CVE-2026-33814

Unscored

Advisory

Published 7 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,058; of 17,790 indexed, latest versions
Container images: 4,694; deployed by those charts
Fix available: 2 of 2; affected packages

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net

Carried by container images the latest versions of 4,058 of 17,790 indexed charts deploy, on 4,694 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+179 more	1.25.10	4,539
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+218 more	0.53.0	3,589

OSV records: GO-2026-4918
Also known as: BIT-golang-2026-33814

Charts affected

4,058 by stars

Chart

Latest

Affected images

Radar Score

akto-source-code-analyserakto

0.1.5

1 of 3 See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aktosecurity/akto-puppeteer-replay :doom_latest	853e37321e6e	stdlib@go1.22.5	1.25.10

Open the chart page →

4,886

akto-testing-db-layerakto

1.42.17

1 of 2 See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
keelhq/keel :latest	73714afb4443	golang.org/x/net@v0.33.0 stdlib@go1.23.4	0.53.0 1.25.10

Open the chart page →

4,866

api-gateway-loggingakto

0.1.2

1 of 1 See more

api-gateway-logging akto 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
aktosecurity/mirror-api-logging :api-gateway-logging-openapi	12ed2544756f	stdlib@go1.23.3	1.25.10

Open the chart page →

413

kpubberalekc

0.0.4

1 of 1 See more

kpubber alekc 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alekc/kpubber :v0.0.2	a462d5797e14	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.9	0.53.0 1.25.10

Open the chart page →

2,228

rabbitmq-cluster-operatoralekc

2.9.0

1 of 1 See more

rabbitmq-cluster-operator alekc 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
rabbitmqoperator/cluster-operator :2.19.2	840be4bad78e	golang.org/x/net@v0.51.0 stdlib@go1.25.8	0.53.0 1.25.10

Open the chart page →

257

valkey-operatoralekc

0.4.0

1 of 1 See more

valkey-operator alekc 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/hyperspike/valkey-operator :v0.0.61	7d8c669f11a4	golang.org/x/net@v0.44.0 stdlib@go1.25.2	0.53.0 1.25.10

Open the chart page →

333

mautrix-signalalexanderbadel

0.1.1

1 of 2 See more

mautrix-signal alexanderbadel 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
signald/signald :0.18.2	0ffad7ccc2eb	stdlib@go1.18.1	1.25.10

Open the chart page →

2,099

qbittorrentalexmorbo-qbittorrent

1.2.1

1 of 1 See more

qbittorrent alexmorbo-qbittorrent 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/squat/generic-device-plugin :36bfc606bba2064de6ede0ff2764cbb52edff70d	ba6f0b4cf6c8	golang.org/x/net@v0.17.0 stdlib@go1.20.2	0.53.0 1.25.10

Open the chart page →

889

quialexmorbo-qui

0.1.0

1 of 1 See more

qui alexmorbo-qui 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/qui :v1.14.1	10b7945d4f09	golang.org/x/net@v0.49.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

1,624

slskdalexmorbo-slskd

0.3.0

1 of 1 See more

slskd alexmorbo-slskd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/slskd/slskd :0.25.1	ab9ed50e028b	stdlib@go1.22.2	1.25.10

Open the chart page →

1,732

wireguardalexpresso

0.1.3

1 of 2 See more

wireguard alexpresso 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
linuxserver/wireguard :latest	bf03578ef731	golang.org/x/net@v0.47.0	0.53.0

Open the chart page →

786

gotifyalexvanderberkel

0.7.0

1 of 1 See more

gotify alexvanderberkel 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gotify/server :3.1.0	be44495e4609	stdlib@go1.26.0	1.25.10

Open the chart page →

320

book-serveral-masood-helm-charts

0.1.0

1 of 1 See more

book-server al-masood-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
almasood/book-server :latest	6ffac9b63cdf	golang.org/x/net@v0.38.0 stdlib@go1.24.6	0.53.0 1.25.10

Open the chart page →

486

gitlab-code-review-notifieralmorgv

0.1.2

1 of 2 See more

gitlab-code-review-notifier almorgv 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
almorgv/gitlab-code-review-notifier :0.1.2	5f2a7d2b44d8	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.14.15	0.53.0 1.25.10

