CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,665; of 17,787 indexed, latest versions
Container images: 1,927; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,665 of 17,787 indexed charts deploy, on 1,927 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,927
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,665 by stars

Chart

Latest

Affected images

Radar Score

devtron-enterprisedevtron

48.0.0

11 of 28 See more

devtron-enterprise devtron 48.0.0

11 of the 28 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

68,240

devtron-in-clustercddevtron

0.10.2

2 of 2 See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

5,039

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

11,909

jcmhproxy-ingressdevtron

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,379

kube-prometheus-stackdevtron

19.3.0

2 of 6 See more

kube-prometheus-stack devtron 19.3.0

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

8,645

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0

Open the chart page →

2,435

zincdevtron

0.1.2

1 of 1 See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0

Open the chart page →

1,507

ai-agentdevtron-labs

0.0.1

1 of 1 See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

9,607

argocddevtron-labs

1.8.1

2 of 3 See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

10,466

argocd-certificate-refreshdevtron-labs

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

12,949

argo-workflowdevtron-labs

0.1.6

1 of 1 See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,580

calicodevtron-labs

0.1.1

3 of 4 See more

calico devtron-labs 0.1.1

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

10,071

clairdevtron-labs

0.1.14

1 of 2 See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

6,237

devtron-enterprisedevtron-labs

48.0.0

11 of 28 See more

devtron-enterprise devtron-labs 48.0.0

11 of the 28 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

68,240

devtron-in-clustercddevtron-labs

0.10.2

2 of 2 See more

devtron-in-clustercd devtron-labs 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

5,039

devtron-operatordevtron-labs

0.23.3

6 of 11 See more

devtron-operator devtron-labs 0.23.3

6 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

32,902

dgraphdevtron-labs

0.0.20

1 of 1 See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

11,909

jcmhproxy-ingressdevtron-labs

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron-labs 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,379

kube-prometheus-stackdevtron-labs

19.3.0

2 of 6 See more

kube-prometheus-stack devtron-labs 19.3.0

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

8,645

securitydevtron-labs

0.2.2

1 of 1 See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0

Open the chart page →

2,435

zincdevtron-labs

0.1.2

1 of 1 See more

zinc devtron-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0

Open the chart page →

1,507

dicedbdicedb-chart

0.1.0

1 of 1 See more

dicedb dicedb-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prathamkrishna/dicedb :v1	a7298180cd24	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

671

difydify

1.0.0

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

19,224

direktivdirektiv

0.10.0

1 of 6 See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-k8s :0.120.0	1e45d9483faa	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

3,470

graphite-exporterdjjudas21

0.1.9

1 of 1 See more

graphite-exporter djjudas21 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/graphite-exporter :v0.16.0	e54bca6645ea	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

782

hammonddjjudas21

0.3.9

1 of 1 See more

hammond djjudas21 0.3.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,806

photoprismdjjudas21

99.99.99

1 of 1 See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
photoprism/photoprism :240711-ce	fc6fd632ca74	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

16,954

uptime-kumadjjudas21

1.5.18

1 of 1 See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.23.12	bc6f244ecf27	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

4,217

dnation-kubernetes-monitoring-stackdnationcloud

4.0.2

6 of 17 See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

6 of the 17 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bitnamilegacy/thanos :0.37.1-debian-12-r0	5bf82b98c82c	golang.org/x/crypto@v0.28.0	0.35.0
grafana/loki :3.2.0	882e30c20683	golang.org/x/crypto@v0.26.0	0.35.0
grafana/loki-canary :3.2.0	49e03f80d361	golang.org/x/crypto@v0.26.0	0.35.0
prom/memcached-exporter :v0.15.0	bb01ad25e9fc	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	golang.org/x/crypto@v0.1.0	0.35.0

Open the chart page →

21,641

ssl-exporterdnationcloud

1.2.1

1 of 1 See more

ssl-exporter dnationcloud 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

1,632

snmp-exporterdniel

0.0.2

1 of 1 See more

snmp-exporter dniel 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,126

docparserdocparser

0.1.0

1 of 4 See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
conduction/docparser-php :dev	b6f95c8ead7d	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

