Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-22872 EUVD-2025-11453GHSA-vvgc-356p-c3xwGO-2025-3595

Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net

Published Apr 16, 2025 · Updated May 16, 2025 · Assigned by Go

Vendor: golang.org/x/net Product: golang.org/x/net/html Package: aactl Package: actions-runner-controller Package: actions-runner-controller-compat Package: addon-resizer Package: addon-resizer-compat Package: amass Package: amazon-cloudwatch-agent Package: amazon-cloudwatch-agent-all Package: amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard Package: amazon-cloudwatch-agent-compat Package: amazon-cloudwatch-agent-config-downloader Package: amazon-cloudwatch-agent-config-translator Package: amazon-cloudwatch-agent-operator Package: amazon-cloudwatch-agent-operator-compat Package: amazon-cloudwatch-agent-start-amazon-cloudwatch-agent Package: amazon-k8s-cni Package: amazon-k8s-cni-compat Package: amazon-k8s-cni-init Package: amazon-k8s-cni-init-compat Package: argo-events Package: argo-rollouts Package: argo-workflows Package: argocd-image-updater Package: argocd-image-updater-compat Package: atlantis Package: authservice Package: authservice-compat Package: aws-application-networking-k8s Package: aws-application-networking-k8s-compat Package: aws-efs-csi-driver Package: aws-load-balancer-controller Package: aws-load-balancer-controller-compat Package: aws-network-policy-agent Package: aws-network-policy-agent-compat Package: aws-privateca-issuer Package: aws-privateca-issuer-compat Package: aws-s3-controller Package: azcopy Package: azure-service-operator Package: azure-service-operator-compat Package: azure-workload-identity-webhook Package: azure-workload-identity-webhook-compat Package: bank-vaults Package: bank-vaults-template Package: bom Package: buildah Package: caddy Package: caddy-man Package: caddy-src Package: cadvisor Package: cadvisor-compat Package: cass-operator Package: cass-operator-compat Package: cass-operator-config Package: cert-exporter Package: cert-manager Package: cert-manager-cmctl Package: cert-manager-istio-csr Package: cert-manager-istio-csr-compat Package: cert-manager-webhook-pdns Package: cf-cli Package: cfssl Package: cfssl-bundle Package: cfssl-certinfo Package: cfssl-json Package: cfssl-mkbundle Package: cfssl-multirootca Package: cfssl-newkey Package: cfssl-scan Package: chartmuseum Package: clickhouse-operator Package: clickhouse-operator-compat Package: clickhouse-operator-metrics-exporter Package: clickhouse-operator-metrics-exporter-compat Package: cloud-provider-gcp-cloud-controller-manager Package: cloud-provider-gcp-cloud-controller-manager-compat Package: cloudflared Package: cloudnative-pg Package: cloudnative-pg-plugins Package: cloudprober Package: cloudprober-compat Package: cluster-api-aws-controller Package: cluster-api-aws-controller-compat Package: cluster-api-helm-controller Package: cluster-api-helm-controller-compat Package: cluster-proportional-autoscaler Package: cluster-proportional-autoscaler-compat Package: cni-plugins Package: cni-plugins Package: cni-plugins-aws-k8s-compat Package: cni-plugins-bandwidth Package: cni-plugins-bandwidth-compat Package: cni-plugins-bridge Package: cni-plugins-bridge-compat Package: cni-plugins-dhcp Package: cni-plugins-dhcp-compat Package: cni-plugins-dummy Package: cni-plugins-dummy-compat Package: cni-plugins-firewall Package: cni-plugins-firewall-compat Package: cni-plugins-host-device Package: cni-plugins-host-device-compat Package: cni-plugins-host-local Package: cni-plugins-host-local-compat Package: cni-plugins-ipam Package: cni-plugins-ipvlan Package: cni-plugins-ipvlan-compat Package: cni-plugins-loopback Package: cni-plugins-loopback-compat Package: cni-plugins-macvlan Package: cni-plugins-macvlan-compat Package: cni-plugins-main Package: cni-plugins-meta Package: cni-plugins-portmap Package: cni-plugins-portmap-compat Package: cni-plugins-ptp Package: cni-plugins-ptp-compat Package: cni-plugins-sbr Package: cni-plugins-sbr-compat Package: cni-plugins-static Package: cni-plugins-static-compat Package: cni-plugins-tap Package: cni-plugins-tap-compat Package: cni-plugins-tuning Package: cni-plugins-tuning-compat Package: cni-plugins-vlan Package: cni-plugins-vlan-compat Package: cni-plugins-vrf Package: cni-plugins-vrf-compat Package: containerd-1 Package: containerd-2 Package: containerd-service-1 Package: containerd-service-2 Package: containerd-shim-runc-v2-1 Package: containerd-shim-runc-v2-2 Package: containerd-stress-1 Package: containerd-stress-2 Package: containerd2 Package: containerized-data-importer Package: controller-gen Package: cortex Package: cri-o Package: cri-tools Package: cri-tools Package: crictl Package: critest Package: croc Package: crossplane-crank Package: crossplane-provider-aws Package: crossplane-provider-aws-cloudformation Package: crossplane-provider-aws-cloudformation-compat Package: crossplane-provider-aws-cloudfront Package: crossplane-provider-aws-cloudfront-compat Package: crossplane-provider-aws-cloudwatchlogs Package: crossplane-provider-aws-cloudwatchlogs-compat Package: crossplane-provider-aws-dynamodb Package: crossplane-provider-aws-dynamodb-compat Package: crossplane-provider-aws-ec2 Package: crossplane-provider-aws-ec2-compat Package: crossplane-provider-aws-eks Package: crossplane-provider-aws-eks-compat Package: crossplane-provider-aws-elasticache Package: crossplane-provider-aws-elasticache-compat Package: crossplane-provider-aws-firehose Package: crossplane-provider-aws-firehose-compat Package: crossplane-provider-aws-iam Package: crossplane-provider-aws-iam-compat Package: crossplane-provider-aws-kinesis Package: crossplane-provider-aws-kinesis-compat Package: crossplane-provider-aws-kms Package: crossplane-provider-aws-kms-compat Package: crossplane-provider-aws-lambda Package: crossplane-provider-aws-lambda-compat Package: crossplane-provider-aws-memorydb Package: crossplane-provider-aws-memorydb-compat Package: crossplane-provider-aws-rds Package: crossplane-provider-aws-rds-compat Package: crossplane-provider-aws-route53 Package: crossplane-provider-aws-route53-compat Package: crossplane-provider-aws-s3 Package: crossplane-provider-aws-s3-compat Package: crossplane-provider-aws-sns Package: crossplane-provider-aws-sns-compat Package: crossplane-provider-aws-sqs Package: crossplane-provider-aws-sqs-compat Package: crossplane-provider-azure-authorization Package: crossplane-provider-azure-authorization-compat Package: crossplane-provider-azure-managedidentity Package: crossplane-provider-azure-managedidentity-compat Package: crossplane-provider-azure-sql Package: crossplane-provider-azure-sql-compat Package: crossplane-provider-azure-storage Package: crossplane-provider-azure-storage-compat Package: crossplane-provider-family-aws Package: crossplane-provider-family-aws-compat Package: crossplane-provider-family-azure Package: crossplane-provider-family-azure-compat Package: crossplane-provider-keycloak Package: crossplane-provider-sql Package: ctr-1 Package: ctr-2 Package: cue Package: cue-bash-completion Package: cue-fish-completion Package: cue-zsh-completion Package: dagdotdev Package: dasel Package: dbmate Package: descheduler Package: dex Package: dex-iamguarded-compat Package: dgraph Package: distribution