CVE-2021-43565

High

Advisory

Published 7 Sept 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.011; 64th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 672; of 17,787 indexed, latest versions
Container images: 700; deployed by those charts
Fix available: 1 of 1; affected package

x/crypto/ssh vulnerable to panic via malformed packets

Carried by container images the latest versions of 672 of 17,787 indexed charts deploy, on 700 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+71 more	0.0.0-20211202192323-5770296d904e	700

OSV records: GHSA-gwc9-m7rh-j2ww
Also known as: GO-2022-0968

Charts affected

672 by stars

Chart

Latest

Affected images

Radar Score

procestypecatalogusprocestypecatalogus

1.1.0

1 of 4 See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20211202192323-5770296d904e

Open the chart page →

7,429

productenendienstencatalogusproductenendienstencatalogus

1.0.0

1 of 3 See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20211202192323-5770296d904e

Open the chart page →

7,510

alertmanagerprometheus-worawutchan

0.3.0

1 of 1 See more

alertmanager prometheus-worawutchan 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,305

prometheus-blackbox-exporterprometheus-worawutchan

4.10.1

1 of 1 See more

prometheus-blackbox-exporter prometheus-worawutchan 4.10.1

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,250

prometheus-node-exporterprometheus-worawutchan

1.12.0

1 of 1 See more

prometheus-node-exporter prometheus-worawutchan 1.12.0

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,188

panproto-application-nldesign

0.1.0

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20211202192323-5770296d904e

Open the chart page →

8,724

proto-component-commongroundproto-component-commonground

1.0.0

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20211202192323-5770296d904e

Open the chart page →

7,510

kspanpuckpuck

0.2.4

1 of 1 See more

kspan puckpuck 0.2.4

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
ghcr.io/honeycombio/kspan/kspan :0.2	c966a4f8a4b7	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

1,681

loki-stackpyalive-cdmswebapp

2.6.5

1 of 4 See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
grafana/promtail :2.4.2	626900031c4e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20211202192323-5770296d904e

Open the chart page →

6,526

cf-operatorquarks

2.3.0+0.g27a91cdf

2 of 2 See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.0.0-20211202192323-5770296d904e
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.0.0-20211202192323-5770296d904e

Open the chart page →

11,942

quarksquarks

7.0.1+0.g5396b11

4 of 5 See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

18,197

quarks-statefulsetquarks

0.0.1304-g4b4f2ac5

1 of 1 See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

4,010

saleorrc-helm-charts

0.1.1

1 of 5 See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.22.0	ca6b73330616	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

3,738

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e

Open the chart page →

15,290

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e

Open the chart page →

15,290

ploigosredhat-cop

0.0.9

1 of 2 See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.6	6722d5041b47	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

11,437

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20211202192323-5770296d904e

Open the chart page →

29,226

reportportalreportportal

5.7.2

2 of 8 See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
reportportal/migrations :5.7.0	da5d8e1395fe	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.0.0-20211202192323-5770296d904e
reportportal/service-index :5.0.11	2b27a2d7a87d	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20211202192323-5770296d904e

Open the chart page →

25,739

review-componentreview-component

1.0.0

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20211202192323-5770296d904e

Open the chart page →

7,490

rke2-calicorke2-charts

3.18.1-101

1 of 1 See more

rke2-calico rke2-charts 3.18.1-101

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.15.1	c6591da87aa8	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,250

rke2-canal-1.19-1.20rke2-charts

3.13.3-build2021102202

2 of 2 See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

2 of the 2 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20211202192323-5770296d904e
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

5,942

gitlab-operatorrock8s

0.7.0

1 of 2 See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20211202192323-5770296d904e

Open the chart page →

5,422

argocdromholdings

1.8.1

2 of 3 See more

argocd romholdings 1.8.1

2 of the 3 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20211202192323-5770296d904e

Open the chart page →

10,468

calicoromholdings

0.1.1

3 of 4 See more

calico romholdings 0.1.1

3 of the 4 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e

Open the chart page →

10,073

clairromholdings

0.1.14

1 of 2 See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20211202192323-5770296d904e

