CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,684; of 17,787 indexed, latest versions
Container images: 1,948; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,684 of 17,787 indexed charts deploy, on 1,948 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,948
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,684 by stars

Chart

Latest

Affected images

Radar Score

ai-agentdevtron

0.0.1

1 of 1 See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

9,152

argocddevtron

1.8.1

2 of 3 See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

10,468

argocd-certificate-refreshdevtron

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

12,999

argo-workflowdevtron

0.1.6

1 of 1 See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,580

devtron-enterprisedevtron

48.0.0

11 of 28 See more

devtron-enterprise devtron 48.0.0

11 of the 28 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

66,542

devtron-in-clustercddevtron

0.10.2

2 of 2 See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

5,041

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

11,957

jcmhproxy-ingressdevtron

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,379

kube-prometheus-stackdevtron

19.3.0

2 of 6 See more

kube-prometheus-stack devtron 19.3.0

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

8,645

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0

Open the chart page →

2,435

zincdevtron

0.1.2

1 of 1 See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0

Open the chart page →

1,507

ai-agentdevtron-labs

0.0.1

1 of 1 See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

9,152

argocddevtron-labs

1.8.1

2 of 3 See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

10,468

argocd-certificate-refreshdevtron-labs

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

12,999

argo-workflowdevtron-labs

0.1.6

1 of 1 See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,580

calicodevtron-labs

0.1.1

3 of 4 See more

calico devtron-labs 0.1.1

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

10,073

clairdevtron-labs

0.1.14

1 of 2 See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

6,237

devtron-enterprisedevtron-labs

48.0.0

11 of 28 See more

devtron-enterprise devtron-labs 48.0.0

11 of the 28 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

66,542

devtron-in-clustercddevtron-labs

0.10.2

2 of 2 See more

devtron-in-clustercd devtron-labs 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

5,041

devtron-operatordevtron-labs

0.23.3

6 of 11 See more

devtron-operator devtron-labs 0.23.3

6 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

31,447

dgraphdevtron-labs

0.0.20

1 of 1 See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

11,957

jcmhproxy-ingressdevtron-labs

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron-labs 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,379

kube-prometheus-stackdevtron-labs

19.3.0

2 of 6 See more

kube-prometheus-stack devtron-labs 19.3.0

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

8,645

securitydevtron-labs

0.2.2

1 of 1 See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0

Open the chart page →

2,435

zincdevtron-labs

0.1.2

1 of 1 See more

zinc devtron-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0

Open the chart page →

1,507

dicedbdicedb-chart

0.1.0

1 of 1 See more

dicedb dicedb-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prathamkrishna/dicedb :v1	a7298180cd24	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

671

difydify

1.0.0

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

19,063

direktivdirektiv

0.10.0

1 of 6 See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-k8s :0.120.0	1e45d9483faa	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

3,470

graphite-exporterdjjudas21

0.1.9

1 of 1 See more

graphite-exporter djjudas21 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/graphite-exporter :v0.16.0	e54bca6645ea	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

782

hammonddjjudas21

0.3.9

1 of 1 See more

hammond djjudas21 0.3.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,806

photoprismdjjudas21

99.99.99

1 of 1 See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
photoprism/photoprism :240711-ce	fc6fd632ca74	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

17,053

uptime-kumadjjudas21

1.5.18

1 of 1 See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.23.12	bc6f244ecf27	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

4,217

dnation-kubernetes-monitoring-stackdnationcloud

4.0.2

6 of 17 See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

6 of the 17 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bitnamilegacy/thanos :0.37.1-debian-12-r0	5bf82b98c82c	golang.org/x/crypto@v0.28.0	0.35.0
grafana/loki :3.2.0	882e30c20683	golang.org/x/crypto@v0.26.0	0.35.0
grafana/loki-canary :3.2.0	49e03f80d361	golang.org/x/crypto@v0.26.0	0.35.0
prom/memcached-exporter :v0.15.0	bb01ad25e9fc	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	golang.org/x/crypto@v0.1.0	0.35.0

Open the chart page →

21,455

ssl-exporterdnationcloud

1.2.1

1 of 1 See more

ssl-exporter dnationcloud 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

1,632

snmp-exporterdniel

0.0.2

1 of 1 See more

snmp-exporter dniel 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,126

docparserdocparser

0.1.0

1 of 4 See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
conduction/docparser-php :dev	b6f95c8ead7d	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

8,408

furan2dollarshaveclub

0.2.0

1 of 1 See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

3,046

channelsdouban

1.1.2

1 of 1 See more

channels douban 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
everpcpc/channels :latest	b378d137ae8b	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,539

codecovdouban

0.2.4

1 of 8 See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

24,975

corednsdouban

1.39.2

1 of 1 See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
coredns/coredns :1.12.0	40384aa1f5ea	golang.org/x/crypto@v0.29.0	0.35.0

Open the chart page →

1,132

gatekeeperdouban

3.17.1

1 of 3 See more

gatekeeper douban 3.17.1

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.17.1	b7b4d7cfdd52	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,492

k8s-crondouban

0.2.0

1 of 1 See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/crypto@v0.13.0	0.35.0

