CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,665; of 17,781 indexed, latest versions
Container images: 1,928; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,665 of 17,781 indexed charts deploy, on 1,928 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,928
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,665 by stars

Chart

Latest

Affected images

Radar Score

prometheusazureorkestra

14.8.0

3 of 6 See more

prometheus azureorkestra 14.8.0

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

9,661

krakendbaboulinet

0.1.34

1 of 1 See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :2.7.0	9219cda867e2	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

1,191

ragflowbaboulinet

0.1.1

1 of 5 See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

5,823

prometheus-blackbox-exporterbackbox-exporter

7.8.0

1 of 1 See more

prometheus-blackbox-exporter backbox-exporter 7.8.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.23.0	ca04aa9d9093	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0

Open the chart page →

1,494

balance-registrationbalance-registration

0.1.0

1 of 4 See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
conduction/balance-registration-php :dev	c36094a41369	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

8,408

berichtserviceberichtservice

1.0.0

1 of 3 See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/berichtservice-php :latest	ee6a21e66ff0	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,342

trident-operatorberyju-org

21.10.0

1 of 1 See more

trident-operator beryju-org 21.10.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
netapp/trident-operator :21.10.0	49cfe552d9c2	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0

Open the chart page →

2,072

mx-nodebicarus-labs

0.1.0

1 of 1 See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0

Open the chart page →

7,956

mx-notifierbicarus-labs

1.1.9

1 of 1 See more

mx-notifier bicarus-labs 1.1.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bicarus/mx-notifier :1.1.8	bed688d16762	golang.org/x/crypto@v0.3.0	0.35.0

Open the chart page →

3,722

wg-access-serverbicarus-labs

0.9.9

1 of 1 See more

wg-access-server bicarus-labs 0.9.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bicarus/wg-access-server :v0.8.2	06cab48e9334	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0

Open the chart page →

2,748

bitpokebitpoke

1.8.19

1 of 1 See more

bitpoke bitpoke 1.8.19

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gcr.io/press-labs-public/dashboard :1.8.19	b88f88070fb0	golang.org/x/crypto@v0.1.0	0.35.0

Open the chart page →

2,312

stackbitpoke

0.12.4

1 of 6 See more

stack bitpoke 0.12.4

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0

Open the chart page →

9,897

baserowblackbird-cloud

1.0.17

1 of 6 See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

10,145

prometheus-domain-exporterblackbox-domain-exporter

1.0.0

1 of 1 See more

prometheus-domain-exporter blackbox-domain-exporter 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bulich/domain-exporter :latest	6d0b780f7c7b	golang.org/x/crypto@v0.9.0	0.35.0

Open the chart page →

1,408

firehoseblip-firehose

0.0.18

3 of 11 See more

firehose blip-firehose 0.0.18

3 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
blipai/deckard :0.0.28	737d5d19a312	golang.org/x/crypto@v0.17.0	0.35.0
hashicorp/vault :1.15.2	6b4e5dadf082	golang.org/x/crypto@v0.14.0	0.35.0
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

13,459

bnkrbnkr

1.0.5

1 of 2 See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
engrmth/bnkr :2.1.0	6d8464e6f0e8	golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5	0.35.0

Open the chart page →

15,253

grafanabook-k8sinfra-v2

8.8.2

1 of 1 See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

1,800

jaegerbook-k8sinfra-v2

3.4.0

2 of 5 See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.35.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

19,229

jenkinsbook-k8sinfra-v2

5.1.12

1 of 2 See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.440.3-jdk17	de4fea113221	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

8,323

kube-prometheus-stackbook-k8sinfra-v2

65.5.1

3 of 6 See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.2.2-security-01	464eac539793	golang.org/x/crypto@v0.26.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

6,036

nfs-subdir-external-provisionerbook-k8sinfra-v2

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner book-k8sinfra-v2 4.0.18

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.0	3ce0fdba4d8e	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

2,743

prometheusbook-k8sinfra-v2

26.0.1

6 of 6 See more

prometheus book-k8sinfra-v2 26.0.1

6 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/crypto@v0.26.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

5,304

pyroscopebook-k8sinfra-v2

1.10.0

2 of 3 See more

pyroscope book-k8sinfra-v2 1.10.0

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.1.1	c3dac4e26471	golang.org/x/crypto@v0.22.0	0.35.0
grafana/pyroscope :1.10.0	319bf32ae06b	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

3,244

tempobook-k8sinfra-v2

1.10.3

1 of 1 See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,859

bitmagnetbrandan-schmitz-helm-charts

1.0.6

1 of 2 See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

1,720

butane-operatorbutane-operator

0.3.0

1 of 2 See more

butane-operator butane-operator 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/crypto@v0.19.0	0.35.0

Open the chart page →

1,396

butlercibutlerci

0.1.0

1 of 1 See more

butlerci butlerci 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
etejeda/butlerci :0.1.0	737d58183abc	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,374

accelerationbuttahtoast

0.1.0

1 of 1 See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
goharbor/harbor-acceld :0.2.13	451103a6c8d8	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,400

kubermatic-operatorbuttahtoast

2.24.5

1 of 1 See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

2,770

etcdcagriekin

0.1.5

1 of 1 See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/crypto@v0.21.0	0.35.0