Open the chart page →

6,237

devtron-enterpriseromholdings

48.0.0

6 of 28 See more

devtron-enterprise romholdings 48.0.0

6 of the 28 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20211202192323-5770296d904e
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20211202192323-5770296d904e
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.0.0-20211202192323-5770296d904e
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20211202192323-5770296d904e
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20211202192323-5770296d904e

Open the chart page →

66,542

devtron-in-clustercdromholdings

0.10.2

1 of 2 See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e

Open the chart page →

5,041

devtron-operatorromholdings

0.23.3

4 of 11 See more

devtron-operator romholdings 0.23.3

4 of the 11 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20211202192323-5770296d904e
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20211202192323-5770296d904e
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20211202192323-5770296d904e

Open the chart page →

31,447

dgraphromholdings

0.0.20

1 of 1 See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20211202192323-5770296d904e

Open the chart page →

11,957

kube-prometheus-stackromholdings

19.3.0

2 of 6 See more

kube-prometheus-stack romholdings 19.3.0

2 of the 6 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20211202192323-5770296d904e
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20211202192323-5770296d904e

Open the chart page →

8,645

operatorrookout

0.0.20

1 of 2 See more

operator rookout 0.0.20

1 of the 2 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
rookout/k8s-operator :latest	0d083f3ef1a7	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,209

caddysagikazarmark

0.0.14

1 of 1 See more

caddy sagikazarmark 0.0.14

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
library/caddy :2.4.5	874405536b3e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,960

hellowsamarthya

2.0.0

1 of 1 See more

hellow samarthya 2.0.0

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
samarthya/spinnaker :v1.0	ef06d81036af	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,121

ed-traefikscaleway-charts

0.2.0

1 of 1 See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
library/traefik :v1.7.34	5d47b7bb2546	golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,133

ed-traefik2scaleway-charts

0.2.0

1 of 1 See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
library/traefik :2.5.6	2f603f8d3abe	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20211202192323-5770296d904e

Open the chart page →

3,160

icinga2-masterschmitzis

0.2.0

1 of 6 See more

icinga2-master schmitzis 0.2.0

1 of the 6 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
grafana/grafana :8.0.3	696823fbc561	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20211202192323-5770296d904e

Open the chart page →

3,731

version-checkerschmitzis

0.2.2

1 of 1 See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

3,023

openldapschoolguys-helmcharts

0.1.3

1 of 1 See more

openldap schoolguys-helmcharts 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.0.0-20211202192323-5770296d904e

Open the chart page →

3,313

ldap-instance-configsciencebox

0.0.1

1 of 1 See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.0.0-20211202192323-5770296d904e

Open the chart page →

3,313

centralbrainsciencemesh

0.0.3

3 of 5 See more

centralbrain sciencemesh 0.0.3

3 of the 5 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.3	15b977f5207d	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20211202192323-5770296d904e
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20211202192323-5770296d904e
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e

Open the chart page →

9,754

aws-secretssecretsprovider

0.1.0

1 of 1 See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,213

cloudflaredsectionme

2022.3.4

1 of 1 See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,407

seldon-core-analyticsseldon

1.17.1

3 of 8 See more

seldon-core-analytics seldon 1.17.1

3 of the 8 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71	0.0.0-20211202192323-5770296d904e
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56	0.0.0-20211202192323-5770296d904e
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.0.0-20211202192323-5770296d904e

Open the chart page →

10,733

alertmanagersignoz

0.5.2

1 of 1 See more

alertmanager signoz 0.5.2

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
signoz/alertmanager :0.5.0	7bc7de2e33c2	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,181

config-connector-templaterslamdev

0.0.5

1 of 1 See more

config-connector-templater slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
slamdev/config-connector-templater :0.0.3	a234541c9fa8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,110

gitlab-runnerslamdev

0.0.1

1 of 1 See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :v15.3.0	860d4a3fec7a	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e

Open the chart page →

9,235

gke-preemptible-notifierslamdev

0.0.6

1 of 1 See more

gke-preemptible-notifier slamdev 0.0.6

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
slamdev/gke-preemptible-notifier :v0.0.3	d5d6430108a3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,860

octavia-ingress-controllerslamdev

0.0.7

1 of 1 See more

octavia-ingress-controller slamdev 0.0.7

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
k8scloudprovider/octavia-ingress-controller :v1.20.2	6ddf80b34265	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,761

weblateslamdev

0.0.11

1 of 2 See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
weblate/weblate :3.11.3-1	82848df56ecd	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20211202192323-5770296d904e

Open the chart page →

8,697

pod-defaultersoftonic

0.1.3

1 of 1 See more

pod-defaulter softonic 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-43565.

