Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

20,204

lethe-stackkuoss

0.2.3

1 of 3 See more

lethe-stack kuoss 0.2.3

1 of the 3 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0

Open the chart page →

1,762

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	github.com/go-viper/mapstructure/v2@v2.0.0	2.4.0

Open the chart page →

2,113

lightsteplightstep-microsat

2.0.21

1 of 1 See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
lightstep/microsatellite :2024-01-22_17-52-59Z	c800e05e1eff	github.com/go-viper/mapstructure/v2@v2.0.0-alpha.1	2.4.0

Open the chart page →

1,116

linkerd-dashboardlinkerd-dashboard

0.11.1

1 of 2 See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

1,037

tempo-distributedloafoe

1.20.1

1 of 2 See more

tempo-distributed loafoe 1.20.1

1 of the 2 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
grafana/tempo :2.6.0	f55a8a1937ff	github.com/go-viper/mapstructure/v2@v2.0.0-alpha.1	2.4.0

Open the chart page →

2,020

mattermost-team-editionmattermost-team-edition

6.6.83

1 of 4 See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

4,089

mayastormayastor

2.12.1

1 of 31 See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

21,064

kube-prometheus-stackmesosphere-stable

75.9.1

2 of 7 See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
grafana/grafana :12.0.2	b5b59bfc7561	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

10,180

memosmt190502

7.3.2

1 of 3 See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
neosmemo/memos :0.26.2	3eefcc231141	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

2,443

cognativemya

0.2403.3

1 of 3 See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	github.com/go-viper/mapstructure/v2@v2.0.0-alpha.1	2.4.0

Open the chart page →

7,309

cosmoshub-rpcnodeify

1.0.7

1 of 2 See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

2,006

cosmos-nodenodeify

2.6.0

1 of 2 See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

2,006

lensoci-ai-incubations

0.1.14

3 of 16 See more

lens oci-ai-incubations 0.1.14

3 of the 16 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.10	6dbe6f391eda	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0
grafana/grafana :12.1.1	a1701c218024	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

17,070

onedevonedev

11.9.0

1 of 1 See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
1dev/server :11.9.0	cd5b12fe5471	github.com/go-viper/mapstructure/v2@v2.0.0	2.4.0

Open the chart page →

6,037

mattermost-team-editionopenshift

6.6.83

1 of 4 See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

4,089

adotowan-charts

0.1.0

1 of 1 See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-otel-collector :v0.43.3	8aa9ea5f67b8	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

1,016

arpap2p-avs

0.1.3

1 of 2 See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
ghcr.io/arpa-network/node-client :latest	657a2c9f6e6d	github.com/go-viper/mapstructure/v2@v2.0.0-alpha.1	2.4.0

Open the chart page →

1,980

thanosrayselfs-charts

0.1.5

1 of 1 See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0

Open the chart page →

750

memosrm3l

0.1.1

1 of 1 See more

memos rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
neosmemo/memos :0.24	c6defc2dfb98	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

1,614

monitoringrocketchat-server

0.0.17

1 of 9 See more

monitoring rocketchat-server 0.0.17

1 of the 9 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

6,859

opentelemetry-collectorsb-helm-charts

0.3.0

1 of 1 See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	github.com/go-viper/mapstructure/v2@v2.0.0-alpha.1	2.4.0

Open the chart page →

1,721

seaweedfs-operatorseaweedfs-operator

1.5.8

1 of 3 See more

seaweedfs-operator seaweedfs-operator 1.5.8

1 of the 3 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/seaweedfs-operator :1.4	3ebe2fd253f6	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0

Open the chart page →

2,092

teamcitysinextra

1.0.2

1 of 3 See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
library/docker :26.1-dind	dd43b430341a	github.com/go-viper/mapstructure/v2@v2.0.0	2.4.0

Open the chart page →

2,429

skypilot-prometheus-serverskypilot

0.11.1

1 of 3 See more

skypilot-prometheus-server skypilot 0.11.1

1 of the 3 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v3.4.1	9abc6cf6aea7	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

2,344

group-challengesubshell-lab

2.1.0

1 of 2 See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.29.1	7d12c7c8fc66	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0

Open the chart page →

2,540

stash-boxswuuper-github

0.1.1

1 of 2 See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
stashapp/stash-box :latest	a534c8afdf39	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

8,193

wallarm-oobwallarm

0.23.0

1 of 3 See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2025-11065.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :6.10.1	aecd88b24c51	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0

Open the chart page →

2,824

Container images carrying it

75 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/arpa-network/node-client :latest	657a2c9f6e6d	github.com/go-viper/mapstructure/v2@v2.0.0-alpha.1	2.4.0	1
ghcr.io/aserto-dev/topaz :0.32.59	4c708ecf7dc4	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/bitmagnet-io/bitmagnet :v0.10	b6373349a301	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/flanksource/postgres :17.6-497383c	ebcf66281fc1	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0	1
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0	1
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/kubenetworks/kubevpn :v2.11.7	cce8ff866f60	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/nnstd/seaweedfs-operator :1.4	3ebe2fd253f6	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0	1
ghcr.io/tale/headplane :0.5.5	0dbc52cffc19	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	github.com/go-viper/mapstructure/v2@v2.0.0-alpha.1	2.4.0	1
public.ecr.aws/aws-observability/aws-otel-collector :v0.43.3	8aa9ea5f67b8	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
quay.io/argoproj/argocli :v3.7.1	6efd1cb89dc1	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
quay.io/argoproj/workflow-controller :v3.7.1	66388d1b2f08	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
quay.io/prometheus/prometheus :v3.4.1	9abc6cf6aea7	github.com/go-viper/mapstructure/v2@v2.2.1	2.4.0	1
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	github.com/go-viper/mapstructure/v2@v2.3.0	2.4.0	1