CVE-2026-25681

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 13th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,071; of 17,805 indexed, latest versions
Container images: 3,716; deployed by those charts
Fix available: 1 of 1; affected package

Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html

Carried by container images the latest versions of 3,071 of 17,805 indexed charts deploy, on 3,716 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more	0.55.0	3,716

OSV records: GO-2026-5029

Charts affected

3,071 by stars

Chart

Latest

Affected images

Radar Score

tdsfkubebb

5.7.0

1 of 3 See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
kubebb/mesh-operator :v5.7.0	163ebbfc7a82	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

6,503

tekton-operatorkubebb

0.64.0

2 of 2 See more

tekton-operator kubebb 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
hyperledgerk8s/tekton-operator-webhook :v0.64.0	2237cb80f52b	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.55.0
hyperledgerk8s/tektoncd-operator :v0.64.0	d0a3a35a138d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.55.0

Open the chart page →

2,432

u4a-componentkubebb

0.2.10

6 of 8 See more

u4a-component kubebb 0.2.10

6 of the 8 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
kubebb/capsule-ce :v0.1.2-20221122	a3dba2a95cef	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0
kubebb/iam-controller :v0.2.0-20240128	8ffbfa2d67e9	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.55.0
kubebb/iam-provider :v0.2.0-20240128	0ba03fcee3a7	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2	0.55.0
kubebb/kube-oidc-proxy-ce :v0.3.0-20221008	58d5efec568b	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0
kubebb/oidc-server :v0.2.0	2b5894ef1e2f	golang.org/x/net@v0.0.0-20220325170049-de3da57026de	0.55.0
kubebb/resource-viewer :v0.2.0	65bb40b353db	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.55.0

Open the chart page →

13,854

weaviatekubebb

16.3.0

1 of 1 See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
semitechnologies/weaviate :1.19.1	7a00d226f063	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

1,876

argo-workflowskubeblocks

0.40.14

2 of 2 See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	golang.org/x/net@v0.19.0	0.55.0
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

2,886

calicokubeblocks

3.28.0

3 of 3 See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.0	cef0c907b8f4	golang.org/x/net@v0.24.0	0.55.0
calico/kube-controllers :v3.28.0	8f04e4772a2b	golang.org/x/net@v0.24.0	0.55.0
calico/node :v3.28.0	385bf6391fea	golang.org/x/net@v0.24.0	0.55.0

Open the chart page →

3,316

casdoor-helm-chartskubeblocks

1.753.0

1 of 1 See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
casbin/casdoor :v1.753.0	770ad9ec3190	golang.org/x/net@v0.21.0	0.55.0

Open the chart page →

2,307

chaos-meshkubeblocks

2.7.2

4 of 4 See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.6	78dc63bc5b89	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.55.0
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	golang.org/x/net@v0.17.0	0.55.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	golang.org/x/net@v0.17.0	0.55.0
ghcr.io/chaos-mesh/chaos-mesh :v2.7.2	8bc853c7414c	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

13,820

ciliumkubeblocks

1.15.1

2 of 2 See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	golang.org/x/net@v0.19.0	0.55.0
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

5,152

dt-platformkubeblocks

0.1.2

1 of 1 See more

dt-platform kubeblocks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
apecloud/dt-platform :0.1.1	d48bcbd38066	golang.org/x/net@v0.8.0	0.55.0

Open the chart page →

880

geminikubeblocks

0.13.4

2 of 8 See more

gemini kubeblocks 0.13.4

2 of the 8 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/net@v0.33.0	0.55.0
victoriametrics/vmalert :v1.95.1	a83e5db0897a	golang.org/x/net@v0.18.0	0.55.0

Open the chart page →

3,104

gemini-schedulerkubeblocks

0.1.1

1 of 1 See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	golang.org/x/net@v0.27.0	0.55.0

Open the chart page →

1,572

grafanakubeblocks

6.59.4

1 of 1 See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
grafana/grafana :10.1.1	1b9ca4bbc4a2	golang.org/x/net@v0.12.0	0.55.0

