StackRadar

CVE-2025-22866

Medium

Advisory

Published 6 Feb 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,550
of 17,787 indexed, latest versions
Container images
3,082
deployed by those charts
Fix available
1 of 2
affected packages

Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

Carried by container images the latest versions of 2,550 of 17,787 indexed charts deploy, on 3,082 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+144 more1.22.123,082
golang-1.19deb1.19.8-2no fix listed1
OSV records
DEBIAN-CVE-2025-22866GO-2025-3447
Also known as
BIT-golang-2025-22866

Charts affected

2,550 by stars
ChartLatestAffected imagesRadar Score
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
stdlib@go1.21.11
1.22.12

Open the chart page →

4,038
jx-app-flaggerjenkins-x0.0.52 of 2See more

jx-app-flagger jenkins-x 0.0.5

2 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
grafana/grafana:6.5.1befcd84da2c1
stdlib@go1.13.1
1.22.12
weaveworks/flagger:1.0.0-rc.5174307de1b36
stdlib@go1.14.2
1.22.12

Open the chart page →

6,028
knative-servingjenkins-x0.19.124 of 4See more

knative-serving jenkins-x 0.19.12

4 of the 4 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned1e3db4f2eeed
stdlib@go1.14.10
1.22.12
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinneddb6ceff2aab4
stdlib@go1.14.10
1.22.12
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinnedb2cd45b8a8a4
stdlib@go1.14.10
1.22.12
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedd27b4495ccc3
stdlib@go1.14.10
1.22.12

Open the chart page →

9,699
ingress-nginxjfrog4.5.22 of 2See more

ingress-nginx jfrog 4.5.2

2 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
stdlib@go1.19.4
1.22.12
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
stdlib@go1.19.1
1.22.12

Open the chart page →

3,798
vaultjfrog0.25.02 of 2See more

vault jfrog 0.25.0

2 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
stdlib@go1.20.5
1.22.12
hashicorp/vault-k8s:1.2.14500e988b7ce
stdlib@go1.20.3
1.22.12

Open the chart page →

3,969
alpine-torjfwenischVerified publisher1.1.01 of 1See more

alpine-tor jfwenisch 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
jfwenisch/alpine-tor:latest9e6c229f953c
stdlib@go1.14.6
1.22.12

Open the chart page →

4,461
kafka-offset-lag-for-prometheusjhidalgo3-githubVerified publisher2.3.01 of 1See more

kafka-offset-lag-for-prometheus jhidalgo3-github 2.3.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
jhidalgo3/kafka-offset-lag-for-prometheus:latest0390e155c46d
stdlib@go1.17.13
1.22.12

Open the chart page →

1,470
missing-container-metricsjimdo-missing-container-metrics0.5.01 of 1See more

missing-container-metrics jimdo-missing-container-metrics 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
stdlib@go1.16.2
1.22.12

Open the chart page →

2,409
haven-complinacy-dashboardjolle-devVerified publisher1.0.01 of 2See more

haven-complinacy-dashboard jolle-dev 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
stdlib@go1.17.2
1.22.12

Open the chart page →

3,841
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.22.12

Open the chart page →

22,665
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
stdlib@go1.19.6
1.22.12

Open the chart page →

16,626
firstchartjuanjmerono0.2.01 of 1See more

firstchart juanjmerono 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
jmalloc/echo-server:0.3.1e4eaee2c7998
stdlib@go1.17
1.22.12

Open the chart page →

1,443
alertmanager-irc-relayjuppi880.0.11 of 1See more

alertmanager-irc-relay juppi88 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
maldridge/alertmanager-irc-relay:v0.4.1391de2b76128
stdlib@go1.16.4
1.22.12

Open the chart page →

1,615
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/k10app/businit:latest94c9a3e799c2
stdlib@go1.19.3
1.22.12

Open the chart page →

10,560
k8quk8qu1.4.01 of 1See more

k8qu k8qu 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/gijsvandulmen/k8qu:1.4e897b18db13d
stdlib@go1.22.6
1.22.12

Open the chart page →

568
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
stdlib@go1.18.1
1.22.12

Open the chart page →

6,136
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
stdlib@go1.22.7
1.22.12

Open the chart page →

1,893
influxdb-exporterk8s-home-lab-repo1.1.31 of 1See more

influxdb-exporter k8s-home-lab-repo 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
prom/influxdb-exporter:v0.11.427e33e18634a
stdlib@go1.19.9
1.22.12

Open the chart page →

624
photoprismk8s-home-lab-repo10.0.11 of 1See more

photoprism k8s-home-lab-repo 10.0.1

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
photoprism/photoprism:231128-ce284de9cc4f9c
stdlib@go1.21.4
1.22.12

Open the chart page →

1,140
zurgk8s-home-lab-repo1.2.11 of 1See more

zurg k8s-home-lab-repo 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
stdlib@go1.22.5
1.22.12