Package: dive Package: docker-buildx Package: docker-compose Package: docker-compose Package: docker-dind Package: docker-machine-driver-harvester Package: docker-machine-driver-linode Package: dockerize Package: doppler-kubernetes-operator Package: dynamic-localpv-provisioner Package: eksctl Package: emissary Package: emissary-apiext Package: emissary-oci-entrypoint Package: envoy-gateway Package: envoy-gateway-compat Package: envoy-gateway-egctl Package: envoy-ratelimit Package: falco-exporter Package: falcoctl Package: falcosidekick Package: filebrowser Package: filebrowser-compat Package: fluent-bit-plugin-loki Package: fluent-operator Package: fluent-watcher Package: fluent-watcher-compat Package: fluent-watcher-config Package: flux Package: flux-helm-controller Package: flux-helm-controller-iamguarded-compat Package: flux-image-automation-controller Package: flux-image-automation-controller-compat Package: flux-image-automation-controller-iamguarded-compat Package: flux-image-reflector-controller Package: flux-image-reflector-controller-iamguarded-compat Package: flux-kustomize-controller Package: flux-kustomize-controller-iamguarded-compat Package: flux-notification-controller Package: flux-notification-controller-iamguarded-compat Package: flux-source-controller Package: flux-source-controller-iamguarded-compat Package: flyte Package: fq Package: frp Package: fulcio Package: fuse-overlayfs-snapshotter Package: gatus Package: gatus-compat Package: gcsfuse Package: gem-check Package: gh Package: git-lfs Package: git-lfs-config Package: gitea Package: gitea-compat Package: gitness Package: gitsign Package: gitsign-config Package: gitsign-credential-cache Package: gke-gcloud-auth-plugin Package: glab Package: glow Package: go-discover Package: go-licenses Package: gobuster Package: golang-golang-x-net Package: golang-golang-x-net Package: golang-golang-x-net-dev Package: golang.org/x/net Package: gomplate Package: goreleaser Package: gosh Package: gostatsd Package: gptscript Package: grafana-agent-operator Package: grafana-alloy Package: grafana-mimir Package: grafana-operator Package: grafana-operator-bitnami-compat Package: grpc-health-probe Package: grpc-health-probe-compat Package: grpcurl Package: guac Package: guaccsub Package: guacgql Package: guacingest Package: guacone Package: harbor-registry Package: harbor-scanner-trivy Package: hcloud Package: header-check Package: helm Package: helm Package: helm-3 Package: helm-4 Package: helm-operator Package: helm-operator-compat Package: helm-push Package: help-check Package: hey Package: hubble Package: hubble-compat Package: hydra Package: ig Package: influxdb Package: ingress-nginx-controller-1.12 Package: ip-masq-agent Package: jaeger-operator Package: jaeger-operator-compat Package: juju-core Package: k3d Package: k3d-proxy Package: k3d-tools Package: k3s-static Package: k3s-static-1.32 Package: k6 Package: k8sgpt Package: k8sgpt-operator Package: k8sgpt-operator-compat Package: k8ssandra-client Package: k8ssandra-client-compat Package: k8ssandra-operator Package: k8ssandra-operator-compat Package: kaf Package: kafka_exporter Package: kafka-proxy Package: kafka-proxy-compat Package: kaniko Package: kaniko-compat Package: kaniko-warmer Package: kaniko-warmer-compat Package: kapp Package: kapp-controller Package: kapp-controller-compat Package: kargo Package: kargo-oci-compat Package: kbld Package: keda Package: knative-client Package: ko Package: kor Package: kots Package: kots-compat Package: kots-symlink-compat Package: kpt Package: kserve-modelmesh-serving Package: kserve-modelmesh-serving-compat Package: kserve-rest-proxy Package: kserve-rest-proxy-compat Package: ksops Package: ksops-compat Package: kube-bench Package: kube-bench-configs Package: kube-fluentd-operator Package: kube-fluentd-operator-compat Package: kube-fluentd-operator-default-config Package: kube-fluentd-operator-oci-entrypoint Package: kube-logging-operator Package: kube-logging-operator-compat Package: kube-logging-operator-config-reloader Package: kube-logging-operator-config-reloader-compat Package: kube-logging-operator-fluentd-outputs Package: kube-metrics-adapter Package: kube-rbac-proxy Package: kube-state-metrics Package: kube-state-metrics-iamguarded-compat Package: kube-vip-cloud-provider Package: kubectl-1.28 Package: kubectl-1.28-default Package: kubectl-1.29 Package: kubectl-1.29-default Package: kubectl-1.30 Package: kubectl-1.30-default Package: kubectl-1.31 Package: kubectl-1.31-default Package: kubectl-1.32 Package: kubectl-1.32-default Package: kubectl-argo-rollouts Package: kubectl-bash-completion-1.28 Package: kubectl-bash-completion-1.29 Package: kubectl-bash-completion-1.30 Package: kubeflow Package: kubeflow-access-management Package: kubeflow-access-management-compat Package: kubeflow-admission-webhook Package: kubeflow-admission-webhook-compat Package: kubeflow-notebook-controller Package: kubeflow-notebook-controller-compat Package: kubeflow-profile-controller Package: kubeflow-profile-controller-compat Package: kubeflow-pvcviewer-controller Package: kubeflow-pvcviewer-controller-compat Package: kubeflow-tensorboard-controller Package: kubeflow-tensorboard-controller-compat Package: kuberay-operator Package: kuberay-operator-compat Package: kuberlr Package: kubernetes Package: kubernetes-csi-driver-hostpath Package: kubernetes-csi-driver-nfs Package: kubernetes-csi-driver-nfs-compat Package: kubernetes-csi-external-attacher Package: kubernetes-csi-external-attacher-compat Package: kubernetes-csi-external-provisioner Package: kubernetes-csi-external-resizer Package: kubernetes-csi-livenessprobe Package: kubernetes-dashboard Package: kubernetes-dashboard-api Package: kubernetes-dashboard-api-compat Package: kubernetes-dashboard-auth Package: kubernetes-dashboard-auth-compat Package: kubernetes-dashboard-metrics-scraper Package: kubernetes-dashboard-metrics-scraper-compat Package: kubernetes-dashboard-web Package: kubernetes-dashboard-web-compat Package: kubernetes-dns-node-cache Package: kubernetes-event-exporter Package: kubernetes-event-exporter-iamguarded-compat Package: kubernetes-replicator Package: kubescape Package: kubevela Package: kubevela-vela-cli Package: kubevela-vela-core Package: kubevela-vela-core-compat Package: kubevirt Package: kubewatch Package: kwok Package: kwokctl Package: kyverno-notation-aws Package: kyverno-notation-aws-compat Package: kyverno-policy-reporter-kyverno-plugin Package: kyverno-policy-reporter-kyverno-plugin-compat Package: ldd-check Package: litefs Package: litestream Package: local-path-provisioner Package: local-static-provisioner Package: local-static-provisioner-compat Package: local-volume-node-cleanup Package: local-volume-node-cleanup-compat Package: lvm-driver Package: lvm-driver-compat Package: lxd Package: malcontent Package: mc Package: mc-iamguarded-2025-compat Package: memcached-exporter Package: memcached-exporter-iamguarded-compat Package: metacontroller Package: metallb Package: metallb-controller Package: metallb-controller-compat Package: metallb-cp-tool Package: metallb-cp-tool-compat Package: metallb-frr Package: metallb-frr-compat Package: metallb-speaker Package: metallb-speaker-compat Package: metrics-server Package: metrics-server-compat Package: metrics-server-iamguarded-compat