CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,058; of 17,790 indexed, latest versions
Container images: 4,694; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,058 of 17,790 indexed charts deploy, on 4,694 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+179 more	1.25.10	4,539
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,589

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,058 by stars

Chart

Latest

Affected images

Radar Score

akto-source-code-analyserakto

0.1.5

1 of 3 See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aktosecurity/akto-puppeteer-replay :doom_latest	853e37321e6e	stdlib@go1.22.5	1.25.10

Open the chart page →

4,886

akto-testing-db-layerakto

1.42.17

1 of 2 See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
keelhq/keel :latest	73714afb4443	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.53.0 1.25.10

Open the chart page →

4,866

api-gateway-loggingakto

0.1.2

1 of 1 See more

api-gateway-logging akto 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aktosecurity/mirror-api-logging :api-gateway-logging-openapi	12ed2544756f	stdlib@go1.23.3	1.25.10

Open the chart page →

413

kpubberalekc

0.0.4

1 of 1 See more

kpubber alekc 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alekc/kpubber :v0.0.2	a462d5797e14	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.53.0 1.25.10

Open the chart page →

2,228

rabbitmq-cluster-operatoralekc

2.9.0

1 of 1 See more

rabbitmq-cluster-operator alekc 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
rabbitmqoperator/cluster-operator :2.19.2	840be4bad78e	golang.org/x/net@v0.51.0 stdlib@go1.25.8	0.53.0 1.25.10

Open the chart page →

257

valkey-operatoralekc

0.4.0

1 of 1 See more

valkey-operator alekc 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/hyperspike/valkey-operator :v0.0.61	7d8c669f11a4	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.53.0 1.25.10

Open the chart page →

333

mautrix-signalalexanderbadel

0.1.1

1 of 2 See more

mautrix-signal alexanderbadel 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
signald/signald :0.18.2	0ffad7ccc2eb	stdlib@go1.18.1	1.25.10

Open the chart page →

2,099

qbittorrentalexmorbo-qbittorrent

1.2.1

1 of 1 See more

qbittorrent alexmorbo-qbittorrent 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/squat/generic-device-plugin :36bfc606bba2064de6ede0ff2764cbb52edff70d	ba6f0b4cf6c8	golang.org/x/net@v0.17.0 stdlib@go1.20.2	0.53.0 1.25.10

Open the chart page →

889

quialexmorbo-qui

0.1.0

1 of 1 See more

qui alexmorbo-qui 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/qui :v1.14.1	10b7945d4f09	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

1,624

slskdalexmorbo-slskd

0.3.0

1 of 1 See more

slskd alexmorbo-slskd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/slskd/slskd :0.25.1	ab9ed50e028b	stdlib@go1.22.2	1.25.10

Open the chart page →

1,732

wireguardalexpresso

0.1.3

1 of 2 See more

wireguard alexpresso 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
linuxserver/wireguard :latest	bf03578ef731	golang.org/x/net@v0.47.0	0.53.0

Open the chart page →

786

gotifyalexvanderberkel

0.7.0

1 of 1 See more

gotify alexvanderberkel 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gotify/server :3.1.0	be44495e4609	stdlib@go1.26.0	1.25.10

Open the chart page →

320

book-serveral-masood-helm-charts

0.1.0

1 of 1 See more

book-server al-masood-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
almasood/book-server :latest	6ffac9b63cdf	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

486

gitlab-code-review-notifieralmorgv

0.1.2

1 of 2 See more

gitlab-code-review-notifier almorgv 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
almorgv/gitlab-code-review-notifier :0.1.2	5f2a7d2b44d8	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.14.15	0.53.0 1.25.10

Open the chart page →

2,115

flux-suspension-exporteralpineworks

0.1.1

1 of 1 See more

flux-suspension-exporter alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/flux-suspension-exporter :v1.0.0	341f0a6cd2b6	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.53.0 1.25.10

Open the chart page →

564

flux-suspensions-exporteralpineworks

0.1.0

1 of 1 See more

flux-suspensions-exporter alpineworks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/flux-suspension-exporter :v1.0.0	341f0a6cd2b6	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.53.0 1.25.10

Open the chart page →

564

glancealpineworks

0.1.1

1 of 1 See more

glance alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
glanceapp/glance :v0.8.4	6df86a7e8868	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.53.0 1.25.10

Open the chart page →

1,006

ipalpineworks

0.1.2

1 of 1 See more

ip alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/ip :v1.0.0	4e0d4d51f0bc	golang.org/x/net@v0.34.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

