CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,686; of 17,790 indexed, latest versions
Container images: 1,951; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,686 of 17,790 indexed charts deploy, on 1,951 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,951
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,686 by stars

Chart

Latest

Affected images

Radar Score

octolxddevplayer0

0.1.1

1 of 1 See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,525

ai-agentdevtron

0.0.1

1 of 1 See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

9,685

argocddevtron

1.8.1

2 of 3 See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

10,484

argocd-certificate-refreshdevtron

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

13,011

argo-workflowdevtron

0.1.6

1 of 1 See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,587

devtron-enterprisedevtron

48.0.0

11 of 28 See more

devtron-enterprise devtron 48.0.0

11 of the 28 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

68,695

devtron-in-clustercddevtron

0.10.2

2 of 2 See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

5,055

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

11,959

jcmhproxy-ingressdevtron

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,379

kube-prometheus-stackdevtron

19.3.0

2 of 6 See more

kube-prometheus-stack devtron 19.3.0

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

8,659

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0

Open the chart page →

2,441

zincdevtron

0.1.2

1 of 1 See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0

Open the chart page →

1,514

ai-agentdevtron-labs

0.0.1

1 of 1 See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

9,685

argocddevtron-labs

1.8.1

2 of 3 See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

10,484

argocd-certificate-refreshdevtron-labs

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

13,011

argo-workflowdevtron-labs

0.1.6

1 of 1 See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,587

calicodevtron-labs

0.1.1

3 of 4 See more

calico devtron-labs 0.1.1

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

10,094

clairdevtron-labs

0.1.14

1 of 2 See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

6,237

devtron-enterprisedevtron-labs

48.0.0

11 of 28 See more

devtron-enterprise devtron-labs 48.0.0

11 of the 28 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

68,695

devtron-in-clustercddevtron-labs

0.10.2

2 of 2 See more

devtron-in-clustercd devtron-labs 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

5,055

devtron-operatordevtron-labs

0.23.3

6 of 11 See more

devtron-operator devtron-labs 0.23.3

6 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

33,180

dgraphdevtron-labs

0.0.20

1 of 1 See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

11,959

jcmhproxy-ingressdevtron-labs

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron-labs 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,379

kube-prometheus-stackdevtron-labs

19.3.0

2 of 6 See more

kube-prometheus-stack devtron-labs 19.3.0

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

8,659

securitydevtron-labs

0.2.2

1 of 1 See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0

Open the chart page →

2,441

zincdevtron-labs

0.1.2

1 of 1 See more

zinc devtron-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0

Open the chart page →

1,514

dicedbdicedb-chart

0.1.0

1 of 1 See more

dicedb dicedb-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prathamkrishna/dicedb :v1	a7298180cd24	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

671

difydify

1.0.0

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

19,399

direktivdirektiv

0.10.0

1 of 6 See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-k8s :0.120.0	1e45d9483faa	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

3,480

graphite-exporterdjjudas21

0.1.9

1 of 1 See more

graphite-exporter djjudas21 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/graphite-exporter :v0.16.0	e54bca6645ea	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

782

hammonddjjudas21

0.3.9

1 of 1 See more

hammond djjudas21 0.3.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,807

photoprismdjjudas21

99.99.99

1 of 1 See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
photoprism/photoprism :240711-ce	fc6fd632ca74	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

17,053

uptime-kumadjjudas21

1.5.18

1 of 1 See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.23.12	bc6f244ecf27	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

4,224

dnation-kubernetes-monitoring-stackdnationcloud

4.0.2

6 of 17 See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

6 of the 17 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bitnamilegacy/thanos :0.37.1-debian-12-r0	5bf82b98c82c	golang.org/x/crypto@v0.28.0	0.35.0
grafana/loki :3.2.0	882e30c20683	golang.org/x/crypto@v0.26.0	0.35.0
grafana/loki-canary :3.2.0	49e03f80d361	golang.org/x/crypto@v0.26.0	0.35.0
prom/memcached-exporter :v0.15.0	bb01ad25e9fc	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	golang.org/x/crypto@v0.1.0	0.35.0

Open the chart page →

21,744

ssl-exporterdnationcloud

1.2.1

1 of 1 See more

ssl-exporter dnationcloud 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

1,632

snmp-exporterdniel

0.0.2

1 of 1 See more

snmp-exporter dniel 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,126

docparserdocparser

0.1.0

1 of 4 See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
conduction/docparser-php :dev	b6f95c8ead7d	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