Package: minio Package: minio-iamguarded-2025-compat Package: minio-operator Package: minio-operator-compat Package: minio-operator-sidecar Package: minio-operator-sidecar-compat Package: mkcert Package: mods Package: mongo-tools Package: multus Package: multus-cni Package: multus-cni-compat Package: nerdctl Package: neuvector-scanner Package: neuvector-scanner-monitor Package: neuvector-scanner-task Package: newrelic-infra-operator Package: newrelic-infrastructure-agent Package: newrelic-k8s-metadata-injection Package: newrelic-k8s-metadata-injection-compat Package: newrelic-nri-kube-events Package: newrelic-nri-statsd Package: nfs-subdir-external-provisioner Package: nginx-prometheus-exporter Package: nginx-prometheus-exporter-iamguarded-compat Package: no-docs-check Package: nodetaint Package: nri-discovery-kubernetes Package: nri-discovery-kubernetes-compat Package: nri-kafka Package: nri-kafka-compat Package: nri-kafka-jdk11 Package: nri-kubernetes Package: nri-prometheus Package: nuclei Package: nvidia-container-toolkit Package: oauth2-proxy Package: oauth2-proxy-iamguarded-compat Package: octo-sts Package: octo-sts-webhook Package: ollama Package: ollama-cpu Package: op-geth Package: op-geth-abigen Package: op-geth-clef Package: op-geth-compat Package: op-geth-devp2p Package: op-geth-evm Package: op-geth-rlpdump Package: opa Package: opa-envoy Package: openbao Package: openbao-compat Package: openbao-k8s Package: openbao-k8s-compat Package: opencost Package: opencost-compat Package: opensearch-k8s-operator Package: opensearch-k8s-operator-compat Package: opentelemetry-collector Package: opentelemetry-collector-compat Package: opentelemetry-collector-ocb Package: opentelemetry-operator Package: opentelemetry-operator-compat Package: opentelemetry-operator-otel-allocator Package: opentelemetry-operator-otel-allocator-compat Package: opentofu-1.9 Package: otel-cli Package: package-type-check Package: packer Package: pluto Package: pluto-compat Package: podman Package: podman Package: podman-doc Package: postgres-operator Package: postgres-operator-compat Package: prometheus-3.2 Package: prometheus-adapter Package: prometheus-adapter Package: prometheus-alertmanager Package: prometheus-alertmanager-iamguarded-compat Package: promxy Package: pulumi Package: pulumi-kubernetes-operator Package: pulumi-language-dotnet Package: pulumi-language-go Package: pulumi-language-java Package: pulumi-language-nodejs Package: pulumi-language-python Package: pulumi-language-yaml Package: pvc-autoresizer Package: pvc-autoresizer-compat Package: py3.10-ambassador Package: py3.11-ambassador Package: py3.12-ambassador Package: py3.13-ambassador Package: q Package: rabbitmq-cluster-operator Package: rabbitmq-cluster-operator-compat Package: rabbitmq-cluster-operator-iamguarded-compat Package: rabbitmq-messaging-topology-operator Package: rabbitmq-messaging-topology-operator-compat Package: rabbitmq-messaging-topology-operator-iamguarded-compat Package: rancher-helm-3 Package: rancher-machine Package: rancher-system-agent Package: rancher-telemetry Package: rclone Package: rclone-compat Package: redis-operator Package: redis-operator-compat Package: restic Package: restic-compat Package: rootlesskit Package: rootlesskit-config-nonroot Package: runc Package: runc-doc Package: scorecard Package: sealed-secrets Package: sealed-secrets-compat Package: sealed-secrets-kubeseal Package: sealed-secrets-kubeseal-compat Package: secrets-store-csi-driver-provider-aws Package: secrets-store-csi-driver-provider-azure Package: sftpgo Package: sftpgo-plugin-auth Package: sftpgo-plugin-eventsearch Package: sftpgo-plugin-eventstore Package: sftpgo-plugin-geoipfilter Package: sftpgo-plugin-kms Package: sftpgo-plugin-pubsub Package: skopeo Package: slsa-verifier Package: sonobuoy Package: sonobuoy-compat Package: spark-operator Package: spark-operator-oci-entrypoint Package: spegel Package: spegel-compat Package: spicedb Package: spicedb-compat Package: spiffe-helper Package: spiffe-helper-compat Package: spire-agent Package: spire-controller-manager Package: spire-controller-manager-compat Package: spire-oidc-discovery-provider Package: spire-server Package: splunk-otel-collector Package: splunk-otel-collector-compat Package: splunk-otel-collector-doc Package: spqr Package: sql_exporter Package: src-fingerprint Package: sriov-network-device-plugin Package: sriov-network-device-plugin Package: sriov-network-device-plugin-entrypoint Package: steampipe Package: step Package: step-ca Package: step-issuer Package: step-issuer-compat Package: step-kms-plugin Package: symlink-check Package: syspeek Package: tailscale Package: tailscale-compat Package: task Package: tdbg Package: tdbg-compat Package: tekton-chains Package: telegraf Package: temporal Package: temporal-cassandra-tool Package: temporal-cassandra-tool-compat Package: temporal-compat Package: temporal-server Package: temporal-server-compat Package: temporal-server-oci-entrypoint Package: temporal-server-schema Package: temporal-sql-tool Package: temporal-sql-tool-compat Package: temporal-ui-server Package: temporal-ui-server-oci-entrypoint Package: terraform Package: terraform-compat Package: terraform-local-provider-config Package: terraform-provider-acme Package: terraform-provider-azapi Package: terraform-provider-azuread Package: terraform-provider-azurerm Package: terraform-provider-google Package: terraform-provider-grafana Package: terraform-provider-kubernetes Package: terraform-provider-random Package: terraform-provider-sendgrid Package: terraform-provider-time Package: terraform-provider-tls Package: tflint Package: tflint-compat Package: tfsec Package: thanos Package: thanos-iamguarded-compat Package: thanos-operator Package: thanos-operator-compat Package: timoni Package: tkn Package: traefik-3.3 Package: trivy Package: trufflehog Package: trust-manager Package: tw Package: tw-pip-check Package: twt Package: undock Package: usrmerge-tool Package: vault-benchmark Package: vault-benchmark-compat Package: vault-env Package: vault-env-compat Package: vault-k8s Package: vault-secrets-webhook Package: vault-secrets-webhook-compat Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: velero Package: velero-compat Package: velero-plugin-for-aws Package: velero-plugin-for-aws-compat Package: velero-plugin-for-csi Package: velero-plugin-for-csi-compat Package: velero-plugin-for-microsoft-azure Package: velero-plugin-for-microsoft-azure-compat Package: velero-restore-helper Package: ver-check Package: verify-service Package: verticadb-operator Package: verticadb-operator-compat Package: vertical-pod-autoscaler Package: vertical-pod-autoscaler-recommender Package: vertical-pod-autoscaler-updater Package: vexctl Package: victoriametrics-operator Package: victoriametrics-operator-compat Package: vitess Package: volume-modifier-for-k8s Package: wal-g Package: wal-g-pg Package: wave Package: weaviate Package: whereabouts Package: whereabouts-compat Package: wireguard-go Package: witness Package: wuzz Package: x509-certificate-exporter Package: x509-certificate-exporter-compat Package: xeol Package: xeol-compat Package: yq Package: yq Package: yunikorn-k8shim Package: yunikorn-k8shim-compat Package: zarf Package: zot Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).

