CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,665; of 17,787 indexed, latest versions
Container images: 1,927; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,665 of 17,787 indexed charts deploy, on 1,927 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,927
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,665 by stars

Chart

Latest

Affected images

Radar Score

vclustermain

0.17.0

5 of 10 See more

vcluster main 0.17.0

5 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/crypto@v0.4.0	0.35.0
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/crypto@v0.8.0	0.35.0
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

11,552

headplanenbcloud

0.1.2

1 of 4 See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
headscale/headscale :0.25.1	a7a8ae9616bb	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

7,949

netris-operatornetrisai

3.0.2

1 of 2 See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,588

open5gsopen5gs

2.3.4

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gradiant/open5gs-dbctl :0.10.3	332031245fce	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

9,261

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

8,722

prometheus-consul-exporterprometheus-community

1.1.1

1 of 1 See more

prometheus-consul-exporter prometheus-community 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

782

prometheus-json-exporterprometheus-community

0.20.1

1 of 1 See more

prometheus-json-exporter prometheus-community 0.20.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/json-exporter :v0.7.0	3a777171d39a	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

725

prometheus-smartctl-exporterprometheus-community

0.17.1

1 of 1 See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

1,064

prometheus-statsd-exporterprometheus-community

1.0.0

1 of 1 See more

prometheus-statsd-exporter prometheus-community 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

782

rke2-multusrke2-charts

3.7.1-build2021041601

1 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

4,519

popeyeself-hosters-by-night

0.6.1

1 of 1 See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

1,196

uffizzi-appuffizzi-app

1.3.0

3 of 14 See more

uffizzi-app uffizzi-app 1.3.0

3 of the 14 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

19,337

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

13,562

ansible-semaphoreansible-semaphore

0.1.0

1 of 1 See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

4,019

aperture-controlleraperture

2.34.0

2 of 5 See more

aperture-controller aperture 2.34.0

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
fluxninja/aperture-operator :2.34.0	356d7aa86632	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

4,663

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

3,300

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

9,052

prometheusavesha

19.3.0

3 of 4 See more

prometheus avesha 19.3.0

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/crypto@v0.1.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0

Open the chart page →

5,484

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,250

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/crypto@v0.6.0	0.35.0

Open the chart page →

1,915

yatai-deploymentbentoml

1.1.21

1 of 2 See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,160

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	golang.org/x/crypto@v0.12.0	0.35.0

Open the chart page →

7,960

caddy-ingress-controllercaddy-ingress

1.3.0

1 of 1 See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,884

cert-managerchoerodon

1.8.2

3 of 4 See more

cert-manager choerodon 1.8.2

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0

Open the chart page →

7,775

popeyechristianhuth

2.4.3

1 of 1 See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

1,196

clowardenclowarden

0.2.3

1 of 4 See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

5,606

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

11 of 21 See more

coder-observability coder-observability 0.7.3

11 of the 21 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/agent :v0.40.3	f6cbec9409be	golang.org/x/crypto@v0.18.0	0.35.0
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/crypto@v0.21.0	0.35.0
grafana/loki-canary :3.1.0	39baf6d67f85	golang.org/x/crypto@v0.21.0	0.35.0
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/crypto@v0.23.0	0.35.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	golang.org/x/crypto@v0.24.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.35.0

Open the chart page →

24,700

convertigoconvertigo

8.4.3

2 of 5 See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	golang.org/x/crypto@v0.14.0	0.35.0
timescale/timescaledb :latest-pg16	289d55704b1b	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

17,404

cosmocosmo-platform

0.20.0

3 of 10 See more

cosmo cosmo-platform 0.20.0

3 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	golang.org/x/crypto@v0.23.0	0.35.0
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	golang.org/x/crypto@v0.31.0	0.35.0
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

28,839

dapr-dashboarddapr

0.15.0

1 of 1 See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
daprio/dashboard :0.15.0	4be696707bd1	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

1,301

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

3,451

kube-benchdeliveryhero

0.1.17

1 of 1 See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,623

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

2,537

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0

Open the chart page →

2,271

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

1 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

14,546

openshift-secured-redisInsighteximiait

0.9.2

1 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

13,874

ascii-moviegabe565

0.16.4

1 of 1 See more

ascii-movie gabe565 0.16.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/ascii-movie :1.9.6	27f85bb98da3	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

