CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,684; of 17,787 indexed, latest versions
Container images: 1,948; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,684 of 17,787 indexed charts deploy, on 1,948 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,948
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,684 by stars

Chart

Latest

Affected images

Radar Score

vclustermain

0.17.0

5 of 10 See more

vcluster main 0.17.0

5 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/crypto@v0.4.0	0.35.0
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/crypto@v0.8.0	0.35.0
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

11,556

headplanenbcloud

0.1.2

1 of 4 See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
headscale/headscale :0.25.1	a7a8ae9616bb	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

7,968

netris-operatornetrisai

3.0.2

1 of 2 See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,588

open5gsopen5gs

2.3.4

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gradiant/open5gs-dbctl :0.10.3	332031245fce	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

9,300

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

8,767

prometheus-consul-exporterprometheus-community

1.1.1

1 of 1 See more

prometheus-consul-exporter prometheus-community 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

782

prometheus-json-exporterprometheus-community

0.20.1

1 of 1 See more

prometheus-json-exporter prometheus-community 0.20.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/json-exporter :v0.7.0	3a777171d39a	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

725

prometheus-smartctl-exporterprometheus-community

0.17.1

1 of 1 See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

1,064

prometheus-statsd-exporterprometheus-community

1.0.0

1 of 1 See more

prometheus-statsd-exporter prometheus-community 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

782

rke2-multusrke2-charts

3.7.1-build2021041601

1 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

4,519

popeyeself-hosters-by-night

0.6.1

1 of 1 See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

1,196

uffizzi-appuffizzi-app

1.3.0

3 of 14 See more

uffizzi-app uffizzi-app 1.3.0

3 of the 14 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

19,363

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

13,567

ansible-semaphoreansible-semaphore

0.1.0

1 of 1 See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

4,019

aperture-controlleraperture

2.34.0

2 of 5 See more

aperture-controller aperture 2.34.0

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
fluxninja/aperture-operator :2.34.0	356d7aa86632	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

4,663

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

3,300

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

9,052

prometheusavesha

19.3.0

3 of 4 See more

prometheus avesha 19.3.0

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/crypto@v0.1.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0

Open the chart page →

5,484

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,250

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/crypto@v0.6.0	0.35.0

Open the chart page →

1,917

yatai-deploymentbentoml

1.1.21

1 of 2 See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,160

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	golang.org/x/crypto@v0.12.0	0.35.0

Open the chart page →

8,007

caddy-ingress-controllercaddy-ingress

1.3.0

1 of 1 See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,884

cert-managerchoerodon

1.8.2

3 of 4 See more

cert-manager choerodon 1.8.2

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0

Open the chart page →

7,775

popeyechristianhuth

2.4.3

1 of 1 See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

1,196

clowardenclowarden

0.2.3

1 of 4 See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

5,620

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

11 of 21 See more

coder-observability coder-observability 0.7.3

11 of the 21 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/agent :v0.40.3	f6cbec9409be	golang.org/x/crypto@v0.18.0	0.35.0
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/crypto@v0.21.0	0.35.0
grafana/loki-canary :3.1.0	39baf6d67f85	golang.org/x/crypto@v0.21.0	0.35.0
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/crypto@v0.23.0	0.35.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	golang.org/x/crypto@v0.24.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.35.0

Open the chart page →

24,698

convertigoconvertigo

8.4.3

2 of 5 See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	golang.org/x/crypto@v0.14.0	0.35.0
timescale/timescaledb :latest-pg16	289d55704b1b	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

17,475

cosmocosmo-platform

0.20.0

3 of 10 See more

cosmo cosmo-platform 0.20.0

3 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	golang.org/x/crypto@v0.23.0	0.35.0
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	golang.org/x/crypto@v0.31.0	0.35.0
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

27,984

dapr-dashboarddapr

0.15.0

1 of 1 See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
daprio/dashboard :0.15.0	4be696707bd1	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

