StackRadar

CVE-2018-16875

Unscored

Not in the current index: no indexed chart deploys a container image carrying CVE-2018-16875 in its latest version. The tables below are over older indexed versions and charts no longer in the index, and this page is not offered to search engines.

Advisory

Published 15 Jul 2022In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.063
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
0
of 17,781 indexed, latest versions
Container images
5
in older or deselected versions
Fix available
1 of 1
affected package

Denial of service in chain verification in crypto/x509

Carried by no container image the latest versions of the 17,781 indexed charts deploy; current on 5 images referenced by older indexed versions or by charts no longer in the index.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.26.4-X:jsonv21.10.65
OSV records
GO-2022-0191

Charts referencing it in older or deselected versions

4 by stars
ChartVersionAffected imagesRadar Score
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.91.21 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.91.2

1 of the 7 container images this version deploys carry CVE-2018-16875.

Container imageDigestPackageFixed in
ghcr.io/victoriametrics/sync-job:v0.0.1668df9707e912
stdlib@go1.26.4-X:jsonv2
1.10.6

Open the chart page →

3,312
zotzot0.1.1221 of 1See more

zot zot 0.1.122

1 of the 1 container images this version deploys carry CVE-2018-16875.

Container imageDigestPackageFixed in
ghcr.io/project-zot/zot:v2.1.186f7bf2b8e434
stdlib@go1.26.4-X:jsonv2
1.10.6

Open the chart page →

1,930
sbomscannerkubewardenVerified publisher0.12.03 of 5See more

sbomscanner kubewarden 0.12.0

3 of the 5 container images this version deploys carry CVE-2018-16875.

Container imageDigestPackageFixed in
ghcr.io/kubewarden/sbomscanner/controller:v0.12.049900cd784e0
stdlib@go1.26.4-X:jsonv2
1.10.6
ghcr.io/kubewarden/sbomscanner/storage:v0.12.04552722389e8
stdlib@go1.26.4-X:jsonv2
1.10.6
ghcr.io/kubewarden/sbomscanner/worker:v0.12.073c1fd7b565e
stdlib@go1.26.4-X:jsonv2
1.10.6

Open the chart page →

5,920
victoria-metrics-k8s-stackwenerme0.91.21 of 7See more

victoria-metrics-k8s-stack wenerme 0.91.2

1 of the 7 container images this version deploys carry CVE-2018-16875.

Container imageDigestPackageFixed in
ghcr.io/victoriametrics/sync-job:v0.0.1668df9707e912
stdlib@go1.26.4-X:jsonv2
1.10.6

Open the chart page →

3,312

Container images carrying it

5 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/victoriametrics/sync-job:v0.0.1668df9707e912
stdlib@go1.26.4-X:jsonv2
1.10.6
2
ghcr.io/kubewarden/sbomscanner/controller:v0.12.049900cd784e0
stdlib@go1.26.4-X:jsonv2
1.10.6
1
ghcr.io/kubewarden/sbomscanner/storage:v0.12.04552722389e8
stdlib@go1.26.4-X:jsonv2
1.10.6
1
ghcr.io/kubewarden/sbomscanner/worker:v0.12.073c1fd7b565e
stdlib@go1.26.4-X:jsonv2
1.10.6
1
ghcr.io/project-zot/zot:v2.1.186f7bf2b8e434
stdlib@go1.26.4-X:jsonv2
1.10.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.