CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 59th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,683; of 17,792 indexed, latest versions
Container images: 1,948; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,683 of 17,792 indexed charts deploy, on 1,948 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,948
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,683 by stars

Chart

Latest

Affected images

Radar Score

exporteropenshift

1.0.47

2 of 3 See more

exporter openshift 1.0.47

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	golang.org/x/crypto@v0.14.0	0.35.0
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

13,041

fsmopenshift

0.1.8-ubi.6

3 of 6 See more

fsm openshift 0.1.8-ubi.6

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

16,563

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

4,170

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

5,863

opscruiseopenshift

0.35.100

3 of 11 See more

opscruise openshift 0.35.100

3 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0

Open the chart page →

8,224

osm-edgeopenshift

1.2.1-ubi8

3 of 7 See more

osm-edge openshift 1.2.1-ubi8

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/crypto@v0.5.0	0.35.0
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/crypto@v0.5.0	0.35.0
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

19,471

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.35.0

Open the chart page →

8,643

openvscode-serveropenvscode-server-helm

2.7.37

1 of 2 See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/crypto@v0.2.0	0.35.0

Open the chart page →

4,321

gitlab-proxyopslevel

0.0.8

1 of 1 See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/caddy :2.6	60fb54d36b4b	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

1,879

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

1,747

opslevelopslevel

2025.1.22

2 of 10 See more

opslevel opslevel 2025.1.22

2 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/crypto@v0.6.0	0.35.0
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

5,658

agentoptimizely-agent

1.4.0

1 of 1 See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,220

orderregistratiecomponentorderregistratiecomponent

1.0.0

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,501

prometheusosc

0.26.2

2 of 12 See more

prometheus osc 0.26.2

2 of the 12 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/crypto@v0.8.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0

Open the chart page →

3,381

grrosdfir-infrastructure

1.0.3

1 of 5 See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

11,020

osdfir-infrastructureosdfir-infrastructure

2.15.0

4 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	golang.org/x/crypto@v0.17.0	0.35.0
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.35.0
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/crypto@v0.22.0	0.35.0
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

72,857

yetiosdfir-infrastructure

1.0.5

1 of 4 See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

6,707

osm-edgeosm-edge

1.3.9

3 of 7 See more

osm-edge osm-edge 1.3.9

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
flomesh/osm-edge-bootstrap :1.3.9	b188e128cbfe	golang.org/x/crypto@v0.5.0	0.35.0
flomesh/osm-edge-controller :1.3.9	add7a4da4622	golang.org/x/crypto@v0.5.0	0.35.0
flomesh/osm-edge-injector :1.3.9	47287e3ad324	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

5,610

logging-operatorot-container-kit

0.4.0

1 of 1 See more

logging-operator ot-container-kit 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/opstree/logging-operator :v0.4.0	fd8bb57ef3cf	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0

Open the chart page →

1,802

lokiot-container-kit

1.0.1

3 of 5 See more

loki ot-container-kit 1.0.1

3 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/crypto@v0.21.0	0.35.0
grafana/promtail :3.0.0	d3de3da9431c	golang.org/x/crypto@v0.21.0	0.35.0
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

4,845

mongodb-operatorot-container-kit

0.3.1

1 of 1 See more

mongodb-operator ot-container-kit 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/opstree/mongodb-operator :v0.3.0	879b9bead838	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

1,873

pgaot-container-kit

1.0.3

3 of 6 See more

pga ot-container-kit 1.0.3

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.0	079600c9517b	golang.org/x/crypto@v0.24.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.35.0

Open the chart page →

5,143

vmot-container-kit

0.0.3

3 of 7 See more

vm ot-container-kit 0.0.3

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/crypto@v0.24.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

5,418

arpap2p-avs

0.1.3

1 of 2 See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/arpa-network/node-client :latest	657a2c9f6e6d	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,987

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/automata-network/multi-prover-avs/operator :v0.6.0	752f1aa02438	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

3,679

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

3,335

eigendap2p-avs

0.1.1

2 of 3 See more

eigenda p2p-avs 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	golang.org/x/crypto@v0.23.0	0.35.0
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

2,334

predicatep2p-avs

0.1.4

1 of 1 See more

predicate p2p-avs 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/predicatelabs/operator :v1.0.5	b62113fe1b27	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

893

parcaparca

4.19.0

2 of 2 See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	golang.org/x/crypto@v0.9.0	0.35.0
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

3,364

parcaparca-chart

0.1.0

1 of 1 See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	golang.org/x/crypto@v0.9.0	0.35.0

Open the chart page →

1,985

istio-operatorparticuleio

1.7.0

1 of 1 See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gcr.io/istio-testing/operator :latest	8d4576f7b98f	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

