CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,685; of 17,790 indexed, latest versions
Container images: 1,949; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,685 of 17,790 indexed charts deploy, on 1,949 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,949
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,685 by stars

Chart

Latest

Affected images

Radar Score

glassflow-etlglassflow

0.5.21

2 of 16 See more

glassflow-etl glassflow 0.5.21

2 of the 16 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.35.0
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

12,072

gliderglider

0.1.5

1 of 1 See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
nadoo/glider :0.16	38aadefbd607	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

894

go-file-servergo-file-server

1.0.0

1 of 2 See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,215

gofitgofit

0.0.1

1 of 1 See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/bamaas/gofit :0.0.1	32b6a174b419	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

650

gorsegorse-io

0.4.2

3 of 4 See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.35.0
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.35.0
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.35.0

Open the chart page →

4,380

Governify-Bluejaygovernify

0.1.0

1 of 12 See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

22,565

Governify-Falcongovernify

0.1.0

1 of 10 See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

24,360

jaegergpg-dev

3.3.3

2 of 5 See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.35.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

19,291

kubernetes-dashboardgpg-dev

7.5.0

3 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

3 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.7.0	60595892c2cf	golang.org/x/crypto@v0.23.0	0.35.0
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	golang.org/x/crypto@v0.21.0	0.35.0
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

6,075

metrics-servergpg-dev

3.12.1

1 of 1 See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,071

opentelemetry-demogpg-dev

0.33.8

7 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	golang.org/x/crypto@v0.27.0	0.35.0
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	golang.org/x/crypto@v0.17.0	0.35.0
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/crypto@v0.29.0	0.35.0
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/crypto@v0.25.0	0.35.0
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/crypto@v0.23.0	0.35.0
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

47,117

mimir-openshift-experimentalgrafana

2.1.0

3 of 4 See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.35.0
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.35.0

Open the chart page →

17,759

prometheusgrafana-uxadax

26.0.1

6 of 6 See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/crypto@v0.26.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

5,304

grafregistratiecomponentgrafregistratiecomponent

1.0.0

1 of 3 See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,510

grapple-installergrapple-installer

0.3.22

1 of 1 See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

7,935

fasttrackmlgresearch

0.1.0

1 of 1 See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gresearch/fasttrackml :latest	16d1228220fc	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,391

siembolgresearch

0.1.6

1 of 4 See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

14,312

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,589

loki-proxygroundcover

0.1.1

1 of 1 See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

2,175

tailscale-subnet-routergtaylor

1.2.1

1 of 1 See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.35.0

Open the chart page →

1,834

docker-authhalkeye

0.1.1

1 of 1 See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0

Open the chart page →

2,374

matrix-media-repohalkeye

1.0.5

1 of 1 See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

4,455

cert-manager-webhook-arvanhbahadorzadeh

0.1.1

1 of 1 See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,022

kubernetes-event-exporterhbahadorzadeh

0.1.0

1 of 1 See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	golang.org/x/crypto@v0.0.0-20191029031824-8986dd9e96cf	0.35.0

Open the chart page →

2,630

hdx-oss-v2hdx-oss-v2

0.8.4

1 of 5 See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/mongo :5.0.14-focal	50cae5081ab4	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

6,747

heliconehelicone

0.1.42

1 of 14 See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
supabase/gotrue :v2.91.0	7174d551d720	golang.org/x/crypto@v0.9.0	0.35.0

Open the chart page →

23,472

helm-airportshelm-airports

0.1.0

1 of 7 See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

12,696

airports-kafkahelm-airports-dan

0.1.0

1 of 2 See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

4,547

helm-airportshelm-airports-dan

0.1.0

1 of 7 See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

5,573

airports-kafkahelm-airports-kafka

0.1.0

1 of 2 See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

4,547

home-assistanthelm-chart-roei

2025.3.0

1 of 1 See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

4,646

logging-stackhelm-charts-alexis-carbillet

0.1.0

5 of 9 See more

logging-stack helm-charts-alexis-carbillet 0.1.0

5 of the 9 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0
grafana/grafana :11.1.0	079600c9517b	golang.org/x/crypto@v0.24.0	0.35.0
grafana/loki :2.6.1	1ee60f980950	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0
grafana/loki :2.8.2	b1da1d23037e	golang.org/x/crypto@v0.5.0	0.35.0
grafana/loki-canary :2.6.1	ab2a2569307b	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

