CVE-2026-25680

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,091; of 17,813 indexed, latest versions
Container images: 3,744; deployed by those charts
Fix available: 1 of 1; affected package

Go Net HTML parser is vulnerable to denial of service

Carried by container images the latest versions of 3,091 of 17,813 indexed charts deploy, on 3,744 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,744

OSV records: GHSA-5cv4-jp36-h3mw
Also known as: GO-2026-5028

Charts affected

3,091 by stars

Chart

Latest

Affected images

Radar Score

monitoringgaloymoney

0.12.21

5 of 6 See more

monitoring galoymoney 0.12.21

5 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0	0.55.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.55.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

5,339

galoygaloymoney2

0.34.7

4 of 24 See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0	0.55.0
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/net@v0.8.0	0.55.0
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/net@v0.9.0	0.55.0

Open the chart page →

8,731

galoy-depsgaloymoney2

0.10.20

8 of 9 See more

galoy-deps galoymoney2 0.10.20

8 of the 9 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.55.0
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/net@v0.29.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.14.3	9395dec77fcf	golang.org/x/net@v0.19.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.14.3	64adcb95ce09	golang.org/x/net@v0.19.0	0.55.0
quay.io/jetstack/cert-manager-startupapicheck :v1.14.3	df8677135139	golang.org/x/net@v0.19.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.14.3	d8ad5515f44f	golang.org/x/net@v0.19.0	0.55.0
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

12,015

lndgaloymoney2

0.10.6

1 of 3 See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

2,162

monitoringgaloymoney2

0.12.21

5 of 6 See more

monitoring galoymoney2 0.12.21

5 of the 6 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/net@v0.29.0	0.55.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/net@v0.23.0	0.55.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

5,339

gameserver-operatorgameserver-operator

0.3.0

1 of 1 See more

gameserver-operator gameserver-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/idebeijer/gameserver-operator :latest	1b099cfe9e5e	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

383

autobrrgeek-cookbook

1.1.3

1 of 1 See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0

Open the chart page →

2,237

dendritegeek-cookbook

6.4.0

1 of 1 See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.55.0

Open the chart page →

2,144

gatusgeek-cookbook

1.1.2

1 of 1 See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

1,882

gonicgeek-cookbook

6.4.2

1 of 1 See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0

Open the chart page →

3,526

gotifygeek-cookbook

1.2.2

1 of 1 See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gotify/server :2.1.4	09c79bc1e403	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

3,133

maddygeek-cookbook

3.2.0

1 of 1 See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/net@v0.0.0-20211011170408-caeb26a5c8c0	0.55.0

Open the chart page →

2,631

minifluxgeek-cookbook

5.2.0

1 of 2 See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/net@v0.0.0-20210916014120-12bc252f5db8	0.55.0

Open the chart page →

2,431

navidromegeek-cookbook

6.4.2

1 of 1 See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0

Open the chart page →

3,598

owncloud-ocisgeek-cookbook

2.4.2

1 of 1 See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0

Open the chart page →

3,244

photoprismgeek-cookbook

7.2.0

1 of 1 See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
photoprism/photoprism :220629-jammy	2954334adbda	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.55.0

Open the chart page →

19,608

pod-gatewaygeek-cookbook

5.6.2

1 of 2 See more

pod-gateway geek-cookbook 5.6.2

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/gateway-admision-controller :v3.5.0	175512bb3f61	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

2,361

pod-gateway-settergeek-cookbook

1.0.0

1 of 1 See more

pod-gateway-setter geek-cookbook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/gateway-admision-controller :v2.0.0	0d6d0df98fe4	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0

Open the chart page →

1,642

rtsp-to-webgeek-cookbook

2.2.2

1 of 1 See more

rtsp-to-web geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0

Open the chart page →

1,468

searxgeek-cookbook

5.6.2

2 of 4 See more

searx geek-cookbook 5.6.2

2 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
dalf/morty :latest	248a4849c350	golang.org/x/net@v0.0.0-20220421235706-1d1ef9303861	0.55.0
library/caddy :2.2.0-alpine	7367adca165f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0

Open the chart page →

7,507

skypilotgeek-cookbook

0.0.1

3 of 3 See more

skypilot geek-cookbook 0.0.1

3 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	golang.org/x/net@v0.38.0	0.55.0
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	golang.org/x/net@v0.41.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

9,103

torrservergeek-cookbook

1.2.2

1 of 1 See more

torrserver geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
smailkoz/torrserver :1.0.111	7b52d15de8f0	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0

Open the chart page →

3,166

vikunjageek-cookbook

6.2.0

2 of 4 See more

vikunja geek-cookbook 6.2.0

2 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/caddy :2.4.2-alpine	fbc51bcf1ab0	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0
vikunja/api :0.17.1	8cba0520bf8c	golang.org/x/net@v0.0.0-20210505024714-0287a6fb4125	0.55.0