Open the chart page →

2,115

flux-suspension-exporteralpineworks

0.1.1

1 of 1 See more

flux-suspension-exporter alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/flux-suspension-exporter :v1.0.0	341f0a6cd2b6	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.53.0 1.25.10

Open the chart page →

564

flux-suspensions-exporteralpineworks

0.1.0

1 of 1 See more

flux-suspensions-exporter alpineworks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/flux-suspension-exporter :v1.0.0	341f0a6cd2b6	golang.org/x/net@v0.34.0 stdlib@go1.24.0	0.53.0 1.25.10

Open the chart page →

564

glancealpineworks

0.1.1

1 of 1 See more

glance alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
glanceapp/glance :v0.8.4	6df86a7e8868	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.53.0 1.25.10

Open the chart page →

1,006

ipalpineworks

0.1.2

1 of 1 See more

ip alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/ip :v1.0.0	4e0d4d51f0bc	golang.org/x/net@v0.34.0 stdlib@go1.24.2	0.53.0 1.25.10

Open the chart page →

541

katalogalpineworks

0.1.2

2 of 5 See more

katalog alpineworks 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/katalog-backend :v1.0.7	7e7a26393cd1	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.53.0 1.25.10
ghcr.io/alpineworks/katalog-migrations :v1.0.5	62c44a384e13	golang.org/x/net@v0.29.0 stdlib@go1.23.1	0.53.0 1.25.10

Open the chart page →

4,533

katalog-agentalpineworks

0.1.2

1 of 1 See more

katalog-agent alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/katalog-agent :v1.0.4	8f50bd568c2b	golang.org/x/net@v0.29.0 stdlib@go1.23.3	0.53.0 1.25.10

Open the chart page →

582

versitygwalpineworks

0.1.2

1 of 1 See more

versitygw alpineworks 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
versity/versitygw :v1.0.14	5192635d0353	golang.org/x/net@v0.40.0 stdlib@go1.24.3	0.53.0 1.25.10

Open the chart page →

1,115

versitygw-webhook-pulsar-proxyalpineworks

0.1.1

1 of 1 See more

versitygw-webhook-pulsar-proxy alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy :v1.0.0	6e9ced773732	golang.org/x/net@v0.40.0 stdlib@go1.24.4	0.53.0 1.25.10

Open the chart page →

900

pagesalstom-pages-app

1.0.0

1 of 3 See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,242

amorphieamorphie

0.1.2

8 of 18 See more

amorphie amorphie 0.1.2

8 of the 18 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
burganbank/vault-initializer :v1	9259c34e4037	golang.org/x/net@v0.23.0 stdlib@go1.22.2	0.53.0 1.25.10
daprio/dashboard :0.14.0	7ba5d51e5b97	golang.org/x/net@v0.6.0 stdlib@go1.19.13	0.53.0 1.25.10
daprio/injector :1.11.2	763b9b70b0c8	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.53.0 1.25.10
daprio/operator :1.11.2	c584428aa12d	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.53.0 1.25.10
daprio/placement :1.11.2	d8e1446da996	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.53.0 1.25.10
daprio/sentry :1.11.2	1f507c1a181b	golang.org/x/net@v0.12.0 stdlib@go1.20.6	0.53.0 1.25.10
hashicorp/vault :1.15.2	6b4e5dadf082	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.53.0 1.25.10
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.53.0 1.25.10

Open the chart page →

28,289

sliding-sync-proxyananace-charts

0.2.13

1 of 2 See more

sliding-sync-proxy ananace-charts 0.2.13

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.53.0 1.25.10

Open the chart page →

1,599

anchore-admission-controlleranchore-charts

0.8.5

1 of 2 See more

anchore-admission-controller anchore-charts 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
cfssl/cfssl :v1.6.5	c9018c2ddf0b	golang.org/x/net@v0.20.0 stdlib@go1.20.14	0.53.0 1.25.10

Open the chart page →

7,605

kaianchore-charts

0.5.1

1 of 1 See more

kai anchore-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
anchore/kai :v0.5.0	8aad6d0912dd	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.53.0 1.25.10