Container image	Digest	Package	Fixed in
softonic/pod-defaulter :0.1.0	72017aed5902	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.0.0-20211202192323-5770296d904e

Open the chart page →

2,561

Container images carrying it

700 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
volantmq/volantmq :v0.4.0-rc.6	9bfe7857ebc3	golang.org/x/crypto@v0.0.0-20190927123631-a832865fa7ad	0.0.0-20211202192323-5770296d904e	1
voltha/bbsim :1.16.7	d90403d58016	golang.org/x/crypto@v0.0.0-20200204104054-c9f3fb736b72	0.0.0-20211202192323-5770296d904e	1
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20211202192323-5770296d904e	1
voltha/bbsim-sadis-server :0.4.0	762b272d439e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20211202192323-5770296d904e	1
vultr/cert-manager-webhook-vultr :v0.1.0	541c3e0aec58	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e	1
vultr/vultr-cloud-controller-manager :v0.3.0	1806f17d620c	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e	1
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20211202192323-5770296d904e	1
wazuh/wazuh-manager :4.4.1	21994f40e0da	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20211202192323-5770296d904e	1
wazuh/wazuh-manager :4.14.4	5a065930682d	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20211202192323-5770296d904e	1
wazuh/wazuh-manager :4.14.3	f09282d281f6	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20211202192323-5770296d904e	1
weaveworks/flagger :1.0.0-rc.5	174307de1b36	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20211202192323-5770296d904e	1
weaveworks/flagger :0.19.0	a9c2e9df4227	golang.org/x/crypto@v0.0.0-20181025213731-e84da0312774	0.0.0-20211202192323-5770296d904e	1
weblate/weblate :3.11.3-1	82848df56ecd	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20211202192323-5770296d904e	1
wener/frpc :v0.37.0	cc9fd4da44c0	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20211202192323-5770296d904e	1
wener/frps :v0.37.0	5c92cc9e8597	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20211202192323-5770296d904e	1
willnorris/imageproxy :latest	21d0c90f4c31	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e	1
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e	1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e	1
gcr.io/gke-release/custom-metrics-stackdriver-adapter :v0.13.1-gke.0	6937c0a9b203	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e	1
gcr.io/gloo-mesh/gloo-mesh :1.1.2	a4011eae6a0b	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20211202192323-5770296d904e	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e	1
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook	873b968f02b5	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.0.0-20211202192323-5770296d904e	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	1e3db4f2eeed	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	a5de0fb75046	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20211202192323-5770296d904e	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	2ef460356b17	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20211202192323-5770296d904e	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	db6ceff2aab4	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	30ce73388ae5	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20211202192323-5770296d904e	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	b2cd45b8a8a4	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	d27b4495ccc3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20211202192323-5770296d904e	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	f16c0e022203	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20211202192323-5770296d904e	1
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20211202192323-5770296d904e	1
gcr.io/kubecost1/cost-model :prod-1.82.2	989a60847416	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20211202192323-5770296d904e	1
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20211202192323-5770296d904e	1
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20211202192323-5770296d904e	1
ghcr.io/akhilrex/podgrab :1.0.0	bce133f3f511	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20211202192323-5770296d904e	1
ghcr.io/analogj/scrutiny :master-omnibus	18689773150d	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20211202192323-5770296d904e	1
ghcr.io/appscode/grafana :v2025.2.3	67d18880448c	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20211202192323-5770296d904e	1
ghcr.io/astriaorg/ria-faucet :0.0.1	a06c8ebef427	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20211202192323-5770296d904e	1
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20211202192323-5770296d904e	1
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20211202192323-5770296d904e	1
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20211202192323-5770296d904e	1
ghcr.io/beezlabs-org/cloudflare-tunnel-operator :v0.1.0	9afcd070940f	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20211202192323-5770296d904e	1
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20211202192323-5770296d904e	1
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20211202192323-5770296d904e	1
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e	1
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e	1
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e	1
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20211202192323-5770296d904e	1