541

katalogalpineworks

0.1.2

2 of 5 See more

katalog alpineworks 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/katalog-backend :v1.0.7	7e7a26393cd1	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.53.0 1.25.10
ghcr.io/alpineworks/katalog-migrations :v1.0.5	62c44a384e13	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.53.0 1.25.10

Open the chart page →

4,533

katalog-agentalpineworks

0.1.2

1 of 1 See more

katalog-agent alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/katalog-agent :v1.0.4	8f50bd568c2b	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.53.0 1.25.10

Open the chart page →

582

versitygwalpineworks

0.1.2

1 of 1 See more

versitygw alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
versity/versitygw :v1.0.14	5192635d0353	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.53.0 1.25.10

Open the chart page →

1,115

versitygw-webhook-pulsar-proxyalpineworks

0.1.1

1 of 1 See more

versitygw-webhook-pulsar-proxy alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy :v1.0.0	6e9ced773732	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.53.0 1.25.10

Open the chart page →

900

pagesalstom-pages-app

1.0.0

1 of 3 See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,242

amorphieamorphie

0.1.2

8 of 18 See more

amorphie amorphie 0.1.2

8 of the 18 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
burganbank/vault-initializer :v1	9259c34e4037	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.53.0 1.25.10
daprio/dashboard :0.14.0	7ba5d51e5b97	golang.org/x/net@v0.6.0 stdlib@go1.19.13	0.53.0 1.25.10
daprio/injector :1.11.2	763b9b70b0c8	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.53.0 1.25.10
daprio/operator :1.11.2	c584428aa12d	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.53.0 1.25.10
daprio/placement :1.11.2	d8e1446da996	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.53.0 1.25.10
daprio/sentry :1.11.2	1f507c1a181b	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.53.0 1.25.10
hashicorp/vault :1.15.2	6b4e5dadf082	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.53.0 1.25.10
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.53.0 1.25.10

Open the chart page →

28,289

sliding-sync-proxyananace-charts

0.2.13

1 of 2 See more

sliding-sync-proxy ananace-charts 0.2.13

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10

Open the chart page →

1,599

anchore-admission-controlleranchore-charts

0.8.5

1 of 2 See more

anchore-admission-controller anchore-charts 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
cfssl/cfssl :v1.6.5	c9018c2ddf0b	golang.org/x/net@v0.20.0 stdlib@go1.20.14	0.53.0 1.25.10

Open the chart page →

7,605

kaianchore-charts

0.5.1

1 of 1 See more

kai anchore-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
anchore/kai :v0.5.0	8aad6d0912dd	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.53.0 1.25.10

Open the chart page →

1,326

cert-manager-webhook-inwxandibraeu

0.9.0

1 of 1 See more

cert-manager-webhook-inwx andibraeu 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/andibraeu/cert-manager-webhook-inwx :v0.9.0	f015e745983e	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

599

music-assistant-serverandibraeu

2.1.2

1 of 1 See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.9.9	50666a6f8d7f	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

5,865

buildkit-serviceandrcuns

1.8.0

1 of 1 See more

buildkit-service andrcuns 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.31.0	a095b3d11ce1	golang.org/x/net@v0.35.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

1,294

pagesandrei-pages

1.0.0

1 of 3 See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,242

terjangandylibrian

0.0.3

1 of 1 See more

terjang andylibrian 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/andylibrian/terjang :latest	20a46b199247	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.16.4	0.53.0 1.25.10

Open the chart page →

1,985

chirpstack-packet-multiplexerangelnu

3.0.0

1 of 1 See more

chirpstack-packet-multiplexer angelnu 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/chirpstack-packet-multiplexer :latest	0c84c2d71006	stdlib@go1.13.15	1.25.10

Open the chart page →

2,239

dnsmadeeasy-webhookangelnu

6.0.7

1 of 1 See more

dnsmadeeasy-webhook angelnu 6.0.7

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/dnsmadeeasy-webhook :v1.9.0	a5ca158b1f02	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.53.0 1.25.10

Open the chart page →

810

games-on-whalesangelnu

2.0.0

1 of 7 See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	stdlib@go1.18.2	1.25.10

Open the chart page →

42,325

maddyangelnu

5.0.0

1 of 1 See more

maddy angelnu 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/foxcpp/maddy :0.9.5	de42151adff6	golang.org/x/net@v0.34.0 stdlib@go1.23.12	0.53.0 1.25.10

Open the chart page →

773

cert-manager-webhook-safednsansgroup

1.3.0

1 of 1 See more

cert-manager-webhook-safedns ansgroup 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ansgroup/cert-manager-webhook-safedns :v1.0.1	cd6b0ef2b309	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.53.0 1.25.10

