StackRadar

CVE-2026-42502

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,007
of 17,803 indexed, latest versions
Container images
3,683
deployed by those charts
Fix available
1 of 1
affected package

Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html

Carried by container images the latest versions of 3,007 of 17,803 indexed charts deploy, on 3,683 images.

Affected packageAffected versionsFixed inImages
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more0.55.03,683
OSV records
GO-2026-5027

Charts affected

3,007 by stars
ChartLatestAffected imagesRadar Score
tailscalesinextraVerified publisher0.18.11 of 2See more

tailscale sinextra 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
golang.org/x/net@v0.47.0
0.55.0

Open the chart page →

1,082
talos-backupsinextraVerified publisher0.1.21 of 1See more

talos-backup sinextra 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ghcr.io/siderolabs/talos-backup:v0.1.0-beta.203a71e140f1d
golang.org/x/net@v0.26.0
0.55.0

Open the chart page →

905
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
golang.org/x/net@v0.25.0
0.55.0

Open the chart page →

2,448
network-observerskupper-network-observerVerified publisher2.2.21 of 3See more

network-observer skupper-network-observer 2.2.2

1 of the 3 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

618
skyhook-agentskyhookVerified publisher1.3.151 of 1See more

skyhook-agent skyhook 1.3.15

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ghcr.io/skyhook-io/skyhook-connector:v2.3.23deb8e4b1aaa
golang.org/x/net@v0.44.0
0.55.0

Open the chart page →

299
skyhook-connectorskyhookVerified publisher1.3.251 of 1See more

skyhook-connector skyhook 1.3.25

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ghcr.io/skyhook-io/skyhook-connector:v2.5.56c4e3336600d
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

132
mimirskyloud-helm-chartsVerified publisher5.5.14 of 5See more

mimir skyloud-helm-charts 5.5.1

4 of the 5 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
grafana/mimir:r292-5f018727476e456c738
golang.org/x/net@v0.24.0
0.55.0
grafana/rollout-operator:v0.14.03409edfb45c7
golang.org/x/net@v0.21.0
0.55.0
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
golang.org/x/net@v0.15.0
0.55.0
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
golang.org/x/net@v0.15.0
0.55.0

Open the chart page →

10,819
tailscale-operatorskyloud-helm-chartsVerified publisher1.70.31 of 1See more

tailscale-operator skyloud-helm-charts 1.70.3

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
tailscale/k8s-operator:v1.70.08edd06cf5bac
golang.org/x/net@v0.26.0
0.55.0

Open the chart page →

1,045
skypilot-prometheus-serverskypilotVerified publisher0.11.13 of 3See more

skypilot-prometheus-server skypilot 0.11.1

3 of the 3 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.83.078aec597d87a
golang.org/x/net@v0.40.0
0.55.0
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
golang.org/x/net@v0.39.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.15.0db384bf43222
golang.org/x/net@v0.33.0
0.55.0

Open the chart page →

2,360
pritunl-zerosky-sailVerified publisher0.3.31 of 1See more

pritunl-zero sky-sail 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
pritunl/pritunl-zero:1.0.3648.460f2943e0d41b
golang.org/x/net@v0.42.0
0.55.0

Open the chart page →

660
config-connector-templaterslamdev0.0.51 of 1See more

config-connector-templater slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
slamdev/config-connector-templater:0.0.3a234541c9fa8
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0

Open the chart page →

2,110
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
golang.org/x/net@v0.0.0-20220607020251-c690dde0001d
0.55.0

Open the chart page →

9,261
gke-preemptible-notifierslamdev0.0.61 of 1See more

gke-preemptible-notifier slamdev 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
golang.org/x/net@v0.0.0-20200501053045-e0ff5e5a1de5
0.55.0

Open the chart page →

2,861
octavia-ingress-controllerslamdev0.0.71 of 1See more

octavia-ingress-controller slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
k8scloudprovider/octavia-ingress-controller:v1.20.26ddf80b34265
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0

Open the chart page →

2,761
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
0.55.0

Open the chart page →

8,732
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ghcr.io/slok/sloth:v0.16.0f0f0075b0d45
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

4,007
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
0.55.0

Open the chart page →

3,471
smarter-device-managersmarter-device-manager0.0.101 of 1See more

smarter-device-manager smarter-device-manager 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/smarter-device-manager:v1.20.12228f7f44594a
golang.org/x/net@v0.2.0
0.55.0