Open the chart page →

3,578

ingress-nginxkubeblocks

4.12.1

2 of 2 See more

ingress-nginx kubeblocks 4.12.1

2 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.12.1	d2fbc4ec70d8	golang.org/x/net@v0.37.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.5.2	e8825994b7a2	golang.org/x/net@v0.37.0	0.55.0

Open the chart page →

1,624

kubeblocks-csi-driverkubeblocks

0.1.3

1 of 6 See more

kubeblocks-csi-driver kubeblocks 0.1.3

1 of the 6 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
apecloud/kubeblocks-csi-driver :0.1.3	c93655ccb2d7	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

2,090

kubetrankubeblocks

0.1.0

1 of 1 See more

kubetran kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
apecloud/kubetran-platform :latest	32bd92c7f7fa	golang.org/x/net@v0.15.0	0.55.0

Open the chart page →

1,208

lokikubeblocks

5.39.0

3 of 5 See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.34.1	045c9125634c	golang.org/x/net@v0.10.0	0.55.0
grafana/loki :2.9.2	6074e01dbe03	golang.org/x/net@v0.17.0	0.55.0
grafana/loki-canary :2.9.2	4249db29b992	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

5,863

metallbkubeblocks

0.14.4

2 of 3 See more

metallb kubeblocks 0.14.4

2 of the 3 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.14.4	bbef1ee3e7d3	golang.org/x/net@v0.22.0	0.55.0
quay.io/metallb/speaker :v0.14.4	37611bde45a2	golang.org/x/net@v0.22.0	0.55.0

Open the chart page →

2,602

metrics-serverkubeblocks

3.12.0

1 of 1 See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	golang.org/x/net@v0.20.0	0.55.0

Open the chart page →

1,145

nvidia-gpu-exporterkubeblocks

0.3.1

1 of 1 See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0

Open the chart page →

4,524

openebskubeblocks

3.10.0

3 of 3 See more

openebs kubeblocks 3.10.0

3 of the 3 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

10,631

postgres-operatorkubeblocks

1.12.2

1 of 1 See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	golang.org/x/net@v0.23.0	0.55.0

Open the chart page →

1,555

prometheuskubeblocks

15.16.1

5 of 6 See more

prometheus kubeblocks 15.16.1

5 of the 6 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
quay.io/prometheus/alertmanager :v0.24.0	088464f949de	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

10,323

smartfs-csi-driverkubeblocks

0.1.2

1 of 6 See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	golang.org/x/net@v0.5.0	0.55.0

Open the chart page →

9,257

snapshot-controllerkubeblocks

1.7.2

1 of 1 See more

snapshot-controller kubeblocks 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v6.2.1	98bab4eaf23c	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

1,128

spiderpoolkubeblocks

1.2.0

4 of 4 See more

spiderpool kubeblocks 1.2.0

4 of the 4 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	golang.org/x/net@v0.23.0	0.55.0
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	golang.org/x/net@v0.42.0	0.55.0
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	golang.org/x/net@v0.42.0	0.55.0
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins :19f19457ae7cec86457b0411543a3cf21dd9f95a	8edc39be1e22	golang.org/x/net@v0.43.0	0.55.0

Open the chart page →

8,515

vaultkubeblocks

0.30.0

2 of 2 See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.19.0	bbb7f98dc67d	golang.org/x/net@v0.35.0	0.55.0
hashicorp/vault-k8s :1.6.2	103a2d817a74	golang.org/x/net@v0.35.0	0.55.0

Open the chart page →

3,044

victoria-metrics-alertkubeblocks

0.8.3-reload

2 of 3 See more

victoria-metrics-alert kubeblocks 0.8.3-reload

2 of the 3 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
victoriametrics/vmalert :v1.95.1	a83e5db0897a	golang.org/x/net@v0.18.0	0.55.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0	0.55.0

