CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 59th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,682; of 17,797 indexed, latest versions
Container images: 1,947; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,682 of 17,797 indexed charts deploy, on 1,947 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,947
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,682 by stars

Chart

Latest

Affected images

Radar Score

fsmopenshift

0.1.8-ubi.6

3 of 6 See more

fsm openshift 0.1.8-ubi.6

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

16,563

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

4,170

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

5,863

opscruiseopenshift

0.35.100

3 of 11 See more

opscruise openshift 0.35.100

3 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0

Open the chart page →

8,224

osm-edgeopenshift

1.2.1-ubi8

3 of 7 See more

osm-edge openshift 1.2.1-ubi8

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/crypto@v0.5.0	0.35.0
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/crypto@v0.5.0	0.35.0
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

19,471

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.35.0

Open the chart page →

8,643

openvscode-serveropenvscode-server-helm

2.7.38

1 See more

openvscode-server openvscode-server-helm 2.7.38

1 container image this version deploys carries CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/crypto@v0.2.0	0.35.0

Open the chart page →

—

gitlab-proxyopslevel

0.0.8

1 of 1 See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/caddy :2.6	60fb54d36b4b	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

1,879

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

1,747

opslevelopslevel

2025.1.22

2 of 10 See more

opslevel opslevel 2025.1.22

2 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/crypto@v0.6.0	0.35.0
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

5,658

agentoptimizely-agent

1.4.0

1 of 1 See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,220

orderregistratiecomponentorderregistratiecomponent

1.0.0

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,501

prometheusosc

0.26.2

2 of 12 See more

prometheus osc 0.26.2

2 of the 12 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/crypto@v0.8.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0

Open the chart page →

3,381

grrosdfir-infrastructure

1.0.3

1 of 5 See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

11,020

osdfir-infrastructureosdfir-infrastructure

2.15.0

4 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	golang.org/x/crypto@v0.17.0	0.35.0
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.35.0
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/crypto@v0.22.0	0.35.0
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

72,857

yetiosdfir-infrastructure

1.0.5

1 of 4 See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

6,707

osm-edgeosm-edge

1.3.9

3 of 7 See more

osm-edge osm-edge 1.3.9

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
flomesh/osm-edge-bootstrap :1.3.9	b188e128cbfe	golang.org/x/crypto@v0.5.0	0.35.0
flomesh/osm-edge-controller :1.3.9	add7a4da4622	golang.org/x/crypto@v0.5.0	0.35.0
flomesh/osm-edge-injector :1.3.9	47287e3ad324	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

5,610

logging-operatorot-container-kit

0.4.0

1 of 1 See more

logging-operator ot-container-kit 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/opstree/logging-operator :v0.4.0	fd8bb57ef3cf	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0

Open the chart page →

1,802

lokiot-container-kit

1.0.1

3 of 5 See more

loki ot-container-kit 1.0.1

3 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/crypto@v0.21.0	0.35.0
grafana/promtail :3.0.0	d3de3da9431c	golang.org/x/crypto@v0.21.0	0.35.0
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

4,845

mongodb-operatorot-container-kit

0.3.1

1 of 1 See more

mongodb-operator ot-container-kit 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/opstree/mongodb-operator :v0.3.0	879b9bead838	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

1,873

pgaot-container-kit

1.0.3

3 of 6 See more

pga ot-container-kit 1.0.3

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.0	079600c9517b	golang.org/x/crypto@v0.24.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.35.0

Open the chart page →

5,143

vmot-container-kit

0.0.3

3 of 7 See more

vm ot-container-kit 0.0.3

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/crypto@v0.24.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

5,418

arpap2p-avs

0.1.3

1 of 2 See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/arpa-network/node-client :latest	657a2c9f6e6d	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,987

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/automata-network/multi-prover-avs/operator :v0.6.0	752f1aa02438	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

3,679

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

3,335

eigendap2p-avs

0.1.1

2 of 3 See more

eigenda p2p-avs 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	golang.org/x/crypto@v0.23.0	0.35.0
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