Open the chart page →

1,151
smart-proxysmart-proxyVerified publisher0.1.11 of 1See more

smart-proxy smart-proxy 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
isebben/smart-proxy:latestab59a71ee9f4
golang.org/x/net@v0.47.0
0.55.0

Open the chart page →

282
smtp-gotifysmtp-gotifyVerified publisher0.1.41 of 1See more

smtp-gotify smtp-gotify 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
quay.io/reiml/smtp-gotify:latest80ffa9d2044a
golang.org/x/net@v0.28.0
0.55.0

Open the chart page →

562
vertical-pod-autoscalersnowplow-devopsVerified publisher0.1.13 of 3See more

vertical-pod-autoscaler snowplow-devops 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.4.171d817780aa9
golang.org/x/net@v0.39.0
0.55.0
registry.k8s.io/autoscaling/vpa-recommender:1.4.140b6d76e8526
golang.org/x/net@v0.39.0
0.55.0
registry.k8s.io/autoscaling/vpa-updater:1.4.18ebf269779c1
golang.org/x/net@v0.39.0
0.55.0

Open the chart page →

1,254
snspingsnsping1.2.91 of 1See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
udhos/snsping:1.2.96ae70677b6a3
golang.org/x/net@v0.33.0
0.55.0

Open the chart page →

1,343
cost-analyzersoftonic2.5.53 of 6See more

cost-analyzer softonic 2.5.5

3 of the 6 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
golang.org/x/net@v0.34.0
0.55.0
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
golang.org/x/net@v0.33.0
0.55.0
quay.io/prometheus/prometheus:v3.2.16927e0919a14
golang.org/x/net@v0.34.0
0.55.0

Open the chart page →

8,166
csi-gcs-softonic-factorysoftonic0.9.31 of 4See more

csi-gcs-softonic-factory softonic 0.9.3

1 of the 4 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ofekmeister/csi-gcs:v0.9.030d70fa9211b
golang.org/x/net@v0.0.0-20220513224357-95641704303c
0.55.0

Open the chart page →

1,849
harborsoftonic1.13.04 of 8See more

harbor softonic 1.13.0

4 of the 8 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.9.06412d679fdc3
golang.org/x/net@v0.10.0
0.55.0
goharbor/harbor-jobservice:v2.9.039435daedd0c
golang.org/x/net@v0.10.0
0.55.0
goharbor/harbor-registryctl:v2.9.0cce272836449
golang.org/x/net@v0.10.0
0.55.0
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
golang.org/x/net@v0.12.0
0.55.0

Open the chart page →

7,708
homing-pigeonsoftonic0.12.01 of 1See more

homing-pigeon softonic 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
softonic/homing-pigeon:0.9.6f26d467b7b82
golang.org/x/net@v0.41.0
0.55.0

Open the chart page →

471
ingress-nginxsoftonic4.15.12 of 2See more

ingress-nginx softonic 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
golang.org/x/net@v0.52.0
0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

1,541
kedasoftonic2.17.03 of 3See more

keda softonic 2.17.0

3 of the 3 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.0112fc427d933
golang.org/x/net@v0.38.0
0.55.0
ghcr.io/kedacore/keda-admission-webhooks:2.17.0a87c42275757
golang.org/x/net@v0.38.0
0.55.0
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
golang.org/x/net@v0.38.0
0.55.0

Open the chart page →

2,836
kube-prometheus-stacksoftonic81.5.15 of 6See more

kube-prometheus-stack softonic 81.5.1

5 of the 6 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
golang.org/x/net@v0.47.0
0.55.0
ghcr.io/jkroepke/kube-webhook-certgen:1.7.47a62bba56a7c
golang.org/x/net@v0.48.0
0.55.0
quay.io/prometheus-operator/prometheus-operator:v0.88.1d3d65efa3bee
golang.org/x/net@v0.48.0
0.55.0
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
golang.org/x/net@v0.44.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/net@v0.48.0
0.55.0

Open the chart page →

5,017
kyvernosoftonic3.5.21 of 7See more

kyverno softonic 3.5.2

1 of the 7 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.32.73c5268158974
golang.org/x/net@v0.30.0
0.55.0

Open the chart page →

1,021
pod-defaultersoftonic0.1.31 of 1See more

pod-defaulter softonic 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
softonic/pod-defaulter:0.1.072017aed5902
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.55.0