Open the chart page →

3,660

prometheus-memcached-exporterdouban

0.1.3

1 of 1 See more

prometheus-memcached-exporter douban 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,114

tencentcloud-info-exporterdouban

0.2.2

1 of 1 See more

tencentcloud-info-exporter douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

2,325

drogue-cloud-examplesdrogue-iot

0.7.11

3 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7	0.35.0
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

30,759

drogue-cloud-metricsdrogue-iot

0.7.11

4 of 8 See more

drogue-cloud-metrics drogue-iot 0.7.11

4 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

13,558

drone-kubernetes-secretsdrone

0.1.4

1 of 1 See more

drone-kubernetes-secrets drone 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/crypto@v0.0.0-20180808211826-de0752318171	0.35.0

Open the chart page →

2,760

temporaldtrdnk-helm-charts

0.35.0

7 of 13 See more

temporal dtrdnk-helm-charts 0.35.0

7 of the 13 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/crypto@v0.14.0	0.35.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/crypto@v0.14.0	0.35.0
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/crypto@v0.1.0	0.35.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

20,204

duplicacyduplicacy

0.1.2

1 of 2 See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/crypto@v0.12.0	0.35.0

Open the chart page →

2,413

commentoduyet

0.2.0

1 of 2 See more

commento duyet 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	golang.org/x/crypto@v0.0.0-20180808211826-de0752318171	0.35.0

Open the chart page →

2,679

Container images carrying it

1,948 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
headscale/headscale :0.25.1	a7a8ae9616bb	golang.org/x/crypto@v0.32.0	0.35.0	1
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	golang.org/x/crypto@v0.10.0	0.35.0	1
hetznercloud/hcloud-cloud-controller-manager :v1.13.0	ed5ee5f83973	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.35.0	1
hhaluk/mocktail :2.0.3	350d19360038	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0	1
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.35.0	1
holiman/nodemonitor :latest	5cd609761065	golang.org/x/crypto@v0.8.0	0.35.0	1
homeassistant/home-assistant :2023.10.3	021e2afc6e57	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0	1
homeassistant/home-assistant :2026.7	5a531753cea9	golang.org/x/crypto@v0.26.0	0.35.0	1
homeassistant/home-assistant :2023.12.4	8d000332b09b	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0	1
hoppscotch/hoppscotch :2024.11.0	538fe6ded4b6	golang.org/x/crypto@v0.14.0	0.35.0	1
huacnlee/gobackup :v3.1.1	560be93229a5	golang.org/x/crypto@v0.14.0	0.35.0	1
huangchengwu6904/hi-app :cac-1691047806	1b932f8221a9	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/crypto@v0.0.0-20201117144127-c1f2f97bffc9	0.35.0	1
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/crypto@v0.0.0-20201117144127-c1f2f97bffc9	0.35.0	1
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/crypto@v0.0.0-20200221231518-2aa609cf4a9d	0.35.0	1
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/crypto@v0.0.0-20200221231518-2aa609cf4a9d	0.35.0	1
hyperledgerk8s/bc-explorer :v20230504	1f1a06b61f18	golang.org/x/crypto@v0.7.0	0.35.0	1
hyperledgerk8s/bc-saas :v0.0.1-20230524	d8bc31176257	golang.org/x/crypto@v0.7.0	0.35.0	1
hyperledgerk8s/fabric-operator :7776e71	29a8af8be270	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0	1
hyperledgerk8s/minio-mc :RELEASE.2023-01-28T20-29-38Z	729b3d128487	golang.org/x/crypto@v0.3.0	0.35.0	1
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	golang.org/x/crypto@v0.5.0	0.35.0	1
iamdorsah/bastillion :v0.1	db83a0254d81	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0	1
igrantio/bb-consent-api :2023.12.2	2d2ea6546ffe	golang.org/x/crypto@v0.14.0	0.35.0	1
inaccel/cloud-init :latest	a5d3d0af05c1	golang.org/x/crypto@v0.17.0	0.35.0	1
inaccel/kubevirt-hack :latest	bdfd61803a70	golang.org/x/crypto@v0.17.0	0.35.0	1
infisical/infisical-csi-provider :v0.0.9	e3390e677db6	golang.org/x/crypto@v0.31.0	0.35.0	1
inseefrlab/shelly :cloudshell	31f04ca7436b	golang.org/x/crypto@v0.13.0	0.35.0	1
instill/api-gateway :9bfdc88	b53eaa51c523	golang.org/x/crypto@v0.9.0	0.35.0	1
intel/multimodal-data-visualization :3.0	3426deb77337	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0	1
invisibl/gravity-init :v1.0.9	1a970f84178b	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.35.0	1
invisibl/identity-manager :1.0.0	1029f4fe20eb	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0	1
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/crypto@v0.16.0	0.35.0	1
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/crypto@v0.16.0	0.35.0	1
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/crypto@v0.16.0	0.35.0	1
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/crypto@v0.16.0	0.35.0	1
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/crypto@v0.14.0	0.35.0	1
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/crypto@v0.14.0	0.35.0	1
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/crypto@v0.14.0	0.35.0	1
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/crypto@v0.14.0	0.35.0	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.35.0	1