2,334

predicatep2p-avs

0.1.4

1 of 1 See more

predicate p2p-avs 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/predicatelabs/operator :v1.0.5	b62113fe1b27	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

893

parcaparca

4.19.0

2 of 2 See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	golang.org/x/crypto@v0.9.0	0.35.0
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

3,364

parcaparca-chart

0.1.0

1 of 1 See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	golang.org/x/crypto@v0.9.0	0.35.0

Open the chart page →

1,985

istio-operatorparticuleio

1.7.0

1 of 1 See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gcr.io/istio-testing/operator :latest	8d4576f7b98f	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

4,179

scaleway-webhookparticuleio

0.0.1

1 of 1 See more

scaleway-webhook particuleio 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,354

hammondpascaliske

2.0.0

1 of 2 See more

hammond pascaliske 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,807

home-assistantpascaliske

0.1.1

1 of 1 See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

4,807

vikunjapascaliske

5.1.0

1 of 1 See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

1,342

pax-prometheuspaxtecnologia

0.7.1

1 of 8 See more

pax-prometheus paxtecnologia 0.7.1

1 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,761

archive-analysispcp-helm-charts

1.0.1

1 of 1 See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/performancecopilot/archive-analysis :latest	8de11e2363fc	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,333

permission-managerpermission-manager

1.0.0-seal

1 of 1 See more

permission-manager permission-manager 1.0.0-seal

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

2,267

pet-battle-infrapetbattle

1.0.32

1 of 2 See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

15,474

pet-battle-tournamentpetbattle

1.0.40

1 of 3 See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

15,474

container-agentphntom

100.0.1

1 of 1 See more

container-agent phntom 100.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
circleci/container-agent :3	4d8d0ae5efc3	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,974

external-dns-host-networkphntom

0.0.12

1 of 1 See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/external-dns-host-network :0.0.12	3adadbac8443	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

4,644

goalertphntom

0.0.29

1 of 1 See more

goalert phntom 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/goalert :0.0.29	8ca4df55499b	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

1,050

kochiphntom

1.1.4

1 of 1 See more

kochi phntom 1.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,964

loki-stackphntom

2.10.2

2 of 2 See more

loki-stack phntom 2.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :2.4.2	b3af8ead67d7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0
grafana/promtail :2.4.2	626900031c4e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0

Open the chart page →

5,724

mindavphntom

0.1.6

1 of 2 See more

mindav phntom 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/mindav :0.1.7-kix3	5695f546abbb	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

4,159

npre-essentialsphntom

0.1.60

8 of 22 See more

npre-essentials phntom 0.1.60

8 of the 22 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :2.6.1	1ee60f980950	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0
grafana/promtail :2.7.0	c16c710f7333	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/crypto@v0.0.0-20220314234659-1baeb1ce4c0b	0.35.0
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0