Open the chart page →

3,717

kube-botblocker-operatorkube-botblocker

0.2.2

1 of 2 See more

kube-botblocker-operator kube-botblocker 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/gustavojst/kube-botblocker :0.2.0	4de059bb32ac	golang.org/x/net@v0.41.0	0.55.0

Open the chart page →

507

kubeclaritykubeclarity

2.23.3

3 of 5 See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/net@v0.14.0	0.55.0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/net@v0.19.0	0.55.0
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

5,521

airflow-operatorkubedoop

0.4.0

1 of 1 See more

airflow-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/airflow-operator :0.4.0	b716ef483b75	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

438

commons-operatorkubedoop

0.4.0

1 of 1 See more

commons-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/commons-operator :0.4.0	1a353def9fe1	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

388

dolphinscheduler-operatorkubedoop

0.4.0

1 of 1 See more

dolphinscheduler-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/dolphinscheduler-operator :0.4.0	d0a4e55eeb7f	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

381

hbase-operatorkubedoop

0.4.0

1 of 1 See more

hbase-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/hbase-operator :0.4.0	69e9a1b0daf8	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

388

hdfs-operatorkubedoop

0.4.0

1 of 1 See more

hdfs-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/hdfs-operator :0.4.0	eb3c2928250e	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

438

hive-operatorkubedoop

0.4.0

1 of 1 See more

hive-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/hive-operator :0.4.0	d66ba9149c22	golang.org/x/net@v0.53.0	0.55.0

Open the chart page →

381

kafka-operatorkubedoop

0.4.0

1 of 1 See more

kafka-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/kafka-operator :0.4.0	0a0b4c39c1ba	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

464

listener-operatorkubedoop

0.4.0

6 of 6 See more

listener-operator kubedoop 0.4.0

6 of the 6 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/listener-csi-driver :0.4.0	b69bed123b02	golang.org/x/net@v0.53.0	0.55.0
quay.io/zncdatadev/listener-operator :0.4.0	68b92dae8d75	golang.org/x/net@v0.53.0	0.55.0
quay.io/zncdatadev/sig-storage/csi-provisioner :v5.1.0	672e45d6a556	golang.org/x/net@v0.28.0	0.55.0
quay.io/zncdatadev/sig-storage/livenessprobe :v2.14.0	33692aed26aa	golang.org/x/net@v0.28.0	0.55.0
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	golang.org/x/net@v0.26.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

4,537

nifi-operatorkubedoop

0.4.0

1 of 1 See more

nifi-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/nifi-operator :0.4.0	bb4e26ff5e2f	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

388

secret-operatorkubedoop

0.4.0

5 of 5 See more

secret-operator kubedoop 0.4.0

5 of the 5 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/secret-csi-driver :0.4.0	604a7d98ab58	golang.org/x/net@v0.47.0	0.55.0
quay.io/zncdatadev/sig-storage/csi-provisioner :v5.1.0	672e45d6a556	golang.org/x/net@v0.28.0	0.55.0
quay.io/zncdatadev/sig-storage/livenessprobe :v2.14.0	33692aed26aa	golang.org/x/net@v0.28.0	0.55.0
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	golang.org/x/net@v0.26.0	0.55.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0	0.55.0

Open the chart page →

4,456

spark-k8s-operatorkubedoop

0.4.0

1 of 1 See more

spark-k8s-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/spark-k8s-operator :0.4.0	d3f2b10c4a6d	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

411

superset-operatorkubedoop

0.4.0

1 of 1 See more

superset-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/superset-operator :0.4.0	102e66e32218	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

388

trino-operatorkubedoop

0.4.0

1 of 1 See more

trino-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/trino-operator :0.4.0	4f516757aee3	golang.org/x/net@v0.54.0	0.55.0

Open the chart page →

376

zookeeper-operatorkubedoop

0.4.0

1 of 1 See more

zookeeper-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/zookeeper-operator :0.4.0	b4f33d89ac45	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

388

kube-ecr-secrets-operatorkube-ecr-secrets-operator

0.4.0

1 of 2 See more

kube-ecr-secrets-operator kube-ecr-secrets-operator 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/zak905/kube-ecr-secrets-operator/controller-manager :0.2.11	d078e45bac70	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