1,301

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

3,451

kube-benchdeliveryhero

0.1.17

1 of 1 See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,623

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

2,537

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0

Open the chart page →

2,271

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

1 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

14,545

openshift-secured-redisInsighteximiait

0.9.2

1 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

13,874

ascii-moviegabe565

0.16.4

1 of 1 See more

ascii-movie gabe565 0.16.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/ascii-movie :1.9.6	27f85bb98da3	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

986

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.35.0

Open the chart page →

3,030

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.35.0

Open the chart page →

7,579

multusgeek-cookbook

3.5.2

1 of 3 See more

multus geek-cookbook 3.5.2

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

4,908

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

10,202

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,371

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

2,610

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

2,234

gitvotegitvote

1.5.0

1 of 6 See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

5,627

monitoring-stackhaukitech

0.1.11

2 of 3 See more

monitoring-stack haukitech 0.1.11

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

2,164

home-assistanthome-assistant

0.5.10

1 of 3 See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

2,338

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

2,622

Container images carrying it

1,948 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
rss3/op-proposer :d2c5ced00901227473fc196fda838191f0cb4e02	96672897ba9e	golang.org/x/crypto@v0.16.0	0.35.0	1
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	golang.org/x/crypto@v0.17.0	0.35.0	1
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	golang.org/x/crypto@v0.14.0	0.35.0	1
runatlantis/atlantis :v0.16.1	45fbaf7e207c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
samarthya/spinnaker :v1.0	ef06d81036af	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
sarwansharma/minio :v3	59d1da9385d1	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0	1
sealio/hermitcrab :v0.1.4	a326a2f03660	golang.org/x/crypto@v0.22.0	0.35.0	1
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	golang.org/x/crypto@v0.1.0	0.35.0	1
semaphoreui/semaphore :v2.9.64	5b50bc11833f	golang.org/x/crypto@v0.20.0	0.35.0	1
semitechnologies/weaviate :1.19.1	7a00d226f063	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0	1
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	golang.org/x/crypto@v0.1.0	0.35.0	1
signoz/alertmanager :0.5.0	7bc7de2e33c2	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
sikalabs/slu :v0.72.0	7bd267f30247	golang.org/x/crypto@v0.16.0	0.35.0	1
sikalabs/slu :v0.34.0	fdc0c6711add	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.35.0	1
simonschneider/traefik-jwt-decode :latest	d674ac370f80	golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620	0.35.0	1
simpleidserver/faasprometheus :0.0.4	25e378d57d78	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	golang.org/x/crypto@v0.21.0	0.35.0	1
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	golang.org/x/crypto@v0.21.0	0.35.0	1
sky5367/locust-plugins-timescale :latest	d3150f201471	golang.org/x/crypto@v0.20.0	0.35.0	1
skylenet/ethereum-genesis-generator :latest	210353ce7c89	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0	1
slamdev/config-connector-templater :0.0.3	a234541c9fa8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0	1
slamdev/gke-preemptible-notifier :v0.0.3	d5d6430108a3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
smailkoz/torrserver :1.0.111	7b52d15de8f0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0	1
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
softonic/pod-defaulter :0.1.0	72017aed5902	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.35.0	1
softonic/rate-limit-operator :0.1.1	910f6de37763	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0	1
sorintlab/stolon :v0.16.0-pg12	36b45c0f97fc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0	1
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
sstarcher/ecr-cleaner :0.1.1	2d43c390cb19	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.35.0	1
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.35.0	1
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.35.0	1
stakater/konfigurator :v0.1.39	3409565b1ef5	golang.org/x/crypto@v0.17.0	0.35.0	1
stakater/tronador :v0.0.1	37ce9acf2722	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
stakater/whitelister :v0.0.16	39107924063e	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.35.0	1
stashapp/stash :latest	24dbd7607174	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
statcan/ingress-istio-controller :1.4.0	d7d6bd180c46	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
statcan/kubernetes-sidecar-terminator :2.0.2	bc361ee7748f	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0	1
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.35.0	1
su541/cert-manager-desec-webhook :latest	371ee33f83c1	golang.org/x/crypto@v0.5.0	0.35.0	1