12,650

monitoring-stackhelm-charts-alexis-carbillet

0.1.0

8 of 11 See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

8 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/crypto@v0.27.0	0.35.0
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.70.0	e20576b76ffd	golang.org/x/crypto@v0.16.0	0.35.0
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/crypto@v0.8.0	0.35.0
quay.io/prometheus/node-exporter :v1.7.0	4cb2b9019f17	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	golang.org/x/crypto@v0.8.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

9,461

cortex-gatewayhelm-charts-nr

0.1.9

1 of 1 See more

cortex-gateway helm-charts-nr 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0

Open the chart page →

2,234

dregsyhelm-charts-nr

0.1.5

1 of 1 See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

2,969

hoppscotchhelm-charts-nr

0.3.1

1 of 1 See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

3,451

k8s-cloudwatch-adapterhelm-charts-nr

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter helm-charts-nr 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

2,468

kube-benchhelm-charts-nr

0.1.17

1 of 1 See more

kube-bench helm-charts-nr 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,623

labelsmanager-controllerhelm-charts-nr

1.0.4

1 of 1 See more

labelsmanager-controller helm-charts-nr 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0

Open the chart page →

2,305

listmonkhelm-charts-nr

0.1.12

1 of 1 See more

listmonk helm-charts-nr 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

2,537

node-problem-detectorhelm-charts-nr

2.3.17

1 of 1 See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,349

weblatehelm-charts-nr

0.3.2

1 of 3 See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.35.0

Open the chart page →

7,987

helmfile-gitops-agenthelmfile-gitops-agent

1.1.96

1 of 3 See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/helmfile/helmfile :v1.7.4	f20e612d5a98	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

2,597

countlyhelmforge

1.2.6

1 of 3 See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
countly/countly-server :25.05.4	e3c238248f99	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

18,923

gophishhelmforge

0.1.5

1 of 1 See more

gophish helmforge 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gophish/gophish :0.12.1	8a57cd171999	golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d	0.35.0

Open the chart page →

2,819

ryothelmforge

1.0.0

1 of 2 See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

5,916

openbashelm-openbas

1.8.14

3 of 7 See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openbas/caldera-server :5.1.0	a277796d9724	golang.org/x/crypto@v0.12.0	0.35.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.35.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

25,099

goshimmerhiveroad

0.2.14

1 of 1 See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
iotaledger/goshimmer :v0.8.6	b02a8f77474f	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

2,544

cratedb-adapterhmdmph

0.1.0

1 of 1 See more

cratedb-adapter hmdmph 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,913

imageproxyhmphu

0.1.1

1 of 1 See more

imageproxy hmphu 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
willnorris/imageproxy :latest	21d0c90f4c31	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0