Open the chart page →

1,732
k8s-jacoco-operatork8s-jacoco-operator0.4.01 of 4See more

k8s-jacoco-operator k8s-jacoco-operator 0.4.0

1 of the 4 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
stdlib@go1.22.5
1.22.12

Open the chart page →

2,439
k8s-mutating-webhookk8s-mutating-webhook0.3.01 of 2See more

k8s-mutating-webhook k8s-mutating-webhook 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
stdlib@go1.22.5
1.22.12

Open the chart page →

2,009
k8s-ondemand-proxyk8s-ondemand-proxy0.0.61 of 1See more

k8s-ondemand-proxy k8s-ondemand-proxy 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-ondemand-proxy:0.0.2078b25d48cf7
stdlib@go1.21.1
1.22.12

Open the chart page →

815
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
stdlib@go1.17.6
1.22.12

Open the chart page →

14,833
k8s-pausek8s-pause0.1.41 of 1See more

k8s-pause k8s-pause 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8s-pause:v0.1.16b3215e37738
stdlib@go1.17.8
1.22.12

Open the chart page →

1,846
k8s-ssh-bastionk8s-ssh-bastion0.5.41 of 1See more

k8s-ssh-bastion k8s-ssh-bastion 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
stdlib@go1.21.11
1.22.12

Open the chart page →

3,321
k8s-validating-webhookk8s-validating-webhook0.4.01 of 2See more

k8s-validating-webhook k8s-validating-webhook 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
stdlib@go1.22.5
1.22.12

Open the chart page →

2,009
kube-admission-controller-starterk8s-validating-webhook0.2.01 of 2See more

kube-admission-controller-starter k8s-validating-webhook 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
stdlib@go1.22.5
1.22.12

Open the chart page →

2,166
k8svault-controllerk8svault-controller0.1.21 of 1See more

k8svault-controller k8svault-controller 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
stdlib@go1.16.15
1.22.12

Open the chart page →

1,885
postgresqlkagiso-me0.4.01 of 1See more

postgresql kagiso-me 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
library/postgres:17.4-alpine7062a2109c4b
stdlib@go1.18.2
1.22.12

Open the chart page →

1,488
rediskagiso-me0.1.61 of 1See more

redis kagiso-me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine02419de7eddf
stdlib@go1.18.2
1.22.12

Open the chart page →

1,288
kom-operatorkaisoVerified publisher1.3.01 of 2See more

kom-operator kaiso 1.3.0

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
kaiso/kom-operator:v2.2.0e0e22b928bdd
stdlib@go1.21.5
1.22.12

Open the chart page →

710
gpu-provisionerkaitoVerified publisher0.2.01 of 1See more

gpu-provisioner kaito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
mcr.microsoft.com/aks/kaito/gpu-provisioner:0.2.01204a7e948e9
stdlib@go1.21.8
1.22.12

Open the chart page →

1,038
keeper-injectorkeeper-injectorVerified publisher0.10.01 of 2See more

keeper-injector keeper-injector 0.10.0

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
stdlib@go1.22.8
1.22.12

Open the chart page →

758
keeper-injectorkeeper-securityVerified publisher0.11.31 of 2See more

keeper-injector keeper-security 0.11.3

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
stdlib@go1.22.8
1.22.12

Open the chart page →

505
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
stdlib@go1.20.7
1.22.12

Open the chart page →

5,098
kestra-starterkestraOfficialVerified publisher2.0.11 of 5See more

kestra-starter kestra 2.0.1

1 of the 5 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
library/postgres:17.5aadf2c0696f5
stdlib@go1.18.2
1.22.12

Open the chart page →

5,469
keycloak-operator-legacykeycloak-operator-legacy1.0.01 of 1See more

keycloak-operator-legacy keycloak-operator-legacy 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
stdlib@go1.13.8
1.22.12

Open the chart page →

5,066
csi-driver-nfskeyporttech0.1.41 of 2See more

csi-driver-nfs keyporttech 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
keyporttech/csi-driver-nfs:2.0.05bd7955ea2f1
stdlib@go1.14.2
1.22.12

Open the chart page →

3,357
gogskeyporttech0.1.31 of 3See more

gogs keyporttech 0.1.3

1 of the 3 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
gogs/gogs:0.12.30195b095d0b2
stdlib@go1.14.7
1.22.12

Open the chart page →

3,523
helm-mongodb-operatorkeyporttech0.1.01 of 1See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
stdlib@go1.13.15
1.22.12

Open the chart page →

8,816
connectkfirfer1.15.02 of 2See more

connect kfirfer 1.15.0

2 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
1password/connect-api:1.7.26aa94cf713f9
stdlib@go1.20.6
1.22.12
1password/connect-sync:1.7.2fe527ed9d81f
stdlib@go1.20.6
1.22.12