Open the chart page →

1,326

cert-manager-webhook-inwxandibraeu

0.9.0

1 of 1 See more

cert-manager-webhook-inwx andibraeu 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/andibraeu/cert-manager-webhook-inwx :v0.9.0	f015e745983e	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

599

music-assistant-serverandibraeu

2.1.2

1 of 1 See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.9.9	50666a6f8d7f	golang.org/x/net@v0.48.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

5,865

buildkit-serviceandrcuns

1.8.0

1 of 1 See more

buildkit-service andrcuns 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.31.0	a095b3d11ce1	golang.org/x/net@v0.35.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

1,294

pagesandrei-pages

1.0.0

1 of 3 See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.10

Open the chart page →

20,242

terjangandylibrian

0.0.3

1 of 1 See more

terjang andylibrian 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/andylibrian/terjang :latest	20a46b199247	golang.org/x/net@v0.0.0-20211020060615-d418f374d309 stdlib@go1.16.4	0.53.0 1.25.10

Open the chart page →

1,985

chirpstack-packet-multiplexerangelnu

3.0.0

1 of 1 See more

chirpstack-packet-multiplexer angelnu 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/chirpstack-packet-multiplexer :latest	0c84c2d71006	stdlib@go1.13.15	1.25.10

Open the chart page →

2,239

dnsmadeeasy-webhookangelnu

6.0.7

1 of 1 See more

dnsmadeeasy-webhook angelnu 6.0.7

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/dnsmadeeasy-webhook :v1.9.0	a5ca158b1f02	golang.org/x/net@v0.36.0 stdlib@go1.24.1	0.53.0 1.25.10

Open the chart page →

810

games-on-whalesangelnu

2.0.0

1 of 7 See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	stdlib@go1.18.2	1.25.10

Open the chart page →

42,325

maddyangelnu

5.0.0

1 of 1 See more

maddy angelnu 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/foxcpp/maddy :0.9.5	de42151adff6	golang.org/x/net@v0.34.0 stdlib@go1.23.12	0.53.0 1.25.10

Open the chart page →

773

cert-manager-webhook-safednsansgroup

1.3.0

1 of 1 See more

cert-manager-webhook-safedns ansgroup 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ansgroup/cert-manager-webhook-safedns :v1.0.1	cd6b0ef2b309	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.15	0.53.0 1.25.10

Open the chart page →

2,495

ddosifyanteon

1.7.5

5 of 13 See more

ddosify anteon 1.7.5

5 of the 13 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
chrislusf/seaweedfs :3.56	ed80f00fde46	golang.org/x/net@v0.14.0 stdlib@go1.20.8	0.53.0 1.25.10
ddosify/selfhosted_hammer :1.4.2	a97a1b8a66af	golang.org/x/net@v0.8.0 stdlib@go1.18.1	0.53.0 1.25.10
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.4	0.53.0 1.25.10
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.25.10
prom/prometheus :v2.37.9	8176adea328e	golang.org/x/net@v0.7.0 stdlib@go1.19.11	0.53.0 1.25.10

Open the chart page →

25,816

antmediaantmedia

3.1.0

3 of 4 See more

antmedia antmedia 3.1.0

3 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mongo :8.0	02a0cc7939f5	stdlib@go1.24.6	1.25.10
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.53.0 1.25.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.53.0 1.25.10

Open the chart page →

4,621

ingress-nginxantmedia

4.4.0

2 of 2 See more

ingress-nginx antmedia 4.4.0

2 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.53.0 1.25.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.19.1	0.53.0 1.25.10

Open the chart page →

3,323

monitoringantmedia

1.0.0

1 of 6 See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	f772d434e8fa	golang.org/x/net@v0.51.0 stdlib@go1.25.7	0.53.0 1.25.10

Open the chart page →

2,461

nfs-server-provisioneranvibo

1.3.0

1 of 1 See more

nfs-server-provisioner anvibo 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc stdlib@go1.15	0.53.0 1.25.10

Open the chart page →

2,731

glauthanza-labs

1.0.1

1 of 1 See more

glauth anza-labs 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/glauth/glauth :v2.5.2	09c782ca5984	golang.org/x/net@v0.17.0 stdlib@go1.25.0	0.53.0 1.25.10