Open the chart page →

2,562
policy-reportersoftonic2.18.21 of 1See more

policy-reporter softonic 2.18.2

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ghcr.io/kyverno/policy-reporter:2.14.1e74c6bf33d1b
golang.org/x/net@v0.8.0
0.55.0

Open the chart page →

1,045
preemptible-killersoftonic1.2.61 of 1See more

preemptible-killer softonic 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
softonic/preemptible-killer:1.2.6-294b87f1fb362
golang.org/x/net@v0.0.0-20190620200207-3b0461eec859
0.55.0

Open the chart page →

2,339
rate-limit-operatorsoftonic1.1.01 of 2See more

rate-limit-operator softonic 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
softonic/rate-limit-operator:0.1.1910f6de37763
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
0.55.0

Open the chart page →

2,220
rclonesoftonic2.1.01 of 1See more

rclone softonic 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
golang.org/x/net@v0.27.0
0.55.0

Open the chart page →

1,680
redis-operatorsoftonic0.18.01 of 1See more

redis-operator softonic 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ghcr.io/ot-container-kit/redis-operator/redis-operator:v0.18.090bfeb2e0d71
golang.org/x/net@v0.24.0
0.55.0

Open the chart page →

551
sealed-secretssoftonic2.6.91 of 1See more

sealed-secrets softonic 2.6.9

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
bitnami/sealed-secrets-controller:v0.18.50516f987fae2
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
0.55.0

Open the chart page →

1,516
trivy-operatorsoftonic0.18.01 of 1See more

trivy-operator softonic 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
golang.org/x/net@v0.14.0
0.55.0

Open the chart page →

2,514
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
golang.org/x/net@v0.40.0
0.55.0

Open the chart page →

3,117
gloo-meshsolo-gloo-mesh1.1.21 of 1See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
0.55.0

Open the chart page →

3,267
buildkitsomaz94Verified publisher0.1.41 of 1See more

buildkit somaz94 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
moby/buildkit:v0.33.06c2fa84a6b61
golang.org/x/net@v0.43.0
0.55.0

Open the chart page →

717
redis-high-availabilitysomeblackmagic1.3.101 of 3See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:2.9.57f3dc8c7e031
golang.org/x/net@v0.21.0
0.55.0

Open the chart page →

3,148
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d
0.55.0

Open the chart page →

97,304
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
golang.org/x/net@v0.33.0
0.55.0

Open the chart page →

3,304
spire-identity-exchangespiffeVerified publisher0.2.21 of 3See more

spire-identity-exchange spiffe 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.31.099b37df34bc4
golang.org/x/net@v0.26.0
0.55.0

Open the chart page →

1,442
spillwayspillwayVerified publisher0.4.41 of 1See more

spillway spillway 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
ghcr.io/kroy-the-rabbit/spillway:0.4.48de556d3bda7
golang.org/x/net@v0.38.0
0.55.0

Open the chart page →

267
spinnakerspinnakerVerified publisher2.2.132 of 4See more

spinnaker spinnaker 2.2.13

2 of the 4 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
golang.org/x/net@v0.0.0-20201021035429-f5854403a974
0.55.0
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
0.55.0

Open the chart page →

6,877
ocean-admission-controllerspot1.0.32 of 3See more

ocean-admission-controller spot 1.0.3

2 of the 3 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
gcr.io/spotit-today/spot-ocean-admission-controller:0.1.64f634aeb31b8
golang.org/x/net@v0.44.0
0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
golang.org/x/net@v0.28.0
0.55.0

Open the chart page →

773
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
golang.org/x/net@v0.48.0
0.55.0

Open the chart page →

46,567
ocean-vpaspot1.0.73 of 4See more

ocean-vpa spot 1.0.7

3 of the 4 container images this version deploys carry CVE-2026-42502.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.6.080e487edff02
golang.org/x/net@v0.50.0
0.55.0
registry.k8s.io/autoscaling/vpa-updater:1.6.0b39d1dfa19cb
golang.org/x/net@v0.50.0
0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.136d05b4077fb
golang.org/x/net@v0.22.0
0.55.0

