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron-labs 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

1,380

kube-prometheus-stackdevtron-labs

19.3.0

3 of 6 See more

kube-prometheus-stack devtron-labs 19.3.0

3 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b	0.55.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0

Open the chart page →

8,661

migrantdevtron-labs

0.0.3

1 of 1 See more

migrant devtron-labs 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
migrate/migrate :latest	cc4ad8e19d66	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

743

securitydevtron-labs

0.2.2

1 of 1 See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.55.0

Open the chart page →

2,443

winter-soldierdevtron-labs

0.10.6

1 of 1 See more

winter-soldier devtron-labs 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

1,176

zincdevtron-labs

0.1.2

1 of 1 See more

zinc devtron-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.55.0

Open the chart page →

1,514

difydify

1.0.0

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/net@v0.20.0	0.55.0

Open the chart page →

51,732

digital-mobiusdigital-mobius

0.1.4

1 of 1 See more

digital-mobius digital-mobius 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
qoveryrd/digital-mobius :0.1.4	b30a9398a83c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0

Open the chart page →

2,288

direktivdirektiv

0.10.0

3 of 6 See more

direktiv direktiv 0.10.0

3 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-k8s :0.120.0	1e45d9483faa	golang.org/x/net@v0.35.0	0.55.0
registry.k8s.io/ingress-nginx/controller :v1.12.0	e6b8de175acd	golang.org/x/net@v0.33.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.5.0	aaafd456bda1	golang.org/x/net@v0.33.0	0.55.0

Open the chart page →

3,791

graphite-exporterdjjudas21

0.1.9

1 of 1 See more

graphite-exporter djjudas21 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
prom/graphite-exporter :v0.16.0	e54bca6645ea	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

783

hammonddjjudas21

0.3.9

1 of 1 See more

hammond djjudas21 0.3.9

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1	0.55.0

Open the chart page →

1,807

nova-exporterdjjudas21

0.1.16

1 of 1 See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
djjudas21/nova-exporter :0.0.10	e9094580885c	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

1,413

photoprismdjjudas21

99.99.99

1 of 1 See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
photoprism/photoprism :240711-ce	fc6fd632ca74	golang.org/x/net@v0.27.0	0.55.0

Open the chart page →

92,708

smokepingdjjudas21

0.1.3

1 of 1 See more

smokeping djjudas21 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
linuxserver/smokeping :2.8.2	b7f906899cd3	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.55.0

Open the chart page →

2,055

truecommanddjjudas21

0.1.0

1 of 1 See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ixsystems/truecommand :3.2.0	19c218455cd2	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

5,389

uptime-kumadjjudas21

1.5.18

1 of 1 See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.23.12	bc6f244ecf27	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

4,271

dnation-kubernetes-monitoring-stackdnationcloud

4.0.3

8 of 17 See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.3

8 of the 17 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bitnamilegacy/thanos :0.37.1-debian-12-r0	5bf82b98c82c	golang.org/x/net@v0.30.0	0.55.0
grafana/grafana :13.1.0	121a7a9ece6d	golang.org/x/net@v0.49.0	0.55.0
grafana/loki :3.2.0	882e30c20683	golang.org/x/net@v0.28.0	0.55.0
grafana/loki-canary :3.2.0	49e03f80d361	golang.org/x/net@v0.28.0	0.55.0
grafana/promtail :3.0.0	d3de3da9431c	golang.org/x/net@v0.22.0	0.55.0
prom/memcached-exporter :v0.15.0	bb01ad25e9fc	golang.org/x/net@v0.29.0	0.55.0
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	golang.org/x/net@v0.0.0-20221017152216-f25eb7ecb193	0.55.0
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	golang.org/x/net@v0.1.0	0.55.0

Open the chart page →

23,543

ssl-exporterdnationcloud

1.2.1

1 of 1 See more

ssl-exporter dnationcloud 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/net@v0.0.0-20220708220712-1185a9018129	0.55.0

Open the chart page →

1,633

snmp-exporterdniel

0.0.2

1 of 1 See more

snmp-exporter dniel 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0

Open the chart page →

2,127

dnsmasq-k8sdnsmasq-k8s

1.4.1

1 of 1 See more

dnsmasq-k8s dnsmasq-k8s 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
deimosfr/dnsmasq-k8s :1.4.1	284c4040fc6d	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

3,106

docker-authdocker-auth

1.14.0

1 of 1 See more

docker-auth docker-auth 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.14.0	98e0307e0d2d	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

1,515

docparserdocparser

0.1.0

1 of 4 See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
conduction/docparser-php :dev	b6f95c8ead7d	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

8,419

furan2dollarshaveclub

0.2.0

1 of 1 See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/net@v0.0.0-20201002202402-0a1ea396d57c	0.55.0

Open the chart page →

3,056

domain-exporterdomain-exporter

0.0.8

1 of 1 See more

domain-exporter domain-exporter 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/shift/domain_exporter :v0.1.13	47e27690a816	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

1,352

doris-foundationdbdoris

25.8.0

1 of 4 See more

doris-foundationdb doris 25.8.0

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
foundationdb/fdb-kubernetes-operator :v2.3.0	7d7b6985291e	golang.org/x/net@v0.36.0	0.55.0

Open the chart page →

3,202

codecovdouban

0.2.4

1 of 8 See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
codecov/self-hosted-gateway :24.4.1	de483faad6e5	golang.org/x/net@v0.21.0	0.55.0

Open the chart page →

25,063

corednsdouban

1.39.2

1 of 1 See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
coredns/coredns :1.12.0	40384aa1f5ea	golang.org/x/net@v0.31.0	0.55.0