Open the chart page →

2,495

ddosifyanteon

1.7.5

5 of 13 See more

ddosify anteon 1.7.5

5 of the 13 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
chrislusf/seaweedfs :3.56	ed80f00fde46	golang.org/x/net@v0.14.0 stdlib@go1.20.8	0.53.0 1.25.10
ddosify/selfhosted_hammer :1.4.2	a97a1b8a66af	golang.org/x/net@v0.8.0 stdlib@go1.18.1	0.53.0 1.25.10
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.4	0.53.0 1.25.10
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.25.10
prom/prometheus :v2.37.9	8176adea328e	golang.org/x/net@v0.7.0 stdlib@go1.19.11	0.53.0 1.25.10

Open the chart page →

25,816

antmediaantmedia

3.1.0

3 of 4 See more

antmedia antmedia 3.1.0

3 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mongo :8.0	02a0cc7939f5	stdlib@go1.24.6	1.25.10
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.53.0 1.25.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.53.0 1.25.10

Open the chart page →

4,621

ingress-nginxantmedia

4.4.0

2 of 2 See more

ingress-nginx antmedia 4.4.0

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.53.0 1.25.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.53.0 1.25.10

Open the chart page →

3,323

monitoringantmedia

1.0.0

1 of 6 See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	f772d434e8fa	golang.org/x/net@v0.51.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

2,461

nfs-server-provisioneranvibo

1.3.0

1 of 1 See more

nfs-server-provisioner anvibo 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.15	0.53.0 1.25.10

Open the chart page →

2,731

glauthanza-labs

1.0.1

1 of 1 See more

glauth anza-labs 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/glauth/glauth :v2.5.2	09c782ca5984	golang.org/x/net@v0.17.0 stdlib@go1.25.0	0.53.0 1.25.10

Open the chart page →

1,302

apipingapiping

1.5.0

1 of 1 See more

apiping apiping 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
udhos/apiping :1.5.0	41ab9bae6f3b	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.53.0 1.25.10

Open the chart page →

1,139

apishiftapishift

0.3.0

1 of 4 See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/everythingascode/apishift-backend :v0.3.0	14ff275b2e61	golang.org/x/net@v0.25.0 stdlib@go1.23.6	0.53.0 1.25.10

Open the chart page →

2,961

api-usage-cleanerapi-usage-cleaner

1.16.0

1 of 1 See more

api-usage-cleaner api-usage-cleaner 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner :1.16.0	d47f43484055	stdlib@go1.23.12	1.25.10

Open the chart page →

595

d.vazquezm.2021_helmapphelm

1.0.0

2 of 6 See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.25.10
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.25.10

Open the chart page →

19,788

app-mobilityappmo

0.1.0

3 of 5 See more

app-mobility appmo 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	golang.org/x/net@v0.0.0-20220822230855-b0a4917ee28c stdlib@go1.18.5	0.53.0 1.25.10
dellemc/csm-application-mobility-velero-plugin :v0.1.0	660cabd6d929	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.5	0.53.0 1.25.10
velero/velero :v1.8.1	8d784580931c	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.53.0 1.25.10

Open the chart page →

12,541

app-movies-seriesapp-movies-series

0.1.0

1 of 2 See more

app-movies-series app-movies-series 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :14.3	2d1e636f0778	stdlib@go1.16.7	1.25.10

