CVE-2026-42502

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.002; 13th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,997; of 17,781 indexed, latest versions
Container images: 3,655; deployed by those charts
Fix available: 1 of 1; affected package

Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html

Carried by container images the latest versions of 2,997 of 17,781 indexed charts deploy, on 3,655 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+219 more	0.55.0	3,655

OSV records: GO-2026-5027

Charts affected

2,997 by stars

Chart

Latest

Affected images

Radar Score

headplanenbcloud

0.1.2

2 of 4 See more

headplane nbcloud 0.1.2

2 of the 4 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :latest	cd354d5b2556	golang.org/x/net@v0.41.0	0.55.0
headscale/headscale :0.25.1	a7a8ae9616bb	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

7,949

netris-operatornetrisai

3.0.2

1 of 2 See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.55.0

Open the chart page →

1,588

node-local-dnsnode-local-dns

2.4.0

1 of 1 See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

2,593

goldpingerokgolove

6.2.0

1 of 1 See more

goldpinger okgolove 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
bloomberg/goldpinger :3.10.0	8520120f5598	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

715

geonodeone-acre-fund

0.1.16

1 of 7 See more

geonode one-acre-fund 0.1.16

1 of the 7 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

1,746

open5gsopen5gs

2.3.4

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
gradiant/open5gs-dbctl :0.10.3	332031245fce	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

9,261

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

8,722

capsuleprojectcapsule

0.14.5

1 of 2 See more

capsule projectcapsule 0.14.5

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

1,229

prometheus-consul-exporterprometheus-community

1.1.1

1 of 1 See more

prometheus-consul-exporter prometheus-community 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/net@v0.29.0	0.55.0

Open the chart page →

782

prometheus-json-exporterprometheus-community

0.20.1

1 of 1 See more

prometheus-json-exporter prometheus-community 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/json-exporter :v0.7.0	3a777171d39a	golang.org/x/net@v0.33.0	0.55.0

Open the chart page →

725

prometheus-smartctl-exporterprometheus-community

0.17.1

1 of 1 See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	golang.org/x/net@v0.35.0	0.55.0

Open the chart page →

1,064

prometheus-statsd-exporterprometheus-community

1.0.0

1 of 1 See more

prometheus-statsd-exporter prometheus-community 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/net@v0.29.0	0.55.0

Open the chart page →

782

pvc-autoresizerpvc-autoresizer

0.20.0

1 of 1 See more

pvc-autoresizer pvc-autoresizer 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/pvc-autoresizer :0.21.1	078d3527f38b	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

rke2-multusrke2-charts

3.7.1-build2021041601

1 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.55.0

Open the chart page →

4,519

popeyeself-hosters-by-night

0.6.1

1 of 1 See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

1,196

fulciosigstore

2.11.1

4 of 6 See more

fulcio sigstore 2.11.1

4 of the 6 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	7f59f7c08d1a	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.31	3a061734c5be	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/createtree :v0.7.31	e5232e8c9122	golang.org/x/net@v0.46.0	0.55.0
ghcr.io/sigstore/scaffolding/ct_server :v0.7.31	66664ba563e7	golang.org/x/net@v0.46.0	0.55.0

Open the chart page →

3,490

policy-controllersigstore

0.10.7

1 of 2 See more

policy-controller sigstore 0.10.7

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned	0bcd60beb93f	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

911

steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetes

0.13.1

2 of 2 See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	golang.org/x/net@v0.48.0	0.55.0
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	golang.org/x/net@v0.48.0	0.55.0

Open the chart page →

5,468

topolvmtopolvm

17.2.0

1 of 1 See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	golang.org/x/net@v0.49.0	0.55.0

Open the chart page →

2,316

uffizzi-appuffizzi-app

1.3.0

8 of 14 See more

uffizzi-app uffizzi-app 1.3.0

8 of the 14 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/net@v0.12.0	0.55.0
uffizzi/uffizzi-cluster-operator :v1.4.5	14e528bbd926	golang.org/x/net@v0.8.0	0.55.0
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	golang.org/x/net@v0.17.0	0.55.0
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/net@v0.17.0	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	golang.org/x/net@v0.17.0	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/net@v0.17.0	0.55.0
registry.k8s.io/ingress-nginx/controller :v1.9.4	5b161f051d01	golang.org/x/net@v0.17.0	0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0	0.55.0