Open the chart page →

1,195

Container images carrying it

3,683 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/kubectl:1.301249fc292e84
golang.org/x/net@v0.23.0
0.55.0
1
bitnamilegacy/kubectl:1.3164614ef8290f
golang.org/x/net@v0.26.0
0.55.0
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
golang.org/x/net@v0.23.0
0.55.0
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
golang.org/x/net@v0.19.0
0.55.0
1
bitnamilegacy/kube-state-metrics:204a3044b384b
golang.org/x/net@v0.40.0
0.55.0
1
bitnamilegacy/minio:2023.12.230b60b6565ab2
golang.org/x/net@v0.19.0
0.55.0
1
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
golang.org/x/net@v0.4.0
0.55.0
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
golang.org/x/net@v0.26.0
0.55.0
1
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
golang.org/x/net@v0.19.0
0.55.0
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
golang.org/x/net@v0.39.0
0.55.0
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
golang.org/x/net@v0.39.0
0.55.0
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
golang.org/x/net@v0.26.0
0.55.0
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
golang.org/x/net@v0.37.0
0.55.0
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
golang.org/x/net@v0.29.0
0.55.0
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
golang.org/x/net@v0.32.0
0.55.0
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
golang.org/x/net@v0.39.0
0.55.0
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
golang.org/x/net@v0.27.0
0.55.0
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
golang.org/x/net@v0.40.0
0.55.0
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
golang.org/x/net@v0.22.0
0.55.0
1
bitnamilegacy/mongodb:5.0.103bb1deeaf9d0
golang.org/x/net@v0.0.0-20220708220712-1185a9018129
0.55.0
1
bitnamilegacy/mongodb:7.0.5-debian-11-r66fe59ed5d79f
golang.org/x/net@v0.19.0
0.55.0
1
bitnamilegacy/mongodb:latestb0652af9c8d0
golang.org/x/net@v0.40.0
0.55.0
1
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
golang.org/x/net@v0.7.0
0.55.0
1
bitnamilegacy/mysqld-exporter:0.14.0-debian-11-r10304768b637c94
golang.org/x/net@v0.0.0-20210525063256-abc453219eb5
0.55.0
1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
golang.org/x/net@v0.17.0
0.55.0
1
bitnamilegacy/mysqld-exporter:0.13.0a7e14cc919cb
golang.org/x/net@v0.0.0-20200625001655-4c5254603344
0.55.0
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
golang.org/x/net@v0.27.0
0.55.0
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
golang.org/x/net@v0.27.0
0.55.0
1
bitnamilegacy/os-shell:11-debian-11-r968643af4facff
golang.org/x/net@v0.19.0
0.55.0
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
golang.org/x/net@v0.33.0
0.55.0
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
golang.org/x/net@v0.21.0
0.55.0
1
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
golang.org/x/net@v0.42.0
0.55.0
1
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
golang.org/x/net@v0.33.0
0.55.0
1
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
golang.org/x/net@v0.17.0
0.55.0
1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
golang.org/x/net@v0.27.0
0.55.0
1
bitnamilegacy/rabbitmq-cluster-operator:1.14.0-scratch-r567ac64a9623a
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
0.55.0
1
bitnamilegacy/rmq-messaging-topology-operator:1.7.1-scratch-r33c26208691a1
golang.org/x/net@v0.0.0-20220614195744-fb05da6f9022
0.55.0
1
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
golang.org/x/net@v0.39.0
0.55.0
1
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
golang.org/x/net@v0.30.0
0.55.0
1
bitnami/mongodb:8.0.8b3bd5b6be9a0
golang.org/x/net@v0.36.0
0.55.0
1
bitnami/sealed-secrets-controller:v0.18.50516f987fae2
golang.org/x/net@v0.0.0-20220909164309-bea034e7d591
0.55.0
1
bitnami/sealed-secrets-controller:0.31.0-debian-12-r074eaff41382b
golang.org/x/net@v0.42.0
0.55.0
1
bitpoke/wordpress-operator:v0.12.421284d1df473
golang.org/x/net@v0.8.0
0.55.0
1
bitpoke/wordpress-operator:v0.12.27fb3aad37b5f
golang.org/x/net@v0.8.0
0.55.0
1
blipai/deckard:0.0.28737d5d19a312
golang.org/x/net@v0.10.0
0.55.0
1
bloomberg/goldpinger:3.10.08520120f5598
golang.org/x/net@v0.17.0
0.55.0
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
golang.org/x/net@v0.29.0
0.55.0
1
bluenviron/mediamtx:1.17.19e39256d1ba3
golang.org/x/net@v0.52.0
0.55.0
1
bolkedebruin/rdpgw:masterc0dc0589373a
golang.org/x/net@v0.48.0
0.55.0
1
bonovoo/secrethor:1.1.2bb93b68fcd17
golang.org/x/net@v0.38.0
0.55.0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.