Open the chart page →

1,165

gatekeeperdouban

3.17.1

2 of 3 See more

gatekeeper douban 3.17.1

2 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.17.1	b7b4d7cfdd52	golang.org/x/net@v0.27.0	0.55.0
openpolicyagent/gatekeeper-crds :v3.17.1	77bc9bf3d163	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

2,507

goinceptiondouban

0.3.1

1 of 2 See more

goinception douban 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
hanchuanchuan/goinception :latest	b3c0dd26fb50	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

1,209

k8s-crondouban

0.2.0

1 of 1 See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/net@v0.9.0	0.55.0

Open the chart page →

3,668

overlorddouban

0.2.2

1 of 1 See more

overlord douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
douz/overlord :latest	f2bc7fc068c1	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.55.0

Open the chart page →

3,694

prometheus-memcached-exporterdouban

0.1.3

1 of 1 See more

prometheus-memcached-exporter douban 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0

Open the chart page →

2,115

service-proberdouban

0.1.0

1 of 1 See more

service-prober douban 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

600

tencentcloud-info-exporterdouban

0.2.2

1 of 1 See more

tencentcloud-info-exporter douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0

Open the chart page →

2,326

drogue-cloud-examplesdrogue-iot

0.7.11

2 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

2 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

30,832

Container images carrying it

3,744 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/net@v0.30.0	0.55.0	1
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9	0.55.0	1
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.55.0	1
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	golang.org/x/net@v0.34.0	0.55.0	1
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	golang.org/x/net@v0.41.0	0.55.0	1
quay.io/prometheus/prometheus :v3.2.1	6927e0919a14	golang.org/x/net@v0.34.0	0.55.0	1
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.55.0	1
quay.io/prometheus/prometheus :v3.4.1	9abc6cf6aea7	golang.org/x/net@v0.39.0	0.55.0	1
quay.io/prometheus/prometheus :v2.34.0	b37103e03399	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
quay.io/prometheus/prometheus :v3.11.3	c0b857aead0d	golang.org/x/net@v0.52.0	0.55.0	1
quay.io/prometheus/prometheus :v3.11.2	cd37346c9745	golang.org/x/net@v0.52.0	0.55.0	1
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	golang.org/x/net@v0.26.0	0.55.0	1
quay.io/prometheus/pushgateway :v1.11.1	03738d278e08	golang.org/x/net@v0.36.0	0.55.0	1
quay.io/prometheus/pushgateway :v1.6.0	5111de00e969	golang.org/x/net@v0.10.0	0.55.0	1
quay.io/prometheus/statsd-exporter :v0.30.0	378cb79c4ac7	golang.org/x/net@v0.51.0	0.55.0	1
quay.io/prometheus/statsd-exporter :v0.27.2	9ed70604d941	golang.org/x/net@v0.28.0	0.55.0	1
quay.io/rabbitmqoperator/messaging-topology-operator :1.18.1	f97c36882244	golang.org/x/net@v0.46.0	0.55.0	1
quay.io/reactiveops/rbac-manager :v1.9.5	87e3f461446f	golang.org/x/net@v0.48.0	0.55.0	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/net@v0.11.0	0.55.0	1
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0	1
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
quay.io/redhat-developer/servicebinding-operator	16286ac84ddd	golang.org/x/net@v0.17.0	0.55.0	1
quay.io/reiml/smtp-gotify :latest	80ffa9d2044a	golang.org/x/net@v0.28.0	0.55.0	1
quay.io/rhdh/rhdh-hub-rhel9 :latest	0b26358f5793	golang.org/x/net@v0.48.0	0.55.0	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728	0.55.0	1
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0	1
quay.io/sergeyshevch/s3manager :feature_refactoring	ff59fcdf44eb	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
quay.io/skopeo/stable :v1.13	4853591bd1d2	golang.org/x/net@v0.11.0	0.55.0	1
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
quay.io/spotahome/redis-operator :latest	8c772955184e	golang.org/x/net@v0.8.0	0.55.0	1
quay.io/superq/draytek-exporter :v0.2.0	3b577bdceaae	golang.org/x/net@v0.46.0	0.55.0	1
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	golang.org/x/net@v0.10.0	0.55.0	1
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	golang.org/x/net@v0.41.0	0.55.0	1
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.55.0	1
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/net@v0.26.0	0.55.0	1
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
quay.io/tigera/operator :v1.15.1	c6591da87aa8	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0	1
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
quay.io/uswitch/kiam :v4.0	be3a5846922d	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.55.0	1
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	golang.org/x/net@v0.5.0	0.55.0	1
quay.io/youniqx/heist :v1.1.209	c43b3a9d98ae	golang.org/x/net@v0.28.0	0.55.0	1
quay.io/zncdatadev/airflow-operator :0.4.0	b716ef483b75	golang.org/x/net@v0.47.0	0.55.0	1
quay.io/zncdatadev/commons-operator :0.4.0	1a353def9fe1	golang.org/x/net@v0.49.0	0.55.0	1
quay.io/zncdatadev/dolphinscheduler-operator :0.4.0	d0a4e55eeb7f	golang.org/x/net@v0.53.0	0.55.0	1
quay.io/zncdatadev/hbase-operator :0.4.0	69e9a1b0daf8	golang.org/x/net@v0.49.0	0.55.0	1
quay.io/zncdatadev/hdfs-operator :0.4.0	eb3c2928250e	golang.org/x/net@v0.49.0	0.55.0	1
quay.io/zncdatadev/hive-operator :0.4.0	d66ba9149c22	golang.org/x/net@v0.53.0	0.55.0	1