4,179

scaleway-webhookparticuleio

0.0.1

1 of 1 See more

scaleway-webhook particuleio 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,354

hammondpascaliske

2.0.0

1 of 2 See more

hammond pascaliske 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,807

home-assistantpascaliske

0.1.1

1 of 1 See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

4,807

vikunjapascaliske

5.1.0

1 of 1 See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

1,342

pax-prometheuspaxtecnologia

0.7.1

1 of 8 See more

pax-prometheus paxtecnologia 0.7.1

1 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,761

archive-analysispcp-helm-charts

1.0.1

1 of 1 See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/performancecopilot/archive-analysis :latest	8de11e2363fc	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,333

permission-managerpermission-manager

1.0.0-seal

1 of 1 See more

permission-manager permission-manager 1.0.0-seal

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

2,267

pet-battle-infrapetbattle

1.0.32

1 of 2 See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

15,474

pet-battle-tournamentpetbattle

1.0.40

1 of 3 See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

15,474

container-agentphntom

100.0.1

1 of 1 See more

container-agent phntom 100.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
circleci/container-agent :3	4d8d0ae5efc3	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,974

external-dns-host-networkphntom

0.0.12

1 of 1 See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/external-dns-host-network :0.0.12	3adadbac8443	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

4,644

goalertphntom

0.0.29

1 of 1 See more

goalert phntom 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/goalert :0.0.29	8ca4df55499b	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

1,050

kochiphntom

1.1.4

1 of 1 See more

kochi phntom 1.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,964

loki-stackphntom

2.10.2

2 of 2 See more

loki-stack phntom 2.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :2.4.2	b3af8ead67d7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0
grafana/promtail :2.4.2	626900031c4e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0

Open the chart page →

5,724

mindavphntom

0.1.6

1 of 2 See more

mindav phntom 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/mindav :0.1.7-kix3	5695f546abbb	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

4,159

npre-essentialsphntom

0.1.60

8 of 22 See more

npre-essentials phntom 0.1.60

8 of the 22 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :2.6.1	1ee60f980950	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0
grafana/promtail :2.7.0	c16c710f7333	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/crypto@v0.0.0-20220314234659-1baeb1ce4c0b	0.35.0
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0

Open the chart page →

26,888

blockmeta-servicepinax

0.0.3

1 of 1 See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,688

firehose-corepinax

0.1.1

1 of 2 See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0

Open the chart page →

3,544

firehose-ethereumpinax

0.3.2

1 of 2 See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0

Open the chart page →

7,193

Container images carrying it

1,948 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	golang.org/x/crypto@v0.14.0	0.35.0	1
runatlantis/atlantis :v0.16.1	45fbaf7e207c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
samarthya/spinnaker :v1.0	ef06d81036af	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
sarwansharma/minio :v3	59d1da9385d1	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0	1
sealio/hermitcrab :v0.1.4	a326a2f03660	golang.org/x/crypto@v0.22.0	0.35.0	1
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	golang.org/x/crypto@v0.1.0	0.35.0	1
semaphoreui/semaphore :v2.9.64	5b50bc11833f	golang.org/x/crypto@v0.20.0	0.35.0	1
semitechnologies/weaviate :1.19.1	7a00d226f063	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0	1
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	golang.org/x/crypto@v0.1.0	0.35.0	1
signoz/alertmanager :0.5.0	7bc7de2e33c2	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
sikalabs/slu :v0.72.0	7bd267f30247	golang.org/x/crypto@v0.16.0	0.35.0	1
sikalabs/slu :v0.34.0	fdc0c6711add	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.35.0	1
simonschneider/traefik-jwt-decode :latest	d674ac370f80	golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620	0.35.0	1
simpleidserver/faasprometheus :0.0.4	25e378d57d78	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	golang.org/x/crypto@v0.21.0	0.35.0	1
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	golang.org/x/crypto@v0.21.0	0.35.0	1
sky5367/locust-plugins-timescale :latest	d3150f201471	golang.org/x/crypto@v0.20.0	0.35.0	1
skylenet/ethereum-genesis-generator :latest	210353ce7c89	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0	1
slamdev/config-connector-templater :0.0.3	a234541c9fa8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0	1
slamdev/gke-preemptible-notifier :v0.0.3	d5d6430108a3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
smailkoz/torrserver :1.0.111	7b52d15de8f0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0	1
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
softonic/pod-defaulter :0.1.0	72017aed5902	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.35.0	1
softonic/rate-limit-operator :0.1.1	910f6de37763	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0	1
sorintlab/stolon :v0.16.0-pg12	36b45c0f97fc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0	1
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
sstarcher/ecr-cleaner :0.1.1	2d43c390cb19	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.35.0	1
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.35.0	1
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.35.0	1
stakater/konfigurator :v0.1.39	3409565b1ef5	golang.org/x/crypto@v0.17.0	0.35.0	1
stakater/tronador :v0.0.1	37ce9acf2722	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
stakater/whitelister :v0.0.16	39107924063e	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.35.0	1
stashapp/stash :latest	24dbd7607174	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
statcan/ingress-istio-controller :1.4.0	d7d6bd180c46	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
statcan/kubernetes-sidecar-terminator :2.0.2	bc361ee7748f	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0	1
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.35.0	1
su541/cert-manager-desec-webhook :latest	371ee33f83c1	golang.org/x/crypto@v0.5.0	0.35.0	1
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.35.0	1
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	golang.org/x/crypto@v0.11.0	0.35.0	1