Open the chart page →

1,302

apipingapiping

1.5.0

1 of 1 See more

apiping apiping 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
udhos/apiping :1.5.0	41ab9bae6f3b	golang.org/x/net@v0.47.0 stdlib@go1.25.4	0.53.0 1.25.10

Open the chart page →

1,139

apishiftapishift

0.3.0

1 of 4 See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
quay.io/everythingascode/apishift-backend :v0.3.0	14ff275b2e61	golang.org/x/net@v0.25.0 stdlib@go1.23.6	0.53.0 1.25.10

Open the chart page →

2,961

api-usage-cleanerapi-usage-cleaner

1.16.0

1 of 1 See more

api-usage-cleaner api-usage-cleaner 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner :1.16.0	d47f43484055	stdlib@go1.23.12	1.25.10

Open the chart page →

595

d.vazquezm.2021_helmapphelm

1.0.0

2 of 6 See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.25.10
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.25.10

Open the chart page →

19,788

app-mobilityappmo

0.1.0

3 of 5 See more

app-mobility appmo 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	golang.org/x/net@v0.0.0-20220822230855-b0a4917ee28c stdlib@go1.18.5	0.53.0 1.25.10
dellemc/csm-application-mobility-velero-plugin :v0.1.0	660cabd6d929	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.5	0.53.0 1.25.10
velero/velero :v1.8.1	8d784580931c	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023 stdlib@go1.16.6	0.53.0 1.25.10

Open the chart page →

12,541

app-movies-seriesapp-movies-series

0.1.0

1 of 2 See more

app-movies-series app-movies-series 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
library/postgres :14.3	2d1e636f0778	stdlib@go1.16.7	1.25.10

Open the chart page →

3,167

accounts-uiappscode

2026.9.11

1 of 1 See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-33814.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/net@v0.38.0 stdlib@go1.25.3	0.53.0 1.25.10