8,408

furan2dollarshaveclub

0.2.0

1 of 1 See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

3,046

channelsdouban

1.1.2

1 of 1 See more

channels douban 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
everpcpc/channels :latest	b378d137ae8b	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,539

codecovdouban

0.2.4

1 of 8 See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

24,917

corednsdouban

1.39.2

1 of 1 See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
coredns/coredns :1.12.0	40384aa1f5ea	golang.org/x/crypto@v0.29.0	0.35.0

Open the chart page →

1,132

gatekeeperdouban

3.17.1

1 of 3 See more

gatekeeper douban 3.17.1

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.17.1	b7b4d7cfdd52	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,490

k8s-crondouban

0.2.0

1 of 1 See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/crypto@v0.13.0	0.35.0

Open the chart page →

3,659

prometheus-memcached-exporterdouban

0.1.3

1 of 1 See more

prometheus-memcached-exporter douban 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,114

tencentcloud-info-exporterdouban

0.2.2

1 of 1 See more

tencentcloud-info-exporter douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

2,325

drogue-cloud-examplesdrogue-iot

0.7.11

3 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7	0.35.0
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

30,699

drogue-cloud-metricsdrogue-iot

0.7.11

4 of 8 See more

drogue-cloud-metrics drogue-iot 0.7.11

4 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

13,558

drone-kubernetes-secretsdrone

0.1.4

1 of 1 See more

drone-kubernetes-secrets drone 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/crypto@v0.0.0-20180808211826-de0752318171	0.35.0

Open the chart page →

2,760

temporaldtrdnk-helm-charts

0.35.0

7 of 13 See more

temporal dtrdnk-helm-charts 0.35.0

7 of the 13 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/crypto@v0.14.0	0.35.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/crypto@v0.14.0	0.35.0
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/crypto@v0.1.0	0.35.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

20,205

duplicacyduplicacy

0.1.2

1 of 2 See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/crypto@v0.12.0	0.35.0

Open the chart page →

2,412

commentoduyet

0.2.0

1 of 2 See more

commento duyet 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	golang.org/x/crypto@v0.0.0-20180808211826-de0752318171	0.35.0

Open the chart page →

2,679

ai-scale-authdysnix

0.1.1

2 of 3 See more

ai-scale-auth dysnix 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-auth :latest	6c7a47e470c3	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0
alex6021710/ai-scale-migrator :latest	744b8a924f35	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0

Open the chart page →

6,141

ai-scale-doerdysnix

0.1.0

1 of 1 See more

ai-scale-doer dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-doer :latest	31e533cf7cd3	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0

Open the chart page →

2,801

ai-scale-providerdysnix

0.1.0

1 of 1 See more

ai-scale-provider dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-provider :latest	5837d9b30cc7	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

2,179

ai-scale-saverdysnix

0.1.0

1 of 1 See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alex6021710/ai-scale-saver :latest	f73e8d60fd03	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

2,136

Container images carrying it

1,927 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/crypto@v0.26.0	0.35.0	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/crypto@v0.7.0	0.35.0	3
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/crypto@v0.26.0	0.35.0	3
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/crypto@v0.21.0	0.35.0	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.35.0	3
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.35.0	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/crypto@v0.9.0	0.35.0	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/crypto@v0.17.0	0.35.0	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	golang.org/x/crypto@v0.19.0	0.35.0	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/crypto@v0.5.0	0.35.0	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.35.0	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/crypto@v0.32.0	0.35.0	2
datawire/aes :1.14.4	8588eafe6862	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	2
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/crypto@v0.17.0	0.35.0	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.35.0	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/crypto@v0.22.0	0.35.0	2
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/crypto@v0.22.0	0.35.0	2
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/crypto@v0.21.0	0.35.0	2
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/crypto@v0.21.0	0.35.0	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0	2
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	2
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0	2
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	2
grafana/grafana :11.1.0	079600c9517b	golang.org/x/crypto@v0.24.0	0.35.0	2
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0	2
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0	2
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/crypto@v0.24.0	0.35.0	2
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/crypto@v0.27.0	0.35.0	2
grafana/loki :1.5.0	922b3f412fdd	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.35.0	2
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/crypto@v0.21.0	0.35.0	2
grafana/loki :2.5.0	f9ef133793af	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0	2