Affected products

VendorProductAffectedFixed
golang.org/x/net golang.org/x/net/html < 0.38.0 0.38.0

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-golang-x-net 1:0.27.0-2 —
Debian 13 golang-golang-x-net 1:0.27.0-2 —
Debian 12 golang-golang-x-net No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS golang-golang-x-net 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1 USN-8900-1
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS golang-golang-x-net 1:0.21.0+dfsg-1ubuntu0.1~esm2 USN-8089-1
Ubuntu Pro 22.04 LTS golang-golang-x-net 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2 USN-8089-1
Ubuntu Pro 20.04 LTS golang-golang-x-net-dev 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2 —
Ubuntu Pro 18.04 LTS golang-golang-x-net-dev 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2 —
Ubuntu Pro 18.04 LTS lxd 3.0.3-0ubuntu1~18.04.2+esm2 —
Ubuntu Pro 16.04 LTS golang-golang-x-net-dev 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2 —
Ubuntu Pro 16.04 LTS juju-core 2.3.7-0ubuntu0.16.04.1+esm2 —
Ubuntu Pro 16.04 LTS lxd 2.0.11-0ubuntu1~16.04.4+esm2 —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 apptainer 1.4.5-150600.4.12.1 SUSE-SU-2026:0439-1
SLES 15 SP7 containerized-data-importer 1.64.0-150700.9.11.1 SUSE-SU-2026:2493-1
SLES 15 SP7 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-1
SLES 15 SP7 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-1
SLES 15 SP7 grafana 11.5.5-150200.3.72.2 SUSE-SU-2025:01991-1
SLES 15 SP7 helm 3.18.3-150000.1.50.1 SUSE-SU-2025:02121-1
SLES 15 SP7 kubernetes-old 1.31.9-150600.13.10.1 SUSE-SU-2025:01945-1
SLES 15 SP7 kubevirt 1.6.3-150700.3.13.1 SUSE-SU-2025:4330-1
SLES 15 SP7 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1
SLES 15 SP6 apptainer 1.4.5-150600.4.12.1 SUSE-SU-2026:0439-1
SLES 15 SP6 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-1
SLES 15 SP6 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-1
SLES 15 SP6 grafana 11.5.5-150200.3.72.2 SUSE-SU-2025:01991-1
SLES 15 SP6 helm 3.18.3-150000.1.50.1 SUSE-SU-2025:02121-1
SLES 15 SP6 kubernetes-old 1.31.9-150600.13.10.1 SUSE-SU-2025:01945-1
SLES 15 SP6 kubernetes1.25 1.25.16-150400.9.22.1 SUSE-SU-2025:02351-1
SLES 15 SP6 kubernetes1.26 1.26.15-150400.9.22.1 SUSE-SU-2025:02383-1
SLES 15 SP6 kubernetes1.27 1.27.16-150400.9.16.1 SUSE-SU-2025:02336-1
SLES 15 SP6 kubernetes1.28 1.28.13-150400.9.14.1 SUSE-SU-2025:02350-2, SUSE-SU-2025:02350-1
SLES 15 SP6 kubevirt 1.4.1-150600.5.24.1 SUSE-SU-2025:03278-1
SLES 15 SP6 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1
SLES 15 SP5 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-2
SLES 15 SP5 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-2
SLES 15 SP5 kubernetes1.23 1.23.17-150500.3.21.1 SUSE-SU-2025:01940-2
SLES 15 SP5 kubernetes1.26 1.26.15-150400.9.22.1 SUSE-SU-2025:02383-2
SLES 15 SP5 kubernetes1.28 1.28.13-150400.9.14.1 SUSE-SU-2025:02350-2
SLES 15 SP5 terraform-provider-aws 3.11.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-azurerm 2.32.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-external 2.0.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-google 3.43.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-helm 2.9.0-150200.6.23.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-kubernetes 1.13.2-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-local 2.0.0-150200.6.17.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-null 3.0.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-random 3.0.0-150200.6.15.1 SUSE-SU-2026:3056-1
SLES 15 SP5 terraform-provider-tls 3.0.0-150200.5.15.1 SUSE-SU-2026:3056-1
SLES 15 SP4 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-2
SLES 15 SP4 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-2
SLES 15 SP4 kubernetes1.23 1.23.17-150300.7.12.1 SUSE-SU-2025:02423-2
SLES 15 SP4 kubernetes1.26 1.26.15-150400.9.22.1 SUSE-SU-2025:02383-2
SLES 15 SP4 kubernetes1.28 1.28.13-150400.9.14.1 SUSE-SU-2025:02350-2
SLES 15 SP4 terraform-provider-aws 3.11.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-azurerm 2.32.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-external 2.0.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-google 3.43.0-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-helm 2.9.0-150200.6.23.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-kubernetes 1.13.2-150200.6.12.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-local 2.0.0-150200.6.17.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-null 3.0.0-150200.6.18.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-random 3.0.0-150200.6.15.1 SUSE-SU-2026:3056-1
SLES 15 SP4 terraform-provider-tls 3.0.0-150200.5.15.1 SUSE-SU-2026:3056-1
SLES 15 SP3 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-2
SLES 15 SP3 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-2
SLES 15 SP3 kubernetes1.23 1.23.17-150300.7.12.1 SUSE-SU-2025:02423-2
Show 21 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 docker 28.2.2_ce-98.134.1 SUSE-SU-2025:02366-2, SUSE-SU-2025:02366-1
SLES 12 SP5 golang-github-prometheus-node_exporter 1.9.1-1.36.2 SUSE-SU-2025:01987-1
SLES for SAP 15 SP5 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-2
SLES for SAP 15 SP5 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-2
SLES for SAP 15 SP5 kubernetes1.23 1.23.17-150500.3.21.1 SUSE-SU-2025:01940-2
SLES for SAP 15 SP5 kubernetes1.26 1.26.15-150400.9.22.1 SUSE-SU-2025:02383-2
SLES for SAP 15 SP5 kubernetes1.28 1.28.13-150400.9.14.1 SUSE-SU-2025:02350-2
SLES for SAP 15 SP4 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-2
SLES for SAP 15 SP4 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-2
SLES for SAP 15 SP4 kubernetes1.23 1.23.17-150300.7.12.1 SUSE-SU-2025:02423-2
SLES for SAP 15 SP4 kubernetes1.26 1.26.15-150400.9.22.1 SUSE-SU-2025:02383-2
SLES for SAP 15 SP4 kubernetes1.28 1.28.13-150400.9.14.1 SUSE-SU-2025:02350-2
SLES for SAP 15 SP3 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-2