Open the chart page →

6,905

webhook-receivergeek-cookbook

0.0.1

1 of 1 See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	golang.org/x/net@v0.15.0	0.55.0

Open the chart page →

1,369

cbtgeneral-helm-charts

0.0.5

1 of 1 See more

cbt general-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ethpandaops/cbt :latest	5377ffb3091a	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

566

chproxygeneral-helm-charts

0.0.2

1 of 1 See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
contentsquareplatform/chproxy :v1.26.5	24555f22d4be	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

3,766

dispatchoor-apigeneral-helm-charts

0.1.1

1 of 1 See more

dispatchoor-api general-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/ethpandaops/dispatchoor-api :latest	a0b272f6682a	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

780

kafkagengxiankun-charts

0.2.0

1 of 1 See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.55.0

Open the chart page →

4,559

mongogengxiankun-charts

0.1.0

1 of 1 See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
library/mongo :5.0	41108d183e97	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

4,029

geonetwork-k8sgeonetwork-k8s

4.2.8

1 of 5 See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	golang.org/x/net@v0.11.0	0.55.0

Open the chart page →

35,011

istiogetindata

1.11.1

2 of 2 See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0

Open the chart page →

16,896

ghostghost

0.1.0

1 of 4 See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
litestream/litestream :0.3	c5a1e1b01916	golang.org/x/net@v0.14.0	0.55.0

Open the chart page →

9,148

gitanagitana

1.4.0

1 of 1 See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/net@v0.0.0-20210929161516-d455829e376d	0.55.0

Open the chart page →

3,479

gitlab-goproxygitlab-goproxy

0.2.2

1 of 1 See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/net@v0.10.0	0.55.0

Open the chart page →

1,332

gitlab-mr-conformgitlab-mr-conform

0.5.2

1 of 1 See more

gitlab-mr-conform gitlab-mr-conform 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/chrxmvtik/gitlab-mr-conform :0.5.2	b2eb79fc99cb	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

428

apid-helpergkarthiks

0.1.4

1 of 1 See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/net@v0.11.0	0.55.0

Open the chart page →

2,616

prometheus-container-resource-exportergkarthiks

0.3.1

1 of 1 See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
gkarthics/container-resource-exporter :latest	6799af333e8a	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0

Open the chart page →

2,219

glassflow-etlglassflow

0.5.21

5 of 16 See more

glassflow-etl glassflow 0.5.21

5 of the 16 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/net@v0.44.0	0.55.0
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/net@v0.28.0	0.55.0
ghcr.io/glassflow/glassflow-etl-be :v3.2.0	20f066d0f631	golang.org/x/net@v0.52.0	0.55.0
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/net@v0.43.0	0.55.0
ghcr.io/glassflow/glassflow-etl-migration :v3.2.0	7db1a1bf3dae	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

12,441

glassflow-operatorglassflow-operator

0.8.5

1 of 3 See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

773

glauthglauth

0.3.17

1 of 2 See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/glauth :2.5	2e6e09fa77dd	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

2,692

gliderglider

0.1.5

1 of 1 See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
nadoo/glider :0.16	38aadefbd607	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

895

gnp-stackgnp-stack

0.0.5

7 of 14 See more

gnp-stack gnp-stack 0.0.5

7 of the 14 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
grafana/grafana :12.2.1	35c41e0fd029	golang.org/x/net@v0.45.0	0.55.0
rancher/local-path-provisioner :v0.0.32	9289da488b07	golang.org/x/net@v0.38.0	0.55.0
ghcr.io/openconfig/gnmic :0.45.0	d422a9ebd4a2	golang.org/x/net@v0.50.0	0.55.0
quay.io/prometheus-operator/prometheus-operator :v0.85.0	890b3bb05cf4	golang.org/x/net@v0.43.0	0.55.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/net@v0.37.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.3	3d671cf20a35	golang.org/x/net@v0.44.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

7,727

go-file-servergo-file-server

1.0.0

1 of 2 See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/net@v0.27.0	0.55.0

Open the chart page →

2,222

goldpingergoldpinger

1.1.3

1 of 1 See more

goldpinger goldpinger 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
bloomberg/goldpinger :3.11.3	a8ea8c61ff4c	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

142

gorsegorse-io

0.4.2

3 of 4 See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/net@v0.7.0	0.55.0
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/net@v0.7.0	0.55.0
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

4,437

gotwaygotway

0.8.0

1 of 1 See more

gotway gotway 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
ghcr.io/gotway/gotway :v0.0.13	7ed73c1979ee	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0

Open the chart page →

1,827

Governify-Bluejaygovernify

0.1.0

1 of 12 See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0

Open the chart page →

22,729

Governify-Falcongovernify

0.1.0

1 of 10 See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.55.0

Open the chart page →

24,514

goweeklygoweekly

2.0.0

1 of 1 See more

goweekly goweekly 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/goweekly :v2.0.0	08dcc130fbea	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.55.0

