CVE-2026-25681

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 13th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,017; of 17,790 indexed, latest versions
Container images: 3,695; deployed by those charts
Fix available: 1 of 1; affected package

Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html

Carried by container images the latest versions of 3,017 of 17,790 indexed charts deploy, on 3,695 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,695

OSV records: GO-2026-5029

Charts affected

3,017 by stars

Chart

Latest

Affected images

Radar Score

ceph-csi-rbdceph-csi

3.17.1

6 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

6 of the 6 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/net@v0.53.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/net@v0.47.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/net@v0.51.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/net@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

4,103

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	golang.org/x/net@v0.52.0	0.55.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	golang.org/x/net@v0.52.0	0.55.0
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

6,415

csi-driver-nfscsi-driver-nfs

4.13.4

4 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.4

4 of the 6 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

3,391

mariadb-operatormariadb-operator

26.6.0

1 of 1 See more

mariadb-operator mariadb-operator 26.6.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/mariadb-operator/mariadb-operator :26.6.0	a5e17b48f08e	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

377

atlantisatlantis

6.15.1

1 of 1 See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

1,899

grafana-agentgrafana

0.44.2

1 of 2 See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/net@v0.33.0	0.55.0

Open the chart page →

3,526

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/net@v0.1.1-0.20221027164007-c63010009c80	0.55.0

Open the chart page →

2,461

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.55.0
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/net@v0.10.0	0.55.0
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/net@v0.0.0-20220706163947-c90051bbdb60	0.55.0
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

32,420

cockroachdbcockroachdb

22.0.3

1 of 3 See more

cockroachdb cockroachdb 22.0.3

1 of the 3 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-self-signer-cert :1.10	07a49acec18d	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

763

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0	0.55.0

Open the chart page →

10,695

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

2,228

signozsignoz

0.141.1

2 of 5 See more

signoz signoz 0.141.1

2 of the 5 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0	0.55.0
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

7,607

community-operatormongodb-helm-charts

0.13.0

1 of 1 See more

community-operator mongodb-helm-charts 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

1,126

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

716

node-local-dnsdeliveryhero

2.9.2

1 of 1 See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/net@v0.46.0	0.55.0

Open the chart page →

1,708

rancherrancher-latest

2.15.1

2 of 2 See more

rancher rancher-latest 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/net@v0.52.0	0.55.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

1,487

sealed-secretsbitnami

2.5.19

1 of 1 See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	golang.org/x/net@v0.42.0	0.55.0

Open the chart page →

643

difydouban

0.10.0

2 of 6 See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	golang.org/x/net@v0.42.0	0.55.0
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

19,544

dragonflydragonfly

1.8.4

1 of 3 See more

dragonfly dragonfly 1.8.4

1 of the 3 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
dragonflyoss/scheduler :v2.5.2-rc.0	6d710dc2bae0	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

3,830

secrets-store-csi-driversecret-store-csi-driver

1.6.1

2 of 4 See more

secrets-store-csi-driver secret-store-csi-driver 1.6.1

2 of the 4 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.18.0	c4cc074199c0	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

1,802

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

2,139

opensearch-operatoropensearch-operator

3.0.2

1 of 1 See more

opensearch-operator opensearch-operator 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-operator :3.0.0-alpha	f78bbdd1a386	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

610

pulsarapache

4.7.0

6 of 10 See more

pulsar apache 4.7.0

6 of the 10 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.47.0	0.55.0
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/net@v0.49.0	0.55.0
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
victoriametrics/operator :v0.68.3	f52e1bd679cb	golang.org/x/net@v0.49.0	0.55.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/net@v0.44.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

9,891

miniocloudpirates-minio

0.13.4

1 of 1 See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

968

vertical-pod-autoscalercowboysysop

11.1.1

4 of 4 See more

vertical-pod-autoscaler cowboysysop 11.1.1

4 of the 4 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	golang.org/x/net@v0.19.0	0.55.0
registry.k8s.io/autoscaling/vpa-admission-controller :1.5.1	9928d59477fb	golang.org/x/net@v0.43.0	0.55.0
registry.k8s.io/autoscaling/vpa-recommender :1.5.1	e629c61b75eb	golang.org/x/net@v0.43.0	0.55.0
registry.k8s.io/autoscaling/vpa-updater :1.5.1	cba2aa4b3239	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