Open the chart page →

2,786
dex-k8s-authenticatorkfirfer0.0.31 of 1See more

dex-k8s-authenticator kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
stdlib@go1.13.11
1.22.12

Open the chart page →

2,791
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
stdlib@go1.17.1
1.22.12

Open the chart page →

6,446
kubernetes-replicatorkfirfer2.9.11 of 1See more

kubernetes-replicator kfirfer 2.9.1

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.9.1baf5f784398b
stdlib@go1.20.5
1.22.12

Open the chart page →

864
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
stdlib@go1.21.5
1.22.12

Open the chart page →

3,506
prometheus-elasticsearch-exporterkfirfer6.5.11 of 1See more

prometheus-elasticsearch-exporter kfirfer 6.5.1

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/elasticsearch-exporter:v1.8.0073dd360de2c
stdlib@go1.22.7
1.22.12

Open the chart page →

778
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
stdlib@go1.17.10
1.22.12

Open the chart page →

2,320
kiaekiae0.1.66 of 9See more

kiae kiae 0.1.6

6 of the 9 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.22.12
grafana/promtail:2.6.1072527b12cdf
stdlib@go1.17.9
1.22.12
istio/pilot:1.15.2db08d6963975
stdlib@go1.19.2
1.22.12
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
stdlib@go1.19.2
1.22.12
ghcr.io/dexidp/dex:v2.35.313964b29d63e
stdlib@go1.19.2
1.22.12
ghcr.io/kiaedev/kiae:latestebd03028ff6a
stdlib@go1.18.9
1.22.12

Open the chart page →

19,208
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22866.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.22.12

Open the chart page →

1,518

Container images carrying it

3,082 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
stdlib@go1.20.3
1.22.12
5
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.22.12
4
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.22.12
4
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.22.12
4
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.22.12
4
hyperledger/fabric-orderer:2.46ec3fe59ea55
stdlib@go1.18.10
1.22.12
4
hyperledger/fabric-peer:2.46ff36af21eb1
stdlib@go1.18.10
1.22.12
4
hyperledger/fabric-tools:2.4b1194f509085
stdlib@go1.18.10
1.22.12
4
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
stdlib@go1.21.5
1.22.12
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
stdlib@go1.18.2
1.22.12
4
jaegertracing/jaeger-collector:1.53.07f1269222903
stdlib@go1.21.5
1.22.12
4
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
stdlib@go1.21.5
1.22.12
4
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
stdlib@go1.14.4
1.22.12
4
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.22.12
4
library/mongo:4.4.66efa05203990
stdlib@go1.16.3
1.22.12
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
stdlib@go1.15.6
1.22.12
4
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
stdlib@go1.21.7
1.22.12
4
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
stdlib@go1.22.5
1.22.12
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
stdlib@go1.18.10
1.22.12
4
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
stdlib@go1.22.4
1.22.12
4
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
stdlib@go1.20.8
1.22.12
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
stdlib@go1.20.8
1.22.12
4
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
stdlib@go1.20.8
1.22.12
4
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
stdlib@go1.20.8
1.22.12
4
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
stdlib@go1.19.4
1.22.12
4
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.22.12
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
stdlib@go1.19.1
1.22.12
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.22.12
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
stdlib@go1.16.9
1.22.12
4
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.22.12
4
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.22.12
4
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.22.12
4
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
stdlib@go1.21.5
1.22.12
4
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.22.12
4
alfhou/hammond:v0.0.24c85dc0293aa1
stdlib@go1.20.6
1.22.12
3
argoproj/argocd:v1.8.1830e86cacefd
stdlib@go1.14.12
1.22.12
3
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
stdlib@go1.17.10
1.22.12
3
caddy/ingress:v0.2.118d1366fc0e9
stdlib@go1.21.4
1.22.12
3
ciscolabs/rtsp-server:latestb59fc10bb821
stdlib@go1.19.2
1.22.12
3
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.22.12
3
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.22.12
3
derailed/popeye:v0.22.18e68e22c7663
stdlib@go1.23.5
1.22.12
3
dgraph/dgraph:v21.12.03b55ea83fffe
stdlib@go1.17.3
1.22.12
3
grafana/grafana:8.2.500568d89c4f8
stdlib@go1.17
1.22.12
3
grafana/grafana:11.0.00dc5a246ab16
stdlib@go1.21.10
1.22.12
3
grafana/grafana:11.3.0a0f881232a6f
stdlib@go1.23.1
1.22.12
3
grafana/promtail:2.4.2626900031c4e
stdlib@go1.17.2
1.22.12
3
groundnuty/k8s-wait-for:v2.0c14d7271e401
stdlib@go1.19.3
1.22.12
3
hashicorp/http-echo:1.0.0:latestfcb75f691c8b
stdlib@go1.21.1
1.22.12
3
library/docker:20.10-dind:20-dindaf96c680a7e1
stdlib@go1.19.7
1.22.12
3

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.