Open the chart page →

3,167

accounts-uiappscode

2026.9.11

1 of 1 See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.53.0 1.25.10

Open the chart page →

2,655

Container images carrying it

4,694 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
almasood/book-server :latest	6ffac9b63cdf	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.53.0 1.25.10	1
almir/webhook :2.8.0	1698346f6077	stdlib@go1.14.7	1.25.10	1
almorgv/gitlab-code-review-notifier :0.1.2	5f2a7d2b44d8	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.14.15	0.53.0 1.25.10	1
alpine/git :2.36.3	66b210a97bc0	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.18.7	0.53.0 1.25.10	1
alpine/git :v2.49.1	c0280cf95723	golang.org/x/net@v0.45.0 stdlib@go1.24.8	0.53.0 1.25.10	1
alpine/helm	105741fa6621	golang.org/x/net@v0.23.0 stdlib@go1.22.5	0.53.0 1.25.10	1
alpine/helm :4.1.0	905a068da431	golang.org/x/net@v0.48.0 stdlib@go1.25.6	0.53.0 1.25.10	1
alpine/k8s :1.22.6	00ac10bcb759	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d stdlib@go1.17.6	0.53.0 1.25.10	1
alpine/k8s :1.27.3	21b24e6bf801	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.20.4	0.53.0 1.25.10	1
alpine/k8s :1.36.2	44ef4942e171	golang.org/x/net@v0.52.0 stdlib@go1.26.0	0.53.0 1.25.10	1
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/net@v0.19.0 stdlib@go1.22.7	0.53.0 1.25.10	1
alpine/k8s :1.31.13	7a319b15cfc9	golang.org/x/net@v0.43.0 stdlib@go1.23.12	0.53.0 1.25.10	1
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/net@v0.34.0 stdlib@go1.20.4	0.53.0 1.25.10	1
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/net@v0.31.0 stdlib@go1.23.2	0.53.0 1.25.10	1
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.2	0.53.0 1.25.10	1
alpine/k8s :1.37.0	b421c2e9419e	golang.org/x/net@v0.38.0 stdlib@go1.24.0	0.53.0 1.25.10	1
alpine/k8s :1.35.6	b7a12c5ddf26	golang.org/x/net@v0.38.0 stdlib@go1.25.7	0.53.0 1.25.10	1
alpine/k8s :1.30.0	bd01dae02676	golang.org/x/net@v0.23.0 stdlib@go1.21.1	0.53.0 1.25.10	1
alpine/k8s :1.30.2	cd560fce90f7	golang.org/x/net@v0.9.0 stdlib@go1.22.3	0.53.0 1.25.10	1
alpine/k8s :1.35.5	d870622d0040	golang.org/x/net@v0.48.0 stdlib@go1.26.0	0.53.0 1.25.10	1
alpine/k8s :1.28.13	e5c0b053fed7	golang.org/x/net@v0.12.0 stdlib@go1.22.5	0.53.0 1.25.10	1
alpine/k8s :1.32.3	eec354133193	golang.org/x/net@v0.37.0 stdlib@go1.23.6	0.53.0 1.25.10	1
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/net@v0.9.0 stdlib@go1.20.8	0.53.0 1.25.10	1
alpine/kubectl :1.36.0	1ee9df6316d4	golang.org/x/net@v0.49.0 stdlib@go1.26.2	0.53.0 1.25.10	1
alpine/kubectl :1.33.3	2c59a3f0726c	golang.org/x/net@v0.38.0 stdlib@go1.24.4	0.53.0 1.25.10	1
alpine/kubectl :1.35.0	862d86046bbc	golang.org/x/net@v0.47.0 stdlib@go1.25.5	0.53.0 1.25.10	1
alpine/kubectl :1.35.3	c4a11ae9a1cb	golang.org/x/net@v0.47.0 stdlib@go1.25.7	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.25.4	1d6f18dbd599	golang.org/x/net@v0.38.0 stdlib@go1.25.1	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.23.3	4baec90b20cd	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.23.7	74315beb57db	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.13	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.53.0 1.25.10	1
altinity/clickhouse-operator :0.16.1	db7dde971407	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.13.15	0.53.0 1.25.10	1
altinity/metrics-exporter :0.20.0	1a46d104406d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.17.13	0.53.0 1.25.10	1
altinity/metrics-exporter :0.23.3	2912a6c15b44	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10	1
altinity/metrics-exporter :0.25.4	6ecf67edfb71	golang.org/x/net@v0.38.0 stdlib@go1.25.1	0.53.0 1.25.10	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.13.15	0.53.0 1.25.10	1
altinity/metrics-exporter :0.23.7	a4d7ff0c727e	golang.org/x/net@v0.17.0 stdlib@go1.21.13	0.53.0 1.25.10	1
amaanx86/oci-native-ingress-controller :master	d7206ac7a319	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.53.0 1.25.10	1
amazon/aws-efs-csi-driver :v0.3.0	b55277652ea8	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.13.4	0.53.0 1.25.10	1
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.8	0.53.0 1.25.10	1
amazon/aws-otel-collector :v0.27.0	d8ab0eef5074	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.53.0 1.25.10	1
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.53.0 1.25.10	1
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.15.15	0.53.0 1.25.10	1
ambassador/aes-authsvc :v4.0.0-preview.1	2a4598b03a6a	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.53.0 1.25.10	1
ambassador/aes-eg-ext :v4.0.0-preview.1	b7eb1be3345d	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.53.0 1.25.10	1
ambassador/aes-wafsvc :v4.0.0-preview.1	5fc571509b8c	golang.org/x/net@v0.11.0 stdlib@go1.20.6	0.53.0 1.25.10	1
ambassador/ambassador-agent :1.0.22	7a1ea0d934fb	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.53.0 1.25.10	1
amd64/mysql :5.7	e20a653e0f51	stdlib@go1.18.2	1.25.10	1
anamskenneth/recipe_frontend :2025-06-07	9ecf04f42cc3	stdlib@go1.20.12	1.25.10	1