6,960

difydify-helm

0.38.0

1 of 11 See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.15	750e1111426e	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

22,214

pyroscopegrafana

2.3.1

2 of 3 See more

pyroscope grafana 2.3.1

2 of the 3 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.12.2	f94b1c82957a	golang.org/x/net@v0.46.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

3,214

botkubeinfracloudio

1.14.0

1 of 1 See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

1,104

operatorminio-operator

7.1.1

1 of 1 See more

operator minio-operator 7.1.1

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/minio/operator :v7.1.1	cd587f60c43d	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

874

ambassadordatawire

6.9.5

1 of 2 See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0

Open the chart page →

4,093

oktetookteto

0.0.0-2026-08-17

3 of 10 See more

okteto okteto 0.0.0-2026-08-17

3 of the 10 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/okteto/backend :0.0.0-2026-08-17	629bdce31b4d	golang.org/x/net@v0.47.0	0.55.0
ghcr.io/okteto/buildkit :0.0.0-2026-08-17	14527ca5d2a9	golang.org/x/net@v0.35.0	0.55.0
ghcr.io/okteto/okteto :3.22.0	4585017f52f6	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

5,532

hydraory

0.64.0

1 of 2 See more

hydra ory 0.64.0

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
oryd/hydra :v26.2.0	ff67c7fb5f95	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

1,163

prometheus-msteamsprometheus-msteams

1.3.6

1 of 1 See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/prometheusmsteams/prometheus-msteams :v1.5.3	a9f4d31ab811	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

941

proxmox-csi-pluginproxmox-csi

0.5.12

3 of 7 See more

proxmox-csi-plugin proxmox-csi 0.5.12

3 of the 7 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

1,828

volsyncbackube-helm-charts

0.16.0

1 of 1 See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/backube/volsync :0.16.0	0d03a6aad575	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

1,386

concourseconcourse

20.3.0

1 of 2 See more

concourse concourse 20.3.0

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
concourse/concourse :8.3.0	40a143ce5873	golang.org/x/net@v0.50.0	0.55.0

Open the chart page →

2,054

san-iscsi-csienix

4.0.2

1 of 7 See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
enix/san-iscsi-csi :v4.0.2	f963da81ecf7	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b	0.55.0

Open the chart page →

4,168

headscalegabe565

0.16.0

1 of 2 See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

2,003

oncallgrafana

1.16.5

7 of 12 See more

oncall grafana 1.16.5

7 of the 12 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/net@v0.26.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.8.0	595c548dee6f	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.8.0	fd798a5a773e	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

16,282

k8sgpt-operatork8sgpt

0.2.29

2 of 2 See more

k8sgpt-operator k8sgpt 0.2.29

2 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/k8sgpt-ai/k8sgpt-operator :v0.2.29	82d0adcce816	golang.org/x/net@v0.53.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

980

openbaoopenbao

0.29.4

1 of 2 See more

openbao openbao 0.29.4

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

1,516

kratosory

0.64.0

1 of 1 See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
oryd/kratos :v26.2.0	2a13bb8d362c	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

873

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.3	f09282d281f6	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.55.0

Open the chart page →

11,431

aws-cloudwatch-metricsaws

0.0.11

1 of 1 See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

1,563

zabbixcetic

3.1.3

1 of 5 See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.55.0

Open the chart page →

33,928

csi-driver-smbcsi-driver-smb

1.20.3

3 of 6 See more

csi-driver-smb csi-driver-smb 1.20.3

3 of the 6 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/net@v0.49.0	0.55.0
registry.k8s.io/sig-storage/livenessprobe :v2.19.0	06da0d5b8908	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

3,005

emissary-ingressdatawire

7.1.8-ea

1 of 1 See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.55.0

Open the chart page →

4,925

hpe-csi-driverhpe-storage

3.3.0

3 of 14 See more

hpe-csi-driver hpe-storage 3.3.0

3 of the 14 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.17.0	f9de845b1701	golang.org/x/net@v0.54.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