Open the chart page →

26,888

blockmeta-servicepinax

0.0.3

1 of 1 See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,688

firehose-corepinax

0.1.1

1 of 2 See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0

Open the chart page →

3,544

firehose-ethereumpinax

0.3.2

1 of 2 See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0

Open the chart page →

7,193

substreams-sink-kvpinax

0.0.4

1 of 1 See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

6,777

Container images carrying it

1,947 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
supabase/gotrue :v2.91.0	7174d551d720	golang.org/x/crypto@v0.9.0	0.35.0	1
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/crypto@v0.26.0	0.35.0	1
superorbital/cludod :0.0.2-alpha	d59732f61d6e	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0	1
surajwarbhe/grafana :v1	85248611e9f1	golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71	0.35.0	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	golang.org/x/crypto@v0.4.0	0.35.0	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	golang.org/x/crypto@v0.7.0	0.35.0	1
svtechnmaa/svtech_syncthing :v1.0.4	1a75d88031fe	golang.org/x/crypto@v0.16.0	0.35.0	1
syncthing/syncthing :1.18.2	966433161272	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0	1
tailscale/k8s-operator :v1.70.0	8edd06cf5bac	golang.org/x/crypto@v0.24.0	0.35.0	1
tailwarden/komiser :3.1.10	3f68c8ae7993	golang.org/x/crypto@v0.17.0	0.35.0	1
tdengine/tdengine :3.0.2.2	4140a4021ddb	golang.org/x/crypto@v0.4.0	0.35.0	1
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/crypto@v0.14.0	0.35.0	1
temporalio/admin-tools :1.26.2	37e2e33dbd7b	golang.org/x/crypto@v0.29.0	0.35.0	1
temporalio/admin-tools :1.22.0	836af062af30	golang.org/x/crypto@v0.10.0	0.35.0	1
temporalio/admin-tools :1.25.0-tctl-1.18.1-cli-1.0.0	cda4901bab53	golang.org/x/crypto@v0.25.0	0.35.0	1
temporalio/auto-setup :1.29.1	5b3502a3b685	golang.org/x/crypto@v0.32.0	0.35.0	1
temporalio/auto-setup :1.27.2	b44cbfeb43db	golang.org/x/crypto@v0.32.0	0.35.0	1
temporalio/server :1.26.2	1e2626efcbc1	golang.org/x/crypto@v0.14.0	0.35.0	1
temporalio/server :1.25.0	8a5798191dea	golang.org/x/crypto@v0.25.0	0.35.0	1
temporalio/server :1.29.1	c1e3326b2ce1	golang.org/x/crypto@v0.32.0	0.35.0	1
temporalio/server :1.22.0	ddeebf8bad8f	golang.org/x/crypto@v0.12.0	0.35.0	1
temporalio/server :1.15.1	e26758f5a1bf	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
temporalio/ui :2.44.0	0b36e00aad30	golang.org/x/crypto@v0.32.0	0.35.0	1
temporalio/ui :2.30.2	5c2a3645d09c	golang.org/x/crypto@v0.14.0	0.35.0	1
temporalio/ui :2.33.0	5c586a3c8ec5	golang.org/x/crypto@v0.31.0	0.35.0	1
temporalio/ui :2.39.0	b768f87f18b5	golang.org/x/crypto@v0.32.0	0.35.0	1
testinprod/op-erigon :latest	0a125bd77a2d	golang.org/x/crypto@v0.31.0	0.35.0	1
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0	1
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.35.0	1
thecampagnards/trafficlight-api :main	7dca9d973837	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0	1
thesisrobot/lnd :v0.16.4-beta-c	287129953689	golang.org/x/crypto@v0.7.0	0.35.0	1
thesisrobot/lnd :v0.14.1-beta	d94c8dbf6dac	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
thetorproject/snowflake-proxy :v2.11.0	1ddc5069d354	golang.org/x/crypto@v0.33.0	0.35.0	1
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/crypto@v0.1.0	0.35.0	1
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0	1
thomseddon/traefik-forward-auth :latest	b364aa6a4117	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0	1
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0	1
tile38/tile38 :1.33.4	afb7e82f9485	golang.org/x/crypto@v0.21.0	0.35.0	1
timescale/timescaledb :latest-pg16	289d55704b1b	golang.org/x/crypto@v0.32.0	0.35.0	1
timescale/timescaledb :2.30.0-pg17	3113d12b7839	golang.org/x/crypto@v0.32.0	0.35.0	1
timescale/timescaledb :latest-pg12	645fd9e92d76	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0	1
timescale/timescaledb :latest-pg17	bc8527e62f70	golang.org/x/crypto@v0.32.0	0.35.0	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0	1
timescale/timescaledb-ha :pg16	d7db8f1085a3	golang.org/x/crypto@v0.22.0	0.35.0	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	golang.org/x/crypto@v0.24.0	0.35.0	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7	0.35.0	1
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7	0.35.0	1
timonwong/prometheus-webhook-dingtalk :v1.4.0	a0fcc028bd8d	golang.org/x/crypto@v0.0.0-20191205180655-e7c4368fe9dd	0.35.0	1
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/crypto@v0.0.0-20200109152110-61a87790db17	0.35.0	1