8,417

furan2dollarshaveclub

0.2.0

1 of 1 See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

3,055

channelsdouban

1.1.2

1 of 1 See more

channels douban 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
everpcpc/channels :latest	b378d137ae8b	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,540

codecovdouban

0.2.4

1 of 8 See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

24,962

corednsdouban

1.39.2

1 of 1 See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
coredns/coredns :1.12.0	40384aa1f5ea	golang.org/x/crypto@v0.29.0	0.35.0

Open the chart page →

1,139

gatekeeperdouban

3.17.1

1 of 3 See more

gatekeeper douban 3.17.1

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.17.1	b7b4d7cfdd52	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,499

k8s-crondouban

0.2.0

1 of 1 See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/crypto@v0.13.0	0.35.0

Open the chart page →

3,668

prometheus-memcached-exporterdouban

0.1.3

1 of 1 See more

prometheus-memcached-exporter douban 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/memcached-exporter :v0.9.0	01267317c95d	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,114

tencentcloud-info-exporterdouban

0.2.2

1 of 1 See more

tencentcloud-info-exporter douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

2,325

drogue-cloud-examplesdrogue-iot

0.7.11

3 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7	0.35.0
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

30,753

drogue-cloud-metricsdrogue-iot

0.7.11

4 of 8 See more

drogue-cloud-metrics drogue-iot 0.7.11

4 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

13,573

drone-kubernetes-secretsdrone

0.1.4

1 of 1 See more

drone-kubernetes-secrets drone 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/crypto@v0.0.0-20180808211826-de0752318171	0.35.0

Open the chart page →

2,760

temporaldtrdnk-helm-charts

0.35.0

7 of 13 See more

temporal dtrdnk-helm-charts 0.35.0

7 of the 13 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/crypto@v0.14.0	0.35.0
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/crypto@v0.14.0	0.35.0
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/crypto@v0.1.0	0.35.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

20,240

duplicacyduplicacy

0.1.2

1 of 2 See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/crypto@v0.12.0	0.35.0

Open the chart page →

2,420

Container images carrying it

1,951 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kubeform/provider-azure :v0.0.1	ac8459f70f85	golang.org/x/crypto@v0.9.0	0.35.0	1
ghcr.io/kubeform/provider-gcp :v0.0.1	af77073c184f	golang.org/x/crypto@v0.2.0	0.35.0	1
ghcr.io/kube-logging/log-generator :v0.4.1	05aa441b20aa	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
ghcr.io/kube-logging/log-generator :v0.6.0	8324bbc0ec08	golang.org/x/crypto@v0.5.0	0.35.0	1
ghcr.io/kubeshop/botkube :v1.0.0	669e27a5d1af	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	1
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	golang.org/x/crypto@v0.31.0	0.35.0	1
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/crypto@v0.26.0	0.35.0	1
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0	1
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0	1
ghcr.io/kyverno/background-controller :v1.12.5	06ed5db6cd33	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/cleanup-controller :v1.12.5	b914032ef9ad	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
ghcr.io/kyverno/kyverno :v1.12.5	a61c7022abcf	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
ghcr.io/linuxserver/duplicati :latest	a792931146b4	golang.org/x/crypto@v0.19.0	0.35.0	1
ghcr.io/loafoe/caddy-token :v0.3.0	528f2174fa2f	golang.org/x/crypto@v0.25.0	0.35.0	1
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	golang.org/x/crypto@v0.12.0	0.35.0	1
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/crypto@v0.5.0	0.35.0	1
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	golang.org/x/crypto@v0.14.0	0.35.0	1
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	golang.org/x/crypto@v0.12.0	0.35.0	1
ghcr.io/loft-sh/vcluster :0.16.4	84f70425f4dd	golang.org/x/crypto@v0.14.0	0.35.0	1
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/crypto@v0.14.0	0.35.0	1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0	1
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/crypto@v0.17.0	0.35.0	1
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	golang.org/x/crypto@v0.26.0	0.35.0	1
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	1
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.35.0	1
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/crypto@v0.1.0	0.35.0	1
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/crypto@v0.12.0	0.35.0	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/crypto@v0.30.0	0.35.0	1
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1