Open the chart page →

2,655

Container images carrying it

4,694 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/mysql :8.0.35-debian-11-r2	be03e8ea6129	stdlib@go1.21.5	1.25.10	1
bitnamilegacy/mysqld-exporter :0.14.0-debian-11-r103	04768b637c94	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.8	0.53.0 1.25.10	1
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	golang.org/x/net@v0.17.0 stdlib@go1.21.12	0.53.0 1.25.10	1
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.4	0.53.0 1.25.10	1
bitnamilegacy/nats :2.11.8-debian-12-r0	fa0cfba6034a	stdlib@go1.24.6	1.25.10	1
bitnamilegacy/nginx :1.27.1	934d1acd5ca8	stdlib@go1.22.7	1.25.10	1
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	stdlib@go1.23.8	1.25.10	1
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	golang.org/x/net@v0.27.0 stdlib@go1.22.8	0.53.0 1.25.10	1
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	golang.org/x/net@v0.27.0 stdlib@go1.22.8	0.53.0 1.25.10	1
bitnamilegacy/os-shell :11-debian-11-r96	8643af4facff	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.53.0 1.25.10	1
bitnamilegacy/os-shell :12-debian-12-r43	9ba5d16f9c64	golang.org/x/net@v0.33.0 stdlib@go1.23.8	0.53.0 1.25.10	1
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.53.0 1.25.10	1
bitnamilegacy/os-shell :12-debian-12-r50	e328cff6e450	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.53.0 1.25.10	1
bitnamilegacy/pgbouncer :1.23.1	92356da09704	stdlib@go1.22.10	1.25.10	1
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	golang.org/x/net@v0.33.0 stdlib@go1.23.7	0.53.0 1.25.10	1
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	golang.org/x/net@v0.17.0 stdlib@go1.22.8	0.53.0 1.25.10	1
bitnamilegacy/postgresql :15.2.0-debian-11-r11	3e65a6b89e38	stdlib@go1.18.2	1.25.10	1
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	golang.org/x/net@v0.27.0 stdlib@go1.22.7	0.53.0 1.25.10	1
bitnamilegacy/rabbitmq :3.10.8	8f7161d8ce19	stdlib@go1.16.7	1.25.10	1
bitnamilegacy/rabbitmq :3.10.7-debian-11-r4	cf93e2772250	stdlib@go1.16.7	1.25.10	1
bitnamilegacy/rabbitmq-cluster-operator :1.14.0-scratch-r5	67ac64a9623a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17	0.53.0 1.25.10	1
bitnamilegacy/redis :7.0.11-debian-11-r12	1161dcd293a0	stdlib@go1.19.9	1.25.10	1
bitnamilegacy/redis :8.0.3-debian-12-r1	189aae381e7f	stdlib@go1.24.4	1.25.10	1
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	stdlib@go1.21.10	1.25.10	1
bitnamilegacy/redis :7.0.10-debian-11-r0	59293f5206b7	stdlib@go1.19.7	1.25.10	1
bitnamilegacy/redis :7.4.2-debian-12-r6	6a5b1d0b5942	stdlib@go1.23.7	1.25.10	1
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	stdlib@go1.21.10	1.25.10	1
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	stdlib@go1.18.2	1.25.10	1
bitnamilegacy/redis :7.2.4-debian-12-r13	9c6fecd24bf3	stdlib@go1.21.9	1.25.10	1
bitnamilegacy/redis :7.0.8-debian-11-r0	bf01d031ba8c	stdlib@go1.18.2	1.25.10	1
bitnamilegacy/redis :8.0.2-debian-12-r4	cdc2efa9c306	stdlib@go1.24.4	1.25.10	1
bitnamilegacy/redis :7.2.1-debian-11-r0	fa288394f402	stdlib@go1.19.12	1.25.10	1
bitnamilegacy/redis-cluster :7.4.3-debian-12-r0	a53d023fdfaf	stdlib@go1.23.8	1.25.10	1
bitnamilegacy/redis-exporter :1.69.0-debian-12-r1	a006df1fd47e	stdlib@go1.23.7	1.25.10	1
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	golang.org/x/net@v0.0.0-20220614195744-fb05da6f9022 stdlib@go1.17	0.53.0 1.25.10	1
bitnamilegacy/seaweedfs :3.87.0-debian-12-r1	0cb31d0fc356	golang.org/x/net@v0.39.0 stdlib@go1.24.1	0.53.0 1.25.10	1
bitnamilegacy/thanos :0.37.1-debian-12-r0	5bf82b98c82c	golang.org/x/net@v0.30.0 stdlib@go1.23.4	0.53.0 1.25.10	1
bitnamilegacy/valkey :latest	0384ca2eec63	stdlib@go1.23.10	1.25.10	1
bitnamilegacy/valkey :8.1.3-debian-12-r3	4f0191fba7d3	stdlib@go1.24.6	1.25.10	1
bitnamilegacy/valkey :8.1.3-debian-12-r1	a185655855b3	stdlib@go1.24.4	1.25.10	1
bitnamilegacy/zookeeper :3.7.2-debian-11-r5	cbf54314c401	stdlib@go1.21.5	1.25.10	1
bitnamilegacy/zookeeper :3.8.1-debian-11-r6	dba59d740e13	stdlib@go1.18.2	1.25.10	1
bitnami/mariadb :11.7.2	16a7dae804fb	stdlib@go1.22.12	1.25.10	1
bitnami/mongodb :8.0.8	b3bd5b6be9a0	golang.org/x/net@v0.36.0 stdlib@go1.23.7	0.53.0 1.25.10	1
bitnami/redis :7.4.2	4e65bf641805	stdlib@go1.23.8	1.25.10	1
bitnami/sealed-secrets-controller :v0.18.5	0516f987fae2	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18.6	0.53.0 1.25.10	1
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	golang.org/x/net@v0.42.0 stdlib@go1.24.6	0.53.0 1.25.10	1
bitpoke/stack-default-backend :latest	c5eed1ddf692	stdlib@go1.16.6	1.25.10	1
bitpoke/wordpress-operator :v0.12.4	21284d1df473	golang.org/x/net@v0.8.0 stdlib@go1.17.13	0.53.0 1.25.10	1
bitpoke/wordpress-operator :v0.12.2	7fb3aad37b5f	golang.org/x/net@v0.8.0 stdlib@go1.17.13	0.53.0 1.25.10	1