SLES for SAP 15 SP3 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-2
SLES for SAP 15 SP3 kubernetes1.23 1.23.17-150300.7.12.1 SUSE-SU-2025:02423-2
SLE Micro 6.2 elemental-register 1.8.1-160000.1.1 SUSE-SU-2026:20176-1
SLE Micro 6.2 elemental-toolkit 2.3.2-160000.1.1 SUSE-SU-2026:20176-1
SLE Micro 6.1 docker 28.3.2_ce-slfo.1.1_5.1 SUSE-SU-2025:20535-1
SLE Micro 6.1 elemental-operator 1.7.4-slfo.1.1_1.1 SUSE-SU-2026:20357-1
SLE Micro 6.1 elemental-toolkit 2.2.7-slfo.1.1_1.1 SUSE-SU-2026:20357-1
SLE Micro 6.1 helm 3.18.3-slfo.1.1_1.1 SUSE-SU-2025:20457-1
SLE Micro 6.0 docker 28.3.2_ce-5.1 SUSE-SU-2025:20510-1
SLE Micro 6.0 elemental-operator 1.6.10-1.1 SUSE-SU-2026:20244-1
SLE Micro 6.0 elemental-toolkit 2.1.5-1.1 SUSE-SU-2026:20244-1
SLE Micro 6.0 helm 3.18.4-1.1 SUSE-SU-2025:20516-1
SLE Micro 5.5 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-1
SLE Micro 5.5 helm 3.18.3-150000.1.50.1 SUSE-SU-2025:02121-1
SLE Micro 5.4 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-1
SLE Micro 5.3 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-1
SLE Micro 5.2 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-1
SLE Micro 5.1 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-1
SLE HPC 15 SP5 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-2
SLE HPC 15 SP5 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-2
SLE HPC 15 SP5 kubernetes1.23 1.23.17-150500.3.21.1 SUSE-SU-2025:01940-2
SLE HPC 15 SP5 kubernetes1.26 1.26.15-150400.9.22.1 SUSE-SU-2025:02383-2
SLE HPC 15 SP5 kubernetes1.28 1.28.13-150400.9.14.1 SUSE-SU-2025:02350-2
SLE HPC 15 SP4 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-2
SLE HPC 15 SP4 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-2
SLE HPC 15 SP4 kubernetes1.23 1.23.17-150300.7.12.1 SUSE-SU-2025:02423-2
SLE HPC 15 SP4 kubernetes1.26 1.26.15-150400.9.22.1 SUSE-SU-2025:02383-2
SLE HPC 15 SP4 kubernetes1.28 1.28.13-150400.9.14.1 SUSE-SU-2025:02350-2
SLE HPC 15 SP3 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-2
SLE HPC 15 SP3 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-2
SLE HPC 15 SP3 kubernetes1.23 1.23.17-150300.7.12.1 SUSE-SU-2025:02423-2
SUSE Manager Server 4.3 release-notes-susemanager 4.3.15.2-150400.3.133.1 SUSE-SU-2025:01985-1
SUSE Manager Proxy Module 4.3 prometheus-blackbox_exporter 0.26.0-150000.1.27.1 SUSE-SU-2025:01989-1
SUSE Manager Client Tools for SLE Micro 5 prometheus-blackbox_exporter 0.26.0-150000.1.27.1 SUSE-SU-2025:01989-1
SUSE Manager Client Tools 15 golang-github-prometheus-prometheus 2.53.4-150000.3.62.2 SUSE-SU-2025:01989-1
SUSE Manager Client Tools 15 grafana 11.5.5-150000.1.79.1 SUSE-SU-2025:01989-1
SUSE Manager Client Tools 15 prometheus-blackbox_exporter 0.26.0-150000.1.27.1 SUSE-SU-2025:01989-1
SUSE Manager Client Tools 12 golang-github-prometheus-alertmanager 0.26.0-1.31.2 SUSE-SU-2025:01987-1
SUSE Manager Client Tools 12 golang-github-prometheus-node_exporter 1.9.1-1.36.2 SUSE-SU-2025:01987-1
SUSE Manager Client Tools 12 golang-github-prometheus-prometheus 2.53.4-1.60.2 SUSE-SU-2025:01987-1
SUSE Manager Client Tools 12 grafana 11.5.5-1.79.2 SUSE-SU-2025:01987-1
SUSE Manager Client Tools 12 prometheus-blackbox_exporter 0.26.0-1.27.1 SUSE-SU-2025:01987-1
SUSE Enterprise Storage 7.1 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-2
SUSE Enterprise Storage 7.1 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-2
SUSE Enterprise Storage 7.1 kubernetes1.23 1.23.17-150300.7.12.1 SUSE-SU-2025:02423-2

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed alloy 1.9.1-1.1 openSUSE-SU-2025:15207-1
openSUSE Tumbleweed apptainer 1.4.5-1.1 openSUSE-SU-2026:10013-1
openSUSE Tumbleweed containerized-data-importer1.65 1.65.0-2.1 openSUSE-SU-2026:11305-1
openSUSE Tumbleweed distrobuilder 3.2-2.1 openSUSE-SU-2025:15028-1
openSUSE Tumbleweed docker 28.1.1_ce-16.1 openSUSE-SU-2025:15046-1
openSUSE Tumbleweed glow 2.1.0-2.1 openSUSE-SU-2025:15036-1
openSUSE Tumbleweed go-sendxmpp 0.15.0-1.1 openSUSE-SU-2025:15462-1
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250416T165455-1.1 openSUSE-SU-2025:15008-1
openSUSE Tumbleweed grafana 11.6.1+security01-1.1 openSUSE-SU-2025:15171-1
openSUSE Tumbleweed hauler 1.2.4-1.1 openSUSE-SU-2025:15047-1
openSUSE Tumbleweed helm 3.18.3-1.1 openSUSE-SU-2025:15228-1
openSUSE Tumbleweed helm3 3.19.2-1.1 openSUSE-SU-2025:15779-1
openSUSE Tumbleweed kubectl-retina 1.3.1-1.1 openSUSE-SU-2026:12297-1
openSUSE Tumbleweed kubernetes1.30 1.30.14-1.1 openSUSE-SU-2025:15234-1
openSUSE Tumbleweed kubernetes1.31 1.31.10-1.1 openSUSE-SU-2025:15235-1
openSUSE Tumbleweed kubernetes1.32 1.32.6-1.1 openSUSE-SU-2025:15236-1
openSUSE Tumbleweed kubevirt 1.6.3-1.1 openSUSE-SU-2025:15772-1
openSUSE Tumbleweed kubevirt1.8 +1 1.8.3-1.1 openSUSE-SU-2026:11091-1, openSUSE-SU-2026:11057-1
openSUSE Tumbleweed kubo 0.35.0-1.1 openSUSE-SU-2025:15147-1
openSUSE Tumbleweed kumactl 3.0.0-1.1 openSUSE-SU-2026:12300-1
openSUSE Tumbleweed kured 1.23.0-1.1 openSUSE-SU-2026:12271-1
openSUSE Tumbleweed lux 0.24.1-1.1 openSUSE-SU-2026:11294-1
openSUSE Tumbleweed subfinder 2.7.0-3.1 openSUSE-SU-2025:15034-1
openSUSE Tumbleweed timoni 0.36.0-1.1 openSUSE-SU-2026:12309-1
openSUSE Tumbleweed traefik 3.4.3-1.1 openSUSE-SU-2025:15304-1
openSUSE Tumbleweed traefik2 2.11.26-1.1 openSUSE-SU-2025:15305-1
openSUSE Tumbleweed trivy 0.65.0-1.1 openSUSE-SU-2025:15454-1
openSUSE Tumbleweed velociraptor 0.7.0.4.git185.a5708584-2.1 openSUSE-SU-2026:11126-1
openSUSE Tumbleweed yq 4.53.2-1.1 openSUSE-SU-2026:10862-1
openSUSE Leap 16.0 containerized-data-importer1.65 1.65.0-160000.3.1 openSUSE-SU-2026:21824-1
openSUSE Leap 16.0 elemental-register 1.8.1-160000.1.1 openSUSE-SU-2026:20132-1
openSUSE Leap 16.0 elemental-toolkit 2.3.2-160000.1.1 openSUSE-SU-2026:20132-1
openSUSE Leap 16.0 gitea-tea +1 0.15.1-bp160.1.1 openSUSE-SU-2026:21603-1, openSUSE-SU-2026:20058-1
openSUSE Leap 16.0 glab 1.114.0-bp160.1.1 openSUSE-SU-2026:21662-1
openSUSE Leap 16.0 hauler 1.3.1-bp160.1.1 openSUSE-SU-2025:20160-1
