CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,686; of 17,790 indexed, latest versions
Container images: 1,951; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,686 of 17,790 indexed charts deploy, on 1,951 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,951
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,686 by stars

Chart

Latest

Affected images

Radar Score

octolxddevplayer0

0.1.1

1 of 1 See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,525

ai-agentdevtron

0.0.1

1 of 1 See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

9,685

argocddevtron

1.8.1

2 of 3 See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

10,484

argocd-certificate-refreshdevtron

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

13,011

argo-workflowdevtron

0.1.6

1 of 1 See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,587

devtron-enterprisedevtron

48.0.0

11 of 28 See more

devtron-enterprise devtron 48.0.0

11 of the 28 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

68,695

devtron-in-clustercddevtron

0.10.2

2 of 2 See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

5,055

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

11,959

jcmhproxy-ingressdevtron

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,379

kube-prometheus-stackdevtron

19.3.0

2 of 6 See more

kube-prometheus-stack devtron 19.3.0

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

8,659

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0

Open the chart page →

2,441

zincdevtron

0.1.2

1 of 1 See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0

Open the chart page →

1,514

ai-agentdevtron-labs

0.0.1

1 of 1 See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

9,685

argocddevtron-labs

1.8.1

2 of 3 See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

10,484

argocd-certificate-refreshdevtron-labs

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

13,011

argo-workflowdevtron-labs

0.1.6

1 of 1 See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,587

calicodevtron-labs

0.1.1

3 of 4 See more

calico devtron-labs 0.1.1

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

10,094

clairdevtron-labs

0.1.14

1 of 2 See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

6,237

devtron-enterprisedevtron-labs

48.0.0

11 of 28 See more

devtron-enterprise devtron-labs 48.0.0

11 of the 28 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

68,695

devtron-in-clustercddevtron-labs

0.10.2

2 of 2 See more

devtron-in-clustercd devtron-labs 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

5,055

devtron-operatordevtron-labs

0.23.3

6 of 11 See more

devtron-operator devtron-labs 0.23.3

6 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

33,180

dgraphdevtron-labs

0.0.20

1 of 1 See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

11,959

jcmhproxy-ingressdevtron-labs

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron-labs 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,379

kube-prometheus-stackdevtron-labs

19.3.0

2 of 6 See more

kube-prometheus-stack devtron-labs 19.3.0

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

8,659

securitydevtron-labs

0.2.2

1 of 1 See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0

Open the chart page →

2,441

zincdevtron-labs

0.1.2

1 of 1 See more

zinc devtron-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0

Open the chart page →

1,514

dicedbdicedb-chart

0.1.0

1 of 1 See more

dicedb dicedb-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prathamkrishna/dicedb :v1	a7298180cd24	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

671

difydify

1.0.0

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

19,399

direktivdirektiv

0.10.0

1 of 6 See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-k8s :0.120.0	1e45d9483faa	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

3,480

graphite-exporterdjjudas21

0.1.9

1 of 1 See more

graphite-exporter djjudas21 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/graphite-exporter :v0.16.0	e54bca6645ea	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

782

hammonddjjudas21

0.3.9

1 of 1 See more

hammond djjudas21 0.3.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,807

photoprismdjjudas21

99.99.99

1 of 1 See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
photoprism/photoprism :240711-ce	fc6fd632ca74	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

17,053

uptime-kumadjjudas21

1.5.18

1 of 1 See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.23.12	bc6f244ecf27	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

4,224

dnation-kubernetes-monitoring-stackdnationcloud

4.0.2

6 of 17 See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

6 of the 17 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bitnamilegacy/thanos :0.37.1-debian-12-r0	5bf82b98c82c	golang.org/x/crypto@v0.28.0	0.35.0
grafana/loki :3.2.0	882e30c20683	golang.org/x/crypto@v0.26.0	0.35.0
grafana/loki-canary :3.2.0	49e03f80d361	golang.org/x/crypto@v0.26.0	0.35.0
prom/memcached-exporter :v0.15.0	bb01ad25e9fc	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	golang.org/x/crypto@v0.1.0	0.35.0

Open the chart page →

21,744

ssl-exporterdnationcloud

1.2.1

1 of 1 See more

ssl-exporter dnationcloud 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

1,632

snmp-exporterdniel

0.0.2

1 of 1 See more

snmp-exporter dniel 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,126

docparserdocparser

0.1.0

1 of 4 See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
conduction/docparser-php :dev	b6f95c8ead7d	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

8,417

furan2dollarshaveclub

0.2.0

1 of 1 See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

3,055

channelsdouban

1.1.2

1 of 1 See more

channels douban 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
everpcpc/channels :latest	b378d137ae8b	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,540

codecovdouban

0.2.4

1 of 8 See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

24,962

corednsdouban

1.39.2

1 of 1 See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
coredns/coredns :1.12.0	40384aa1f5ea	golang.org/x/crypto@v0.29.0	0.35.0

Open the chart page →

1,139

gatekeeperdouban

3.17.1

1 of 3 See more

gatekeeper douban 3.17.1

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.17.1	b7b4d7cfdd52	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,499

k8s-crondouban

0.2.0

1 of 1 See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/crypto@v0.13.0	0.35.0

Open the chart page →

3,668

prometheus-memcached-exporterdouban

0.1.3

1 of 1 See more

prometheus-memcached-exporter douban 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,114

tencentcloud-info-exporterdouban

0.2.2

1 of 1 See more

tencentcloud-info-exporter douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