Open the chart page →

892

kafkacagriekin

0.2.0

1 of 2 See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

2,398

ct-singlecalltelemetry

0.8.4

3 of 7 See more

ct-single calltelemetry 0.8.4

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/nats :2.8.4-alpine	988010f74b61	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.35.0
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0

Open the chart page →

10,629

stablecalltelemetry

0.7.1

3 of 9 See more

stable calltelemetry 0.7.1

3 of the 9 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/nats :2.8.4-alpine	988010f74b61	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.35.0
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0

Open the chart page →

7,702

stable-hacalltelemetry

0.11.4

2 of 7 See more

stable-ha calltelemetry 0.11.4

2 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/nats :2.10.12-alpine	bca70839d953	golang.org/x/crypto@v0.21.0	0.35.0
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

4,705

bucket-clonercamptocamp3

1.0.4

1 of 1 See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.35.0

Open the chart page →

4,518

getconfigcamptocamp3

0.1.1

1 of 1 See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0

Open the chart page →

2,195

ssl-exportercamptocamp3

0.1.0

1 of 1 See more

ssl-exporter camptocamp3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

1,632

terraboardcamptocamp3

2.4.0

1 of 1 See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/terraboard :v2.3.0	df53e2c8998c	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,330

caninecanine

0.1.10

3 of 7 See more

canine canine 0.1.10

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/caninehq/canine :latest	a058034ca006	golang.org/x/crypto@v0.31.0	0.35.0
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	golang.org/x/crypto@v0.24.0	0.35.0
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

14,130

cert-managercanine

1.15.3

2 of 4 See more

cert-manager canine 1.15.3

2 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.15.3	eee34b3de2dd	golang.org/x/crypto@v0.24.0	0.35.0
quay.io/jetstack/cert-manager-webhook :v1.15.3	fdcb9ac4963f	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

2,880

stigatroncarbide-charts

0.4.1

2 of 10 See more

stigatron carbide-charts 0.4.1

2 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/nats :2.10.5-alpine	85319e5e541b	golang.org/x/crypto@v0.15.0	0.35.0
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/crypto@v0.13.0	0.35.0

Open the chart page →

4,423

cassandra-webcassandra-web

0.1.0

1 of 1 See more

cassandra-web cassandra-web 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ipushc/cassandra-web :latest	fa3e0c66c289	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,301

castai-tetragoncastai

0.6.1

1 of 4 See more

castai-tetragon castai 0.6.1

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

4,136

castware-componentscastai

0.4.0

1 of 1 See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

3,449

temporalcastai

0.54.2

10 of 14 See more

temporal castai 0.54.2

10 of the 14 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/crypto@v0.21.0	0.35.0
temporalio/admin-tools :1.26.2	37e2e33dbd7b	golang.org/x/crypto@v0.29.0	0.35.0
temporalio/server :1.26.2	1e2626efcbc1	golang.org/x/crypto@v0.14.0	0.35.0
temporalio/ui :2.33.0	5c586a3c8ec5	golang.org/x/crypto@v0.31.0	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/crypto@v0.23.0	0.35.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/prometheus :v2.53.0	075b1ba2c4eb	golang.org/x/crypto@v0.24.0	0.35.0
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.35.0

Open the chart page →

16,198

catalyst-agentscatalyst-agents

0.1.30

5 of 18 See more

catalyst-agents catalyst-agents 0.1.30

5 of the 18 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	golang.org/x/crypto@v0.32.0	0.35.0
grafana/loki :3.0.0	757b5fadf816	golang.org/x/crypto@v0.21.0	0.35.0
grafana/loki-canary :3.0.0	28d7c00588aa	golang.org/x/crypto@v0.21.0	0.35.0
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/crypto@v0.22.0	0.35.0
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

15,027

mongodb-operatorccowley

0.1.1

1 of 1 See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.3.0	107a7c73af59	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

6,389

openldapccowley

2.0.4

1 of 3 See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

6,219

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

1,263

cert-manager-webhook-bunnycert-manager-webhook-bunny

1.0.2

1 of 1 See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

832

Container images carrying it

1,928 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/crypto@v0.7.0	0.35.0	3
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/crypto@v0.26.0	0.35.0	3
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/crypto@v0.21.0	0.35.0	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	3
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.35.0	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.35.0	3
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.35.0	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/crypto@v0.9.0	0.35.0	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/crypto@v0.17.0	0.35.0	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	golang.org/x/crypto@v0.19.0	0.35.0	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/crypto@v0.5.0	0.35.0	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.35.0	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/crypto@v0.32.0	0.35.0	2
datawire/aes :1.14.4	8588eafe6862	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	2
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/crypto@v0.17.0	0.35.0	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.35.0	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/crypto@v0.22.0	0.35.0	2
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/crypto@v0.22.0	0.35.0	2
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/crypto@v0.21.0	0.35.0	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0	2
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	2
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0	2
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	2
grafana/grafana :11.1.0	079600c9517b	golang.org/x/crypto@v0.24.0	0.35.0	2
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0	2
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0	2
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/crypto@v0.24.0	0.35.0	2
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/crypto@v0.27.0	0.35.0	2
grafana/loki :1.5.0	922b3f412fdd	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.35.0	2
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/crypto@v0.21.0	0.35.0	2
grafana/loki :2.5.0	f9ef133793af	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0	2