Open the chart page →

2,140

Container images carrying it

1,949 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
grafana/grafana :7.4.5	d322192ed2fa	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0	1
grafana/grafana :8.5.3	ecc1b80b8ca2	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0	1
grafana/grafana :10.4.0	f9811e4e687f	golang.org/x/crypto@v0.18.0	0.35.0	1
grafana/grafana :11.3.1	fa801ab6e1ae	golang.org/x/crypto@v0.27.0	0.35.0	1
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
grafana/loki :2.9.10	35b02acc6765	golang.org/x/crypto@v0.24.0	0.35.0	1
grafana/loki :2.9.2	6074e01dbe03	golang.org/x/crypto@v0.14.0	0.35.0	1
grafana/loki :2.9.6	6ca6e2cd3b6f	golang.org/x/crypto@v0.18.0	0.35.0	1
grafana/loki :3.0.0	757b5fadf816	golang.org/x/crypto@v0.21.0	0.35.0	1
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
grafana/loki :3.2.0	882e30c20683	golang.org/x/crypto@v0.26.0	0.35.0	1
grafana/loki :3.3.2	8af2de1abbdd	golang.org/x/crypto@v0.31.0	0.35.0	1
grafana/loki :2.8.2	b1da1d23037e	golang.org/x/crypto@v0.5.0	0.35.0	1
grafana/loki :2.4.2	b3af8ead67d7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
grafana/loki-canary :3.0.0	28d7c00588aa	golang.org/x/crypto@v0.21.0	0.35.0	1
grafana/loki-canary :3.1.0	39baf6d67f85	golang.org/x/crypto@v0.21.0	0.35.0	1
grafana/loki-canary :2.9.2	4249db29b992	golang.org/x/crypto@v0.14.0	0.35.0	1
grafana/loki-canary :3.2.0	49e03f80d361	golang.org/x/crypto@v0.26.0	0.35.0	1
grafana/loki-canary :2.9.6	549a40203e97	golang.org/x/crypto@v0.18.0	0.35.0	1
grafana/loki-canary :2.6.1	ab2a2569307b	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0	1
grafana/mimir :r292-5f01872	7476e456c738	golang.org/x/crypto@v0.22.0	0.35.0	1
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0	1
grafana/mimir :2.15.0	85f55510e0d3	golang.org/x/crypto@v0.31.0	0.35.0	1
grafana/phlare :0.5.1	330f990cdad9	golang.org/x/crypto@v0.4.0	0.35.0	1
grafana/promtail :2.6.1	072527b12cdf	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0	1
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
grafana/promtail :2.9.10	63a2e57a5b14	golang.org/x/crypto@v0.24.0	0.35.0	1
grafana/promtail :2.7.0	c16c710f7333	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	1
grafana/promtail :3.0.0	d3de3da9431c	golang.org/x/crypto@v0.21.0	0.35.0	1
grafana/pyroscope :1.10.0	319bf32ae06b	golang.org/x/crypto@v0.24.0	0.35.0	1
grafana/tempo :2.6.0	f55a8a1937ff	golang.org/x/crypto@v0.25.0	0.35.0	1
gresearch/fasttrackml :latest	16d1228220fc	golang.org/x/crypto@v0.22.0	0.35.0	1
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1
grpl/grapple-cli :0.2.127	c00aafee6629	golang.org/x/crypto@v0.27.0	0.35.0	1
hashicorp/boundary :0.15.3	339b78b61750	golang.org/x/crypto@v0.21.0	0.35.0	1
hashicorp/boundary :0.8.1	fb70bd9210ff	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0	1
hashicorp/consul :1.17.0	712fe02d2f84	golang.org/x/crypto@v0.14.0	0.35.0	1
hashicorp/consul :1.15.3	ddff34041c5c	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
hashicorp/consul-k8s-control-plane :1.3.0	0e4452f0f265	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
hashicorp/terraform :1.4	4dcb45513699	golang.org/x/crypto@v0.1.0	0.35.0	1
hashicorp/terraform :1.9.7	b77efab1a448	golang.org/x/crypto@v0.21.0	0.35.0	1
hashicorp/terraform-k8s :1.1.2	b19857bab620	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	1
hashicorp/vault :1.15.4	0b01ed3924e6	golang.org/x/crypto@v0.15.0	0.35.0	1
hashicorp/vault :1.14.0	b2177a8bfe85	golang.org/x/crypto@v0.9.0	0.35.0	1
hashicorp/vault :1.8.4	dfc3500beb0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0	1
hashicorp/vault-k8s :1.2.1	4500e988b7ce	golang.org/x/crypto@v0.5.0	0.35.0	1
hashicorp/vault-k8s :0.6.0	5697b85bc69a	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0	1
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1