Open the chart page →

19,337

athens-proxyvolker-raschek

2.0.3

1 of 1 See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
gomods/athens :v0.17.1	0f61d1e62359	golang.org/x/net@v0.52.0	0.55.0

Open the chart page →

2,039

wg-easywg-easy

0.1.6

1 of 1 See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15	0e7bc9d34e86	golang.org/x/net@v0.44.0	0.55.0

Open the chart page →

725

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.55.0

Open the chart page →

13,562

moon2aerokube

2.8.1

3 of 3 See more

moon2 aerokube 2.8.1

3 of the 3 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/aerokube/moon :2.8.1	e618a3ed6436	golang.org/x/net@v0.51.0	0.55.0
quay.io/aerokube/moon-conf :2.8.1	1ef2b53c98fd	golang.org/x/net@v0.51.0	0.55.0
quay.io/aerokube/moon-ui :2.8.1	56425d4f8b9c	golang.org/x/net@v0.51.0	0.55.0

Open the chart page →

762

pod-gatewayangelnu

7.1.1

1 of 2 See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/gateway-admision-controller :v3.12.0	6f6ab596afd5	golang.org/x/net@v0.30.0	0.55.0

Open the chart page →

1,133

aperture-controlleraperture

2.34.0

2 of 5 See more

aperture-controller aperture 2.34.0

2 of the 5 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
fluxninja/aperture-operator :2.34.0	356d7aa86632	golang.org/x/net@v0.19.0	0.55.0
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.55.0

Open the chart page →

4,663

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0

Open the chart page →

3,300

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

9,052

prometheusavesha

19.3.0

3 of 4 See more

prometheus avesha 19.3.0

3 of the 4 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0	0.55.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b	0.55.0

Open the chart page →

5,484

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.55.0

Open the chart page →

2,250

aws-node-termination-handleraws-node-termination-handler

0.27.6

1 of 1 See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.25.6	9ad31fb4e5be	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

525

snapschedulerbackube-helm-charts

3.5.0

2 of 2 See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/backube/snapscheduler :3.5.0	35ac95c51780	golang.org/x/net@v0.38.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/net@v0.39.0	0.55.0

Open the chart page →

1,224

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

1,915

yatai-deploymentbentoml

1.1.21

1 of 2 See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

1,160

boundaryboundary

0.1.0

1 of 1 See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
hashicorp/boundary :0.21.0	37bf86488b74	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

1,438

caddy-ingress-controllercaddy-ingress

1.3.0

1 of 1 See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

1,884

cert-managerchoerodon

1.8.2

4 of 4 See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.55.0

Open the chart page →

7,775

popeyechristianhuth

2.4.3

1 of 1 See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/net@v0.34.0	0.55.0

Open the chart page →

1,196

cloudflare-exportercloudflare-exporter

0.2.3

1 of 1 See more

cloudflare-exporter cloudflare-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/lablabs/cloudflare_exporter :0.0.16	70d74ec46602	golang.org/x/net@v0.25.0	0.55.0

Open the chart page →

791

dumpscriptcloudscript

1.8.3

1 of 1 See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/cloudscript-technology/dumpscript :v0.0.42-alpine-edge	fce5b6fd161c	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

2,125

cluster-manager-servercluster-manager-server

1.8.0

1 of 1 See more

cluster-manager-server cluster-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	golang.org/x/net@v0.38.0	0.55.0

Open the chart page →

746

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/net@v0.7.0	0.55.0

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

12 of 21 See more

coder-observability coder-observability 0.7.3

12 of the 21 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
grafana/agent :v0.40.3	f6cbec9409be	golang.org/x/net@v0.20.0	0.55.0
grafana/grafana :10.4.19	a9043254ba16	golang.org/x/net@v0.40.0	0.55.0
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/net@v0.23.0	0.55.0
grafana/loki-canary :3.1.0	39baf6d67f85	golang.org/x/net@v0.23.0	0.55.0
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/net@v0.17.0	0.55.0
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.55.0
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/net@v0.25.0	0.55.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0	0.55.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/net@v0.23.0	0.55.0
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	golang.org/x/net@v0.26.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0	0.55.0