openSUSE Leap 16.0 lux 0.24.1-bp160.1.1 openSUSE-SU-2026:21367-1
openSUSE Leap 15.6 apptainer 1.4.5-150600.4.12.1 SUSE-SU-2026:0439-1
openSUSE Leap 15.6 docker 28.2.2_ce-150000.227.1 SUSE-SU-2025:02289-1
openSUSE Leap 15.6 docker-stable 24.0.9_ce-150000.1.22.1 SUSE-SU-2025:02289-1
openSUSE Leap 15.6 grafana 11.5.5-150200.3.72.2 SUSE-SU-2025:01991-1
openSUSE Leap 15.6 helm 3.18.3-150000.1.50.1 SUSE-SU-2025:02121-1
openSUSE Leap 15.6 kubernetes-old 1.31.9-150600.13.10.1 SUSE-SU-2025:01945-1
openSUSE Leap 15.6 kubernetes1.23 1.23.17-150500.3.21.1 SUSE-SU-2025:01940-1
openSUSE Leap 15.6 kubernetes1.24 1.24.17-150500.3.28.1 SUSE-SU-2025:01941-1
openSUSE Leap 15.6 kubernetes1.25 1.25.16-150400.9.22.1 SUSE-SU-2025:02351-1
openSUSE Leap 15.6 kubernetes1.26 1.26.15-150400.9.22.1 SUSE-SU-2025:02383-1
openSUSE Leap 15.6 kubernetes1.27 1.27.16-150400.9.16.1 SUSE-SU-2025:02336-1
openSUSE Leap 15.6 kubevirt 1.4.1-150600.5.24.1 SUSE-SU-2025:03278-1
openSUSE Leap 15.6 prometheus-blackbox_exporter 0.26.0-150000.1.27.1 SUSE-SU-2025:01989-1
openSUSE Leap 15.6 squashfuse 0.5.0-150600.3.2.1 SUSE-SU-2026:0439-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 amazon-cloudwatch-agent 1.300055.3-1.amzn2023 ALAS2023-2025-1029
Amazon Linux 2023 amazon-ssm-agent 3.3.3050.0-1.amzn2023 ALAS2023-2025-1202
Amazon Linux 2023 ecs-init 1.94.0-1.amzn2023 ALAS2023-2025-1011
Amazon Linux 2023 nerdctl 2.0.5-1.amzn2023.0.1 ALAS2023-2025-980
Amazon Linux 2023 runfinch-finch 1.8.1-1.amzn2023.0.1 ALAS2023-2025-979
Amazon Linux 2023 soci-snapshotter 0.9.0-1.amzn2023.0.3 ALAS2023-2025-981
Amazon Linux 2 amazon-cloudwatch-agent 1.300055.3-1.amzn2 ALAS2-2025-2904
Amazon Linux 2 amazon-ssm-agent 3.3.3050.0-1.amzn2 ALAS2-2025-3010
Amazon Linux 2 nerdctl 2.0.5-1.amzn2.0.1 ALAS2-2025-2863

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 cert-manager 1.12.15-4 —
Azure Linux 3 cf-cli 8.7.11-3 —
Azure Linux 3 cni-plugins 1.4.0-3 —
Azure Linux 3 containerd2 2.0.0-9 —
Azure Linux 3 containerized-data-importer 1.57.0-14 —
Azure Linux 3 cri-tools 1.32.0-2 —
Azure Linux 3 dasel 2.8.1-2 —
Azure Linux 3 docker-buildx 0.14.0-6 —
Azure Linux 3 docker-compose 2.27.0-5 —
Azure Linux 3 gh 2.62.0-8 —
Azure Linux 3 helm 3.15.2-3 —
Azure Linux 3 ig 0.37.0-4 —
Azure Linux 3 influxdb 2.7.5-5 —
Azure Linux 3 keda 2.14.1-7 —
Azure Linux 3 kube-vip-cloud-provider 0.0.10-4 —
Azure Linux 3 kubernetes 1.30.10-7 —
Azure Linux 3 kubevirt 1.2.0-17 —
Azure Linux 3 multus 4.0.2-5 —
Azure Linux 3 nvidia-container-toolkit 1.17.8-2 —
Azure Linux 3 packer 1.9.5-9 —
Azure Linux 3 podman 5.6.1-2 —
Azure Linux 3 prometheus-adapter 0.12.0-3 —
Azure Linux 3 sriov-network-device-plugin 3.7.0-4 —
Azure Linux 3 telegraf 1.31.0-10 —
Azure Linux 3 yq +1 No fix yet —
Azure Linux 2 (CBL-Mariner) cert-manager 1.11.2-23 —
Azure Linux 2 (CBL-Mariner) cni-plugins 1.3.0-8 —
Azure Linux 2 (CBL-Mariner) cri-tools 1.29.0-8 —
Azure Linux 2 (CBL-Mariner) helm 3.14.2-6 —
Azure Linux 2 (CBL-Mariner) kubernetes 1.28.4-18 —
Azure Linux 2 (CBL-Mariner) kubevirt 0.59.0-28 —
Azure Linux 2 (CBL-Mariner) multus 4.0.2-8 —
Azure Linux 2 (CBL-Mariner) nvidia-container-toolkit 1.17.8-3 —
Azure Linux 2 (CBL-Mariner) packer 1.9.5-13 —
Azure Linux 2 (CBL-Mariner) podman No fix yet —
Azure Linux 2 (CBL-Mariner) sriov-network-device-plugin 3.6.2-9 —
Azure Linux 2 (CBL-Mariner) telegraf 1.29.4-16 —
Azure Linux 2 (CBL-Mariner) vitess 17.0.7-8 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling aactl 0.4.12-r31 —
Wolfi rolling actions-runner-controller +1 0.11.0-r2 —
Wolfi rolling addon-resizer +1 1.8.23-r5 —
Wolfi rolling amass 4.2.0-r23 —
Wolfi rolling amazon-cloudwatch-agent +6 1.300055.0-r1 —
Wolfi rolling amazon-cloudwatch-agent-operator +1 2.2.0-r4 —
Wolfi rolling amazon-k8s-cni +3 1.19.3-r4 —
Wolfi rolling argo-events 1.9.6-r1 —
Wolfi rolling argo-rollouts +1 1.8.2-r2 —
Wolfi rolling argo-workflows 3.6.5-r5 —
Wolfi rolling argocd-image-updater +1 0.16.0-r2 —
Wolfi rolling atlantis 0.34.0-r1 —
Wolfi rolling authservice +1 1.0.4-r7 —
Wolfi rolling aws-application-networking-k8s +1 1.1.0-r7 —
Wolfi rolling aws-efs-csi-driver 2.1.7-r2 —
Wolfi rolling aws-network-policy-agent +1 1.2.0-r3 —
Wolfi rolling aws-privateca-issuer +1 1.4.1-r4 —
Wolfi rolling aws-s3-controller 1.0.28-r2 —
Wolfi rolling azcopy 10.28.1-r2 —
Wolfi rolling azure-service-operator +3 2.12.0-r3 —
Wolfi rolling azure-workload-identity-webhook +1 1.5.0-r2 —
Wolfi rolling bank-vaults +1 1.20.4-r30 —
Wolfi rolling bom 0.6.0-r20 —
Wolfi rolling buildah 1.39.4-r2 —
Wolfi rolling caddy +1 2.9.1-r9 —
Wolfi rolling caddy-man 2.10.0-r0 —
Wolfi rolling cadvisor +1 0.52.1-r5 —
Wolfi rolling cass-operator +2 1.23.2-r2 —
Wolfi rolling cert-exporter 2.14.0-r11 —
Wolfi rolling cert-manager-cmctl 2.1.1-r12 —
Wolfi rolling cert-manager-istio-csr +1 0.14.0-r8 —
Wolfi rolling cert-manager-webhook-pdns 2.5.2-r6 —
Wolfi rolling cfssl +7 1.6.5-r19 —
Wolfi rolling chartmuseum 0.16.2-r19 —
Wolfi rolling clickhouse-operator +3 0.24.5-r1 —
Wolfi rolling cloud-provider-gcp-cloud-controller-manager +1 33.1.1-r1 —
Wolfi rolling cloudflared 2025.4.0-r1 —
Wolfi rolling cloudnative-pg +1 1.25.1-r33 —
Wolfi rolling cloudprober +1 0.14.0-r1 —
Wolfi rolling cluster-api-aws-controller +1 2.8.4-r1 —
Wolfi rolling cluster-api-helm-controller +1 0.3.2-r2 —
Wolfi rolling cluster-proportional-autoscaler +1 1.10.2-r2 —
Wolfi rolling cni-plugins +42 1.6.2-r5 —
Wolfi rolling controller-gen 0.17.3-r2 —
Wolfi rolling cortex 1.19.0-r6 —
Wolfi rolling crictl +2 1.32.0-r8 —
Wolfi rolling croc 10.2.2-r2 —
Wolfi rolling crossplane-crank 1.19.1-r2 —
Wolfi rolling crossplane-provider-aws +38 1.21.1-r1 —
Wolfi rolling crossplane-provider-azure-sql +9 1.11.2-r3 —
Wolfi rolling crossplane-provider-keycloak 1.7.0-r11 —
Wolfi rolling crossplane-provider-sql 0.11.0-r7 —
Wolfi rolling ctr-1 +4 1.7.27-r2 —
Wolfi rolling ctr-2 +4 2.0.5-r0 —
Wolfi rolling cue +3 0.12.1-r1 —
Wolfi rolling dagdotdev 0.0.15-r2 —
Wolfi rolling dbmate 2.26.0-r5 —