209

cephfs-csikubegems

1.0.8

1 of 6 See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0

Open the chart page →

4,453

chartmuseumkubegems

3.8.0

1 of 1 See more

chartmuseum kubegems 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba	0.55.0

Open the chart page →

3,527

gatewaykubegems

0.3.2

2 of 2 See more

gateway kubegems 0.3.2

2 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.55.0
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0

Open the chart page →

3,507

giteakubegems

5.0.8

1 of 2 See more

gitea kubegems 5.0.8

1 of the 2 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
gitea/gitea :1.16.8	b0bdf102b485	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

3,401

juicefs-csi-driverkubegems

0.19.2

2 of 6 See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2026-25681.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.23.0	3e4daf9626d5	golang.org/x/net@v0.17.0	0.55.0
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	golang.org/x/net@v0.9.0	0.55.0

Open the chart page →

4,866

Container images carrying it

3,716 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/clastix/kamaji-console :v0.2.1	29ecf8d4fa65	golang.org/x/net@v0.23.0	0.55.0	1
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0	1
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.55.0	1
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.55.0	1
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0	1
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.55.0	1
ghcr.io/cloudnative-pg/cloudnative-pg :1.28.0	34198e85b6e6	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/cloudnative-pg/cloudnative-pg :1.17.1	4dd365800b62	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.55.0	1
ghcr.io/cloudnative-pg/cloudnative-pg :1.21.1	9f707d91de1c	golang.org/x/net@v0.17.0	0.55.0	1
ghcr.io/cloudscript-technology/dumpscript :v0.0.42-alpine-edge	fce5b6fd161c	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/cloudscript-technology/k8s-monitoring-app :v0.0.25	cab66a6b3574	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/cloudtty/cloudshell :v0.8.10	23e8d178e02c	golang.org/x/net@v0.45.0	0.55.0	1
ghcr.io/cloudtty/cloudshell-operator :v0.8.10	14f036e33ef1	golang.org/x/net@v0.25.0	0.55.0	1
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	golang.org/x/net@v0.42.0	0.55.0	1
ghcr.io/clusternet/clusternet-hub :v1.0.0	59f75504c5d4	golang.org/x/net@v0.42.0	0.55.0	1
ghcr.io/clusternet/clusternet-scheduler :v1.0.0	a6ae5aff81ce	golang.org/x/net@v0.42.0	0.55.0	1
ghcr.io/cmacrae/kove :v0.2.0	185bfaae750c	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
ghcr.io/cmacrae/kove :v0.1.0	db1244edefc8	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0	1
ghcr.io/cndoit18/lxcfs-agent :latest	9853bb613cd0	golang.org/x/net@v0.38.0	0.55.0	1
ghcr.io/cohdi/composable-dra-driver :v0.2.2	8c05f7366981	golang.org/x/net@v0.54.0	0.55.0	1
ghcr.io/cohdi/dynamic-device-scaler :v0.2.2	b487e1d74632	golang.org/x/net@v0.49.0	0.55.0	1
ghcr.io/comet-ml/opik/opik-python-backend :2.2.70	a3bbadfab68d	golang.org/x/net@v0.47.0	0.55.0	1
ghcr.io/conductionnl/adresservice-php :latest	c5075f0320cd	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/authorization-component-php :latest	94a749392fcf	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/berichtservice-php :latest	ee6a21e66ff0	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/brpservice-php :latest	c17f1ba17d36	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/contactcatalogus-php :latest	eeb625bd660c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/digispoof-interface-php :latest	03aba499950f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/eav-component-php :latest	24bbca4a52a8	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/education-component-php :latest	da6b05a1a601	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/eherkenning-ui-php :latest	deed102b4255	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/instemmingservice-php :latest	4ffe222b3e3a	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/notification-component-php :latest	cd9656e6bc2c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/user-component-php :latest	198db44fabb5	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	1