986

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.35.0

Open the chart page →

3,030

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.35.0

Open the chart page →

7,579

multusgeek-cookbook

3.5.2

1 of 3 See more

multus geek-cookbook 3.5.2

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

4,906

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

10,154

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,371

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

2,610

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

2,234

gitvotegitvote

1.5.0

1 of 6 See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

5,613

monitoring-stackhaukitech

0.1.11

2 of 3 See more

monitoring-stack haukitech 0.1.11

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

2,164

home-assistanthome-assistant

0.5.10

1 of 3 See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

2,331

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

2,622

Container images carrying it

1,927 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
dongjiang1989/pingmesh-agent :v1.2.2	c82de0272da0	golang.org/x/crypto@v0.28.0	0.35.0	1
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/crypto@v0.26.0	0.35.0	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/crypto@v0.17.0	0.35.0	1
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/crypto@v0.17.0	0.35.0	1
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/crypto@v0.24.0	0.35.0	1
drone/drone-runner-docker :1.8.1	137e79c5e23c	golang.org/x/crypto@v0.0.0-20190621222207-cc06ce4a13d4	0.35.0	1
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/crypto@v0.0.0-20180808211826-de0752318171	0.35.0	1
drorivry4/rego :latest	e035d49b15ca	golang.org/x/crypto@v0.17.0	0.35.0	1
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/crypto@v0.12.0	0.35.0	1
dtzar/helm-kubectl :3.11.2	a1041bb0f1d1	golang.org/x/crypto@v0.5.0	0.35.0	1
duplicati/duplicati :2.0.5.111_canary_2020-09-26	8660f0eda7c9	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/crypto@v0.21.0	0.35.0	1
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	golang.org/x/crypto@v0.14.0	0.35.0	1
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
eclipseaerios/federator :1.1.0	18c7f0d101c0	golang.org/x/crypto@v0.23.0	0.35.0	1
eclipseaerios/iota-tangle-peerer :latest	99d7ff18d416	golang.org/x/crypto@v0.28.0	0.35.0	1
eclipseaerios/llo-api :1.2.0	ab7a04182191	golang.org/x/crypto@v0.14.0	0.35.0	1
eclipseaerios/llo-docker-operator :1.1.2	d7ec28bfe735	golang.org/x/crypto@v0.31.0	0.35.0	1
elastic/apm-server :7.17.6	c7a1c63257d0	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0	1
emqx/ecp-emqx-agent-downloader :2.5.1	a8431baa7950	golang.org/x/crypto@v0.21.0	0.35.0	1
emqx/ecp-main :2.5.1	fa876f71e5d6	golang.org/x/crypto@v0.28.0	0.35.0	1
emqxecp/otelcol :2.5.0	4c31d9bec846	golang.org/x/crypto@v0.26.0	0.35.0	1
emqx/edge-operator-controller :0.0.5	53865c1267d9	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1
engrmth/bnkr :2.1.0	6d8464e6f0e8	golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5	0.35.0	1
envoyproxy/ratelimit :v1.4.0	71081616da3e	golang.org/x/crypto@v0.0.0-20191219195013-becbf705a915	0.35.0	1
epamedp/admin-console-operator :2.14.0	90f9921d8d58	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
epamedp/codebase-operator :2.12.0-MDTU-DDM-SNAPSHOT.10	96028c86f0dd	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
epamedp/edp-admin-console :2.14.0	616c678ba3e7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
epamedp/edp-argocd-operator :0.2.0	976a662a5e72	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
epamedp/edp-headlamp :0.25.0	93417e18bb1a	golang.org/x/crypto@v0.18.0	0.35.0	1
epamedp/gerrit-operator :2.11.0-MDTU-DDM-SNAPSHOT.2	b71fb39e0c9e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
epamedp/jenkins-operator :2.15.3	28ef56bc0ca3	golang.org/x/crypto@v0.14.0	0.35.0	1
epamedp/jenkins-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	ff25e9fe4419	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
epamedp/keycloak-operator :1.11.0-MDTU-DDM-SNAPSHOT.10	5d352199e12e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
epamedp/reconciler :2.12.0	d33e938b6d59	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
erenozcan17/go_backend :v4.2	50b4f23422b6	golang.org/x/crypto@v0.9.0	0.35.0	1
erigontech/erigon :v2.61.2	88706754b627	golang.org/x/crypto@v0.31.0	0.35.0	1
etejeda/butlerci :0.1.0	737d58183abc	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
ethereum/client-go :v1.10.18	6d6d12a40465	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
ethereum/client-go :v1.14.8	886ec69b35b0	golang.org/x/crypto@v0.22.0	0.35.0	1
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
ethereum/client-go :v1.10.15	d99fbb9585c7	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	1
ethereumoptimism/l2geth :0.5.31	5577036dc36d	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.35.0	1
ethersphere/bee :2.2.0	a884fd84b72f	golang.org/x/crypto@v0.23.0	0.35.0	1
ethersphere/onboarding-faucet :0.3.0	513154aab230	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	1
ethpandaops/armiarma :master	1a9c3264f0a9	golang.org/x/crypto@v0.21.0	0.35.0	1
ethpandaops/blob-me-baby :latest	ad26158420dd	golang.org/x/crypto@v0.14.0	0.35.0	1
ethpandaops/dugtrio :1.0.0	e261d1734e9f	golang.org/x/crypto@v0.10.0	0.35.0	1
ethpandaops/ethereum-metrics-exporter :0.21.0	d1780db2e286	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1