Wolfi rolling descheduler 0.32.2-r35 —
Wolfi rolling dex +1 2.42.1-r1 —
Wolfi rolling dgraph 24.1.2-r2 —
Wolfi rolling distribution 3.0.0-r36 —
Wolfi rolling dive 0.13.1-r2 —
Wolfi rolling docker-compose 2.35.1-r0 —
Wolfi rolling docker-dind 28.1.0-r0 —
Wolfi rolling docker-machine-driver-harvester 1.0.2-r1 —
Wolfi rolling docker-machine-driver-linode 0.1.15-r2 —
Wolfi rolling dockerize 0.9.3-r2 —
Wolfi rolling doppler-kubernetes-operator 1.5.7-r4 —
Wolfi rolling dynamic-localpv-provisioner 4.2.0-r5 —
Wolfi rolling eksctl 0.207.0-r2 —
Wolfi rolling emissary +6 3.10.0-r1 —
Wolfi rolling envoy-gateway +2 1.3.2-r3 —
Wolfi rolling envoy-ratelimit 0.0.0_git20250419-r1 —
Wolfi rolling falco-exporter 0.8.7-r6 —
Wolfi rolling falcoctl 0.11.1-r2 —
Wolfi rolling falcosidekick 2.31.1-r9 —
Wolfi rolling filebrowser +1 2.32.0-r6 —
Wolfi rolling fluent-bit-plugin-loki 3.4.3-r1 —
Wolfi rolling fluent-watcher +3 3.2.0-r10 —
Wolfi rolling flux 2.5.1-r6 —
Wolfi rolling flux-helm-controller +1 1.2.0-r8 —
Wolfi rolling flux-image-automation-controller +2 0.40.0-r6 —
Wolfi rolling flux-image-reflector-controller +1 0.34.0-r6 —
Wolfi rolling flux-kustomize-controller +1 1.5.1-r6 —
Wolfi rolling flux-notification-controller +1 1.5.0-r7 —
Wolfi rolling flux-source-controller +1 1.5.0-r43 —
Wolfi rolling flyte 1.15.1-r2 —
Wolfi rolling fq 0.14.0-r4 —
Wolfi rolling frp 0.61.2-r3 —
Wolfi rolling fulcio 1.7.0-r1 —
Wolfi rolling fuse-overlayfs-snapshotter 2.1.2-r2 —
Wolfi rolling gatus +1 5.17.0-r2 —
Wolfi rolling gcsfuse 2.11.1-r1 —
Wolfi rolling git-lfs +1 3.6.1-r6 —
Wolfi rolling gitea +1 1.23.7-r1 —
Wolfi rolling gitness 3.1.1-r7 —
Wolfi rolling gitsign +2 0.13.0-r1 —
Wolfi rolling gke-gcloud-auth-plugin 0.1.0-r6 —
Wolfi rolling glab 1.55.0-r2 —
Wolfi rolling glow 2.1.0-r3 —
Wolfi rolling go-discover 0_git20250416-r1 —
Wolfi rolling go-licenses 1.6.0-r26 —
Wolfi rolling gobuster 3.6.0-r22 —
Wolfi rolling gomplate 4.3.2-r1 —
Wolfi rolling goreleaser 2.8.2-r2 —
Wolfi rolling gostatsd 28.3.0-r15 —
Wolfi rolling gptscript 0.9.5-r10 —
Wolfi rolling grafana-agent-operator 0.44.5-r1 —
Wolfi rolling grafana-alloy 1.8.1-r1 —
Wolfi rolling grafana-mimir 2.16.0-r2 —
Wolfi rolling grafana-operator +1 5.17.1-r1 —
Wolfi rolling grpc-health-probe +1 0.4.37-r35 —
Wolfi rolling grpcurl 1.9.3-r4 —
Wolfi rolling guac +4 0.14.0-r3 —
Wolfi rolling harbor-registry 3.0.0-r1 —
Wolfi rolling harbor-scanner-trivy 0.32.3-r7 —
Wolfi rolling hcloud 1.50.0-r6 —
Wolfi rolling helm 3.17.3-r1 —
Wolfi rolling helm-3 3.19.2-r1 —
Wolfi rolling helm-4 4.0.1-r1 —
Wolfi rolling helm-operator +1 1.39.2-r2 —
Wolfi rolling helm-push 0.10.4-r28 —
Wolfi rolling hey 0.1.4-r23 —
Wolfi rolling hubble +1 1.17.2-r1 —
Wolfi rolling hydra 2.3.0-r8 —
Wolfi rolling ingress-nginx-controller-1.12 1.12.1-r42 —
Wolfi rolling ip-masq-agent 2.12.0-r8 —
Wolfi rolling jaeger-operator +1 1.65.0-r5 —
Wolfi rolling k3d +2 5.8.3-r12 —
Wolfi rolling k3s-static 1.34.1.1-r2 —
Wolfi rolling k3s-static-1.32 1.32.9.1-r2 —
Wolfi rolling k6 0.58.0-r2 —
Wolfi rolling k8sgpt 0.4.12-r0 —
Wolfi rolling k8ssandra-client +1 0.6.4-r1 —
Wolfi rolling k8ssandra-operator +1 1.21.2-r1 —
Wolfi rolling kaf +2 0.2.13-r1 —
Wolfi rolling kafka-proxy +1 0.4.2-r1 —
Wolfi rolling kafka_exporter 1.9.0-r34 —
Wolfi rolling kaniko +3 1.23.2-r17 —
Wolfi rolling kapp 0.64.1-r2 —
Wolfi rolling kapp-controller +1 0.55.1-r5 —
Wolfi rolling kargo +1 1.4.2-r1 —
Wolfi rolling kbld 0.45.1-r2 —
Wolfi rolling knative-client 1.17.0-r5 —
Wolfi rolling ko 0.17.1-r12 —
Wolfi rolling kor 0.6.1-r1 —
Wolfi rolling kots +2 1.124.15-r1 —
Wolfi rolling kpt 1.0.0_beta55-r7 —
Wolfi rolling kserve-modelmesh-serving +1 0.12.0-r11 —
Wolfi rolling kserve-rest-proxy +1 0.12.0-r7 —
Wolfi rolling ksops +1 4.3.3-r9 —
Wolfi rolling kube-bench +1 0.10.4-r5 —
Wolfi rolling kube-fluentd-operator +3 1.18.2-r35 —
Wolfi rolling kube-logging-operator +4 5.2.0-r2 —
Wolfi rolling kube-metrics-adapter 0.2.4-r4 —
Wolfi rolling kube-rbac-proxy 0.19.0-r5 —
Wolfi rolling kube-state-metrics +1 2.15.0-r42 —
Wolfi rolling kubectl-1.28 +2 1.28.15-r15 —
Wolfi rolling kubectl-1.29 +2 1.29.15-r7 —
Wolfi rolling kubectl-1.30 +2 1.30.11-r5 —
Wolfi rolling kubectl-1.31 +1 1.31.7-r5 —
Wolfi rolling kubectl-1.32 +1 1.32.3-r6 —
Wolfi rolling kubeflow +12 1.10.0-r4 —
Wolfi rolling kuberay-operator +1 1.3.2-r2 —
Wolfi rolling kuberlr 0.6.0-r4 —
Wolfi rolling kubernetes-csi-driver-hostpath 1.16.1-r3 —
Wolfi rolling kubernetes-csi-driver-nfs +1 4.11.0-r2 —
Wolfi rolling kubernetes-csi-external-attacher +1 4.8.1-r4 —
Wolfi rolling kubernetes-csi-external-provisioner 5.2.0-r6 —
Wolfi rolling kubernetes-csi-external-resizer 1.13.2-r4 —
Wolfi rolling kubernetes-csi-livenessprobe 2.15.0-r6 —
Wolfi rolling kubernetes-dashboard 7.12.0-r1 —
Wolfi rolling kubernetes-dashboard-auth +1 1.2.4-r6 —
Wolfi rolling kubernetes-dashboard-metrics-scraper +1 1.2.2-r7 —
Wolfi rolling kubernetes-dns-node-cache 1.25.0-r7 —
Wolfi rolling kubernetes-event-exporter +1 1.7-r42 —
Wolfi rolling kubernetes-replicator 2.11.1-r2 —
Wolfi rolling kubescape 3.0.34-r2 —
Wolfi rolling kubevela +3 1.10.2-r6 —
Wolfi rolling kubewatch 2.9.0-r9 —
Wolfi rolling kwok +1 0.6.1-r10 —
Wolfi rolling kyverno-notation-aws +1 1.1-r13 —
Wolfi rolling kyverno-policy-reporter-kyverno-plugin +1 1.6.4-r9 —
Wolfi rolling litefs 0.5.11-r14 —
Wolfi rolling litestream 0.3.13-r15 —
Wolfi rolling local-path-provisioner 0.0.31-r5 —
Wolfi rolling local-static-provisioner +3 2.8.0-r0 —
Wolfi rolling lvm-driver +1 1.6.2-r8 —
Wolfi rolling malcontent 1.9.0-r2 —
Wolfi rolling mc +1 0.20250408.153949-r1 —
Wolfi rolling memcached-exporter +1 0.15.2-r42 —
Wolfi rolling metacontroller 4.12.0-r2 —
Wolfi rolling metallb +8 0.14.9-r8 —
Wolfi rolling metrics-server +2 0.7.2-r12 —
Wolfi rolling minio +1 0.20250408.154124-r1 —
Wolfi rolling minio-operator +3 7.0.1-r3 —
Wolfi rolling mkcert 1.4.4-r13 —
Wolfi rolling mods 1.7.0-r5 —
Wolfi rolling mongo-tools 100.12.0-r4 —
Wolfi rolling multus-cni +1 4.2.0-r2 —