1,700

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

2,373

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/net@v0.40.0	0.55.0

Open the chart page →

1,460

Container images carrying it

3,695 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
pnnlmiscscripts/pixiecore :1.0.1-1	c6f17741a0d7	golang.org/x/net@v0.7.0	0.55.0	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	golang.org/x/net@v0.48.0	0.55.0	1
polyaxon/training-operator :2.1.0	b5b29deaec9a	golang.org/x/net@v0.17.0	0.55.0	1
pomerium/pomerium :v0.22.1	9c69b10a2126	golang.org/x/net@v0.9.0	0.55.0	1
portainer/portainer-ce :2.18.4-alpine	3e61aaee1341	golang.org/x/net@v0.7.0	0.55.0	1
pozetroninc/liftbridge :v1.1.0	79fd6b9d93e6	golang.org/x/net@v0.0.0-20191021144547-ec77196f6094	0.55.0	1
pozetroninc/rethinkdb-cluster :v2.4.1	6b06a098f994	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3	0.55.0	1
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	golang.org/x/net@v0.7.0	0.55.0	1
pritunl/pritunl-zero :1.0.3648.46	0f2943e0d41b	golang.org/x/net@v0.42.0	0.55.0	1
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd	0.55.0	1
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/net@v0.0.0-20220728211354-c7608f3a8462	0.55.0	1
prom/blackbox-exporter :v0.25.0	b04a9fef4fa0	golang.org/x/net@v0.24.0	0.55.0	1
prom/blackbox-exporter :v0.23.0	ca04aa9d9093	golang.org/x/net@v0.2.0	0.55.0	1
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/net@v0.29.0	0.55.0	1
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	golang.org/x/net@v0.33.0	0.55.0	1
prom/graphite-exporter :v0.16.0	e54bca6645ea	golang.org/x/net@v0.30.0	0.55.0	1
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0	1
prom/memcached-exporter :v0.15.5	92a6ad5a3d3e	golang.org/x/net@v0.47.0	0.55.0	1
prom/memcached-exporter :v0.15.0	bb01ad25e9fc	golang.org/x/net@v0.29.0	0.55.0	1
prom/node-exporter :v1.10.2	3ac34ce007ac	golang.org/x/net@v0.44.0	0.55.0	1
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/net@v0.10.0	0.55.0	1
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/net@v0.22.0	0.55.0	1
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd	0.55.0	1
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/net@v0.17.0	0.55.0	1
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.55.0	1
prom/prometheus :v3.8.0	d936808bdea5	golang.org/x/net@v0.46.0	0.55.0	1
prom/prometheus :v2.16.0	e4ca62c0d62f	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.55.0	1
prom/prometheus :v2.22.2	f7ffebdd428b	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.55.0	1
prom/pushgateway :v1.5.1	28fe26c8b8b1	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0	1
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0	1
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0	1
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/net@v0.10.0	0.55.0	1
prom/statsd-exporter :v0.29.0	632f70580492	golang.org/x/net@v0.48.0	0.55.0	1
promzeus/redis-sentinel-gateway :v1	82f6d56e280b	golang.org/x/net@v0.26.0	0.55.0	1
prowlercloud/prowler-api :5.31.1	4f252d579be2	golang.org/x/net@v0.54.0	0.55.0	1
pulumi/pulumi-kubernetes-operator :v2.5.1	7dace4491358	golang.org/x/net@v0.49.0	0.55.0	1
qmcgaw/gluetun :v3.41.1	1a5bf4b4820a	golang.org/x/net@v0.47.0	0.55.0	1
qmcgaw/gluetun :v3.40.0	2b42bfa04675	golang.org/x/net@v0.31.0	0.55.0	1
qonstrukt/php :8.4-v8-apache	089af7925aa1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.55.0	1
qoveryrd/digital-mobius :0.1.4	b30a9398a83c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0	1
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f	0.55.0	1
qumine/ingress-controller :v0.8.5	f2c8a2148381	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0	1
qumine/minecraft-server :v0.1.15	c0b650d51132	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0	1
rabbitmqoperator/cluster-operator :1.8.3	231e7ce0e905	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.55.0	1
rabbitmqoperator/cluster-operator :2.19.2	840be4bad78e	golang.org/x/net@v0.51.0	0.55.0	1
rabbitmqoperator/cluster-operator :2.6.0	8651dd3cec51	golang.org/x/net@v0.18.0	0.55.0	1
rancher/hardened-calico :v3.13.3	6d2cd61a338b	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.55.0	1
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1