Open the chart page →

1,230

harborgpg-dev

1.18.3

4 of 8 See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-25680.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.14.3	a30e5a8be3d9	golang.org/x/net@v0.47.0	0.55.0
goharbor/harbor-jobservice :v2.14.3	e2b0298e894d	golang.org/x/net@v0.47.0	0.55.0
goharbor/harbor-registryctl :v2.14.3	ddf6bb429eb6	golang.org/x/net@v0.47.0	0.55.0
goharbor/trivy-adapter-photon :v2.14.3	5c6f7162804c	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

3,460

Container images carrying it

3,744 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/net@v0.30.0	0.55.0	1
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9	0.55.0	1
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e	0.55.0	1
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	golang.org/x/net@v0.34.0	0.55.0	1
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	golang.org/x/net@v0.41.0	0.55.0	1
quay.io/prometheus/prometheus :v3.2.1	6927e0919a14	golang.org/x/net@v0.34.0	0.55.0	1
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.55.0	1
quay.io/prometheus/prometheus :v3.4.1	9abc6cf6aea7	golang.org/x/net@v0.39.0	0.55.0	1
quay.io/prometheus/prometheus :v2.34.0	b37103e03399	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
quay.io/prometheus/prometheus :v3.11.3	c0b857aead0d	golang.org/x/net@v0.52.0	0.55.0	1
quay.io/prometheus/prometheus :v3.11.2	cd37346c9745	golang.org/x/net@v0.52.0	0.55.0	1
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	golang.org/x/net@v0.26.0	0.55.0	1
quay.io/prometheus/pushgateway :v1.11.1	03738d278e08	golang.org/x/net@v0.36.0	0.55.0	1
quay.io/prometheus/pushgateway :v1.6.0	5111de00e969	golang.org/x/net@v0.10.0	0.55.0	1
quay.io/prometheus/statsd-exporter :v0.30.0	378cb79c4ac7	golang.org/x/net@v0.51.0	0.55.0	1
quay.io/prometheus/statsd-exporter :v0.27.2	9ed70604d941	golang.org/x/net@v0.28.0	0.55.0	1
quay.io/rabbitmqoperator/messaging-topology-operator :1.18.1	f97c36882244	golang.org/x/net@v0.46.0	0.55.0	1
quay.io/reactiveops/rbac-manager :v1.9.5	87e3f461446f	golang.org/x/net@v0.48.0	0.55.0	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/net@v0.11.0	0.55.0	1
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.55.0	1
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	1
quay.io/redhat-developer/servicebinding-operator	16286ac84ddd	golang.org/x/net@v0.17.0	0.55.0	1
quay.io/reiml/smtp-gotify :latest	80ffa9d2044a	golang.org/x/net@v0.28.0	0.55.0	1
quay.io/rhdh/rhdh-hub-rhel9 :latest	0b26358f5793	golang.org/x/net@v0.48.0	0.55.0	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	golang.org/x/net@v0.0.0-20200927032502-5d4f70055728	0.55.0	1
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0	1
quay.io/sergeyshevch/s3manager :feature_refactoring	ff59fcdf44eb	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
quay.io/skopeo/stable :v1.13	4853591bd1d2	golang.org/x/net@v0.11.0	0.55.0	1
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0	1
quay.io/spotahome/redis-operator :latest	8c772955184e	golang.org/x/net@v0.8.0	0.55.0	1
quay.io/superq/draytek-exporter :v0.2.0	3b577bdceaae	golang.org/x/net@v0.46.0	0.55.0	1
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	golang.org/x/net@v0.10.0	0.55.0	1
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	golang.org/x/net@v0.41.0	0.55.0	1
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.55.0	1
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/net@v0.26.0	0.55.0	1
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
quay.io/tigera/operator :v1.15.1	c6591da87aa8	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0	1
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
quay.io/uswitch/kiam :v4.0	be3a5846922d	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.55.0	1
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	golang.org/x/net@v0.5.0	0.55.0	1
quay.io/youniqx/heist :v1.1.209	c43b3a9d98ae	golang.org/x/net@v0.28.0	0.55.0	1
quay.io/zncdatadev/airflow-operator :0.4.0	b716ef483b75	golang.org/x/net@v0.47.0	0.55.0	1
quay.io/zncdatadev/commons-operator :0.4.0	1a353def9fe1	golang.org/x/net@v0.49.0	0.55.0	1
quay.io/zncdatadev/dolphinscheduler-operator :0.4.0	d0a4e55eeb7f	golang.org/x/net@v0.53.0	0.55.0	1
quay.io/zncdatadev/hbase-operator :0.4.0	69e9a1b0daf8	golang.org/x/net@v0.49.0	0.55.0	1
quay.io/zncdatadev/hdfs-operator :0.4.0	eb3c2928250e	golang.org/x/net@v0.49.0	0.55.0	1
quay.io/zncdatadev/hive-operator :0.4.0	d66ba9149c22	golang.org/x/net@v0.53.0	0.55.0	1