2,325

drogue-cloud-examplesdrogue-iot

0.7.11

3 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7	0.35.0
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

30,753

drogue-cloud-metricsdrogue-iot

0.7.11

4 of 8 See more

drogue-cloud-metrics drogue-iot 0.7.11

4 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

13,573

drone-kubernetes-secretsdrone

0.1.4

1 of 1 See more

drone-kubernetes-secrets drone 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/crypto@v0.0.0-20180808211826-de0752318171	0.35.0

Open the chart page →

2,760

temporaldtrdnk-helm-charts

0.35.0

7 of 13 See more

temporal dtrdnk-helm-charts 0.35.0

7 of the 13 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/crypto@v0.14.0	0.35.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/crypto@v0.14.0	0.35.0
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/crypto@v0.1.0	0.35.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

20,240

duplicacyduplicacy

0.1.2

1 of 2 See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/crypto@v0.12.0	0.35.0

Open the chart page →

2,420

Container images carrying it

1,951 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
prom/blackbox-exporter :v0.23.0	ca04aa9d9093	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0	1
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/crypto@v0.28.0	0.35.0	1
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	golang.org/x/crypto@v0.32.0	0.35.0	1
prom/graphite-exporter :v0.16.0	e54bca6645ea	golang.org/x/crypto@v0.28.0	0.35.0	1
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0	1
prom/memcached-exporter :v0.15.0	bb01ad25e9fc	golang.org/x/crypto@v0.28.0	0.35.0	1
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/crypto@v0.8.0	0.35.0	1
prom/prometheus :v2.51.2	4f6c47e39a90	golang.org/x/crypto@v0.21.0	0.35.0	1
prom/prometheus :v2.18.1	5880ec936055	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.35.0	1
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/crypto@v0.14.0	0.35.0	1
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.35.0	1
prom/prometheus :v2.16.0	e4ca62c0d62f	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.35.0	1
prom/prometheus :v2.22.2	f7ffebdd428b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
prom/pushgateway :v1.5.1	28fe26c8b8b1	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0	1
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0	1
prom/statsd-exporter :v0.24.0	61d866e93b56	golang.org/x/crypto@v0.8.0	0.35.0	1
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	golang.org/x/crypto@v0.17.0	0.35.0	1
pschiffe/pdns-mysql :alpine	d196c796cafb	golang.org/x/crypto@v0.17.0	0.35.0	1
pschiffe/pdns-pgsql :5.0	a227d41bc665	golang.org/x/crypto@v0.17.0	0.35.0	1
qmcgaw/gluetun :v3.40.0	2b42bfa04675	golang.org/x/crypto@v0.29.0	0.35.0	1
qonstrukt/php :8.4-v8-apache	089af7925aa1	golang.org/x/crypto@v0.0.0-20200403201458-baeed622b8d8	0.35.0	1
quiq/docker-registry-ui :0.9.4	91281da47036	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
rabbitmqoperator/cluster-operator :1.8.3	231e7ce0e905	golang.org/x/crypto@v0.0.0-20210506145944-38f3c27a63bf	0.35.0	1
rancher/hardened-calico :v3.13.3	6d2cd61a338b	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.35.0	1
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.35.0	1
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.35.0	1
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
rancher/k3s :v1.28.2-k3s1	8c2599ecfca8	golang.org/x/crypto@v0.1.0	0.35.0	1
rancher/k3s :v1.25.3-k3s1	eaa270df79cc	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1
rancher/local-path-provisioner :v0.0.30	9b9148811700	golang.org/x/crypto@v0.25.0	0.35.0	1
rancher/local-path-provisioner :v0.0.20	d5999b20a1b1	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0	1
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0	1
rancher/mirrored-cloud-provider-vsphere :v1.31.1	febfd0517838	golang.org/x/crypto@v0.24.0	0.35.0	1
rclone/rclone :1.63.0	08e1af3c8814	golang.org/x/crypto@v0.7.0	0.35.0	1
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
rclone/rclone :1.56.0	f2fc45c8bc57	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.35.0	1
reaper99/recipya :v1.2.2	7f7ec3aeb88c	golang.org/x/crypto@v0.25.0	0.35.0	1
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/crypto@v0.25.0	0.35.0	1
reportportal/migrations :5.7.0	da5d8e1395fe	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.35.0	1
reportportal/service-index :5.0.11	2b27a2d7a87d	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.35.0	1
restic/restic :0.15.2	579e4e6a4931	golang.org/x/crypto@v0.7.0	0.35.0	1
rezachalak/bzen-mongo :1.0.0	34f694325191	golang.org/x/crypto@v0.12.0	0.35.0	1
robotshop/rs-mongodb :latest	119b545823cd	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.35.0	1
robustadev/kubewatch :v2.9.0	0457a51e36e8	golang.org/x/crypto@v0.24.0	0.35.0	1
rokk42/seashells :1.0-k8s	dfc850a5db9e	golang.org/x/crypto@v0.23.0	0.35.0	1
rookout/k8s-operator :latest	0d083f3ef1a7	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
rss3/op-batcher :d2c5ced00901227473fc196fda838191f0cb4e02	e8adc09d9c07	golang.org/x/crypto@v0.16.0	0.35.0	1