Wolfi rolling nerdctl 2.0.4-r2 —
Wolfi rolling neuvector-scanner +2 3.788-r0 —
Wolfi rolling newrelic-infra-operator 0.22.0-r2 —
Wolfi rolling newrelic-infrastructure-agent 1.63.1-r1 —
Wolfi rolling newrelic-k8s-metadata-injection +1 1.32.2-r1 —
Wolfi rolling newrelic-nri-kube-events 2.12.0-r2 —
Wolfi rolling newrelic-nri-statsd 2.11.0-r3 —
Wolfi rolling nfs-subdir-external-provisioner 4.0.18-r21 —
Wolfi rolling nginx-prometheus-exporter +1 1.4.1-r42 —
Wolfi rolling nodetaint 0.0.4-r33 —
Wolfi rolling nri-discovery-kubernetes +1 1.11.2-r1 —
Wolfi rolling nri-kafka +2 3.10.2-r4 —
Wolfi rolling nri-kubernetes 3.38.0-r1 —
Wolfi rolling nri-prometheus 2.24.3-r1 —
Wolfi rolling nuclei 3.4.2-r1 —
Wolfi rolling oauth2-proxy +1 7.8.2-r2 —
Wolfi rolling octo-sts +1 0.4.2-r12 —
Wolfi rolling ollama +1 0.6.5-r1 —
Wolfi rolling op-geth +6 1.101503.3-r1 —
Wolfi rolling opa 1.3.0-r2 —
Wolfi rolling opa-envoy 1.3.0_p1-r1 —
Wolfi rolling openbao +1 2.2.0-r7 —
Wolfi rolling openbao-k8s +1 1.4.0-r36 —
Wolfi rolling opencost +1 1.114.0-r6 —
Wolfi rolling opensearch-k8s-operator +1 2.7.0-r7 —
Wolfi rolling opentelemetry-collector +2 0.124.0-r1 —
Wolfi rolling opentofu-1.9 1.9.0-r10 —
Wolfi rolling otel-cli 0.4.5-r3 —
Wolfi rolling pluto +1 5.21.4-r1 —
Wolfi rolling podman +1 5.4.2-r1 —
Wolfi rolling postgres-operator +1 1.14.0-r7 —
Wolfi rolling prometheus-3.2 3.2.1-r42 —
Wolfi rolling prometheus-adapter 0.12.0-r12 —
Wolfi rolling prometheus-alertmanager +1 0.28.1-r4 —
Wolfi rolling promxy 0.0.92-r36 —
Wolfi rolling pulumi +3 3.163.0-r1 —
Wolfi rolling pulumi-kubernetes-operator 1.16.0-r16 —
Wolfi rolling pulumi-language-dotnet 3.78.0-r1 —
Wolfi rolling pulumi-language-java 1.9.0-r1 —
Wolfi rolling pvc-autoresizer +1 0.17.2-r1 —
Wolfi rolling q 0.19.2-r17 —
Wolfi rolling rabbitmq-cluster-operator +2 2.12.1-r6 —
Wolfi rolling rabbitmq-messaging-topology-operator +2 1.16.0-r9 —
Wolfi rolling rancher-helm-3 3.17.0-r1 —
Wolfi rolling rancher-machine 0.15.0.127-r1 —
Wolfi rolling rancher-system-agent 0.3.12-r1 —
Wolfi rolling rancher-telemetry 0.6.2-r1 —
Wolfi rolling rclone +1 1.69.1-r7 —
Wolfi rolling redis-operator +1 0.20.0-r1 —
Wolfi rolling restic +1 0.18.0-r2 —
Wolfi rolling rootlesskit +1 2.3.4-r3 —
Wolfi rolling runc +1 1.2.6-r2 —
Wolfi rolling scorecard 5.1.1-r6 —
Wolfi rolling sealed-secrets +3 0.29.0-r2 —
Wolfi rolling secrets-store-csi-driver-provider-aws 0.3.11-r34 —
Wolfi rolling secrets-store-csi-driver-provider-azure 1.6.2-r35 —
Wolfi rolling sftpgo 2.6.6-r4 —
Wolfi rolling sftpgo-plugin-auth 1.0.11-r3 —
Wolfi rolling sftpgo-plugin-eventstore +1 1.0.20-r3 —
Wolfi rolling sftpgo-plugin-geoipfilter 1.0.10-r3 —
Wolfi rolling sftpgo-plugin-kms 1.0.15-r5 —
Wolfi rolling sftpgo-plugin-pubsub 1.0.14-r4 —
Wolfi rolling skopeo 1.18.0-r7 —
Wolfi rolling slsa-verifier 2.7.0-r5 —
Wolfi rolling sonobuoy +1 0.57.3-r4 —
Wolfi rolling spark-operator +1 2.1.1-r3 —
Wolfi rolling spegel +1 0.1.1-r2 —
Wolfi rolling spicedb +1 1.42.1-r1 —
Wolfi rolling spiffe-helper +1 0.10.0-r1 —
Wolfi rolling spire-agent +2 1.12.0-r2 —
Wolfi rolling spire-controller-manager +1 0.6.1-r6 —
Wolfi rolling splunk-otel-collector +6 0.123.0-r0 —
Wolfi rolling spqr 2.5.0-r2 —
Wolfi rolling sql_exporter 0.17.1-r7 —
Wolfi rolling src-fingerprint 0.19.0-r29 —
Wolfi rolling sriov-network-device-plugin +1 3.9.0-r6 —
Wolfi rolling steampipe 1.1.0-r1 —
Wolfi rolling step 0.28.6-r3 —
Wolfi rolling step-ca 0.28.3-r3 —
Wolfi rolling step-issuer +1 0.9.8-r2 —
Wolfi rolling step-kms-plugin 0.12.2-r3 —
Wolfi rolling tailscale +1 1.82.5-r1 —
Wolfi rolling task 3.42.1-r3 —
Wolfi rolling tdbg +9 1.27.2-r2 —
Wolfi rolling tekton-chains 0.24.0-r8 —
Wolfi rolling temporal +1 1.3.0-r6 —
Wolfi rolling temporal-ui-server +1 2.37.1-r1 —
Wolfi rolling terraform +2 1.5.7-r28 —
Wolfi rolling terraform-provider-acme 2.32.0-r0 —
Wolfi rolling terraform-provider-azapi 2.3.0-r3 —
Wolfi rolling terraform-provider-azuread 3.3.0-r1 —
Wolfi rolling terraform-provider-azurerm 4.26.0-r1 —
Wolfi rolling terraform-provider-google 6.30.0-r1 —
Wolfi rolling terraform-provider-grafana 3.22.3-r2 —
Wolfi rolling terraform-provider-kubernetes 2.36.0-r3 —
Wolfi rolling terraform-provider-random 3.7.1-r4 —
Wolfi rolling terraform-provider-sendgrid 1.0.1-r3 —
Wolfi rolling terraform-provider-time 0.13.0-r3 —
Wolfi rolling terraform-provider-tls 4.0.6-r4 —
Wolfi rolling tflint +1 0.56.0-r2 —
Wolfi rolling tfsec 1.28.13-r7 —
Wolfi rolling thanos +1 0.38.0-r2 —
Wolfi rolling thanos-operator +1 0.3.7-r29 —
Wolfi rolling timoni 0.24.0-r4 —
Wolfi rolling tkn 0.40.0-r7 —
Wolfi rolling traefik-3.3 3.3.6-r0 —
Wolfi rolling trivy 0.61.1-r0 —
Wolfi rolling trufflehog 3.88.24-r1 —
Wolfi rolling trust-manager 0.16.0-r4 —
Wolfi rolling tw +14 0.0.10-r2 —
Wolfi rolling undock 0.9.0-r7 —
Wolfi rolling vault-benchmark +1 0.3.0-r35 —
Wolfi rolling vault-env +1 1.21.8-r2 —
Wolfi rolling vault-k8s 1.6.2-r3 —
Wolfi rolling vault-secrets-webhook +1 1.21.4-r2 —
Wolfi rolling vcluster +2 0.24.1-r1 —
Wolfi rolling velero +3 1.16.0-r1 —
Wolfi rolling velero-plugin-for-aws +5 1.12.0-r1 —
Wolfi rolling velero-plugin-for-csi +1 0.7.1-r34 —
Wolfi rolling verticadb-operator +1 25.2.0-r1 —
Wolfi rolling vertical-pod-autoscaler +2 1.3.0-r5 —
Wolfi rolling vexctl 0.3.0-r13 —
Wolfi rolling victoriametrics-operator +1 0.56.0-r1 —
Wolfi rolling volume-modifier-for-k8s 0.5.1-r6 —
Wolfi rolling wal-g +1 3.0.7-r2 —
Wolfi rolling wave 0.10.0-r7 —
Wolfi rolling weaviate 1.30.1-r1 —
Wolfi rolling whereabouts +1 0.9.0-r2 —
Wolfi rolling wireguard-go 0.0.20230223-r25 —
Wolfi rolling witness 0.9.0-r1 —
Wolfi rolling wuzz 0.5.0-r8 —
Wolfi rolling x509-certificate-exporter +1 3.18.1-r7 —
Wolfi rolling xeol +1 0.10.8-r7 —
Wolfi rolling yq 4.45.1-r6 —
Wolfi rolling yunikorn-k8shim +1 1.6.2-r1 —
Wolfi rolling zarf 0.52.0-r0 —
Wolfi rolling zot 2.1.2-r11 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go golang.org/x/net < 0.38.0 0.38.0 GHSA-vvgc-356p-c3xw

Advisories 50

References