Open the chart page →

24,700

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

17,404

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.55.0

Open the chart page →

3,080

cosmocosmo-platform

0.20.0

4 of 10 See more

cosmo cosmo-platform 0.20.0

4 of the 10 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	golang.org/x/net@v0.39.0	0.55.0
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	golang.org/x/net@v0.25.0	0.55.0
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	golang.org/x/net@v0.33.0	0.55.0
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	golang.org/x/net@v0.26.0	0.55.0

Open the chart page →

28,839

dapr-dashboarddapr

0.15.0

1 of 1 See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
daprio/dashboard :0.15.0	4be696707bd1	golang.org/x/net@v0.25.0	0.55.0

Open the chart page →

1,301

defensia-agentdefensia-agent

0.6.0

1 of 1 See more

defensia-agent defensia-agent 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
ghcr.io/defensia/agent :1.4.57	e9d40ae44711	golang.org/x/net@v0.47.0	0.55.0

Open the chart page →

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/net@v0.17.0	0.55.0

Open the chart page →

3,451

kube-benchdeliveryhero

0.1.17

1 of 1 See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-42502.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0	0.55.0

Open the chart page →

1,623

Container images carrying it

3,655 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0	0.55.0	3
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.55.0	3
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0	0.55.0	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.55.0	3
quay.io/prometheus-operator/prometheus-config-reloader :v0.91.0	7d9e4eea5f11	golang.org/x/net@v0.53.0	0.55.0	3
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/net@v0.25.0	0.55.0	3
quay.io/prometheus-operator/prometheus-operator :v0.90.1	52a6a92d915e	golang.org/x/net@v0.52.0	0.55.0	3
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b	0.55.0	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0	0.55.0	3
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0	0.55.0	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.55.0	3
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	golang.org/x/net@v0.49.0	0.55.0	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.55.0	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/net@v0.8.0	0.55.0	3
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0	0.55.0	3
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/net@v0.22.0	0.55.0	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.55.0	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.55.0	3
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.3.1	af0325804248	golang.org/x/net@v0.54.0	0.55.0	3
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0	0.55.0	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0	0.55.0	3
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/net@v0.22.0	0.55.0	3
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.5.2	e8825994b7a2	golang.org/x/net@v0.37.0	0.55.0	3
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	golang.org/x/net@v0.26.0	0.55.0	3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/net@v0.41.0	0.55.0	3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.0	6b2f0b6f2f86	golang.org/x/net@v0.51.0	0.55.0	3
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/net@v0.24.0	0.55.0	3
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0	0.55.0	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0	0.55.0	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.14.0	5244abbe87e0	golang.org/x/net@v0.40.0	0.55.0	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	golang.org/x/net@v0.18.0	0.55.0	3
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	golang.org/x/net@v0.34.0	0.55.0	3
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0	0.55.0	3
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	golang.org/x/net@v0.34.0	0.55.0	3
registry.k8s.io/sig-storage/csi-snapshotter :v8.4.0	c7e0a3718832	golang.org/x/net@v0.39.0	0.55.0	3
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0	0.55.0	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.55.0	3
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.55.0	2
alazidis/kube-netlag :1.1.0	0e8c84152201	golang.org/x/net@v0.33.0	0.55.0	2
alpine/git :2.47.2	062a01ad7a0e	golang.org/x/net@v0.23.0	0.55.0	2
alpine/git :latest	4f9488b7295b	golang.org/x/net@v0.54.0	0.55.0	2
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.47.0	0.55.0	2
alpine/kubectl :1.35.4	9ccd82364762	golang.org/x/net@v0.47.0	0.55.0	2
alpine/kubectl :1.35.2	ec8f734b0a10	golang.org/x/net@v0.47.0	0.55.0	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0	0.55.0	2
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0	0.55.0	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/net@v0.10.0	0.55.0	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0	0.55.0	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0	0.55.0	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.55.0	2