CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 59th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,683; of 17,803 indexed, latest versions
Container images: 1,948; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,683 of 17,803 indexed charts deploy, on 1,948 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,948
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,683 by stars

Chart

Latest

Affected images

Radar Score

vcluster-pro-eksloft

0.0.0-ci-run.10

2 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

2 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.35.0
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0

Open the chart page →

5,985

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/crypto@v0.5.0	0.35.0
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

5,828

vcluster-pro-k8sloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.35.0
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/crypto@v0.1.0	0.35.0
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/crypto@v0.1.0	0.35.0

Open the chart page →

8,284

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0

Open the chart page →

2,993

loggingcomponentloggingcomponent

1.0.0

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,503

nightingalelogic3579

0.3.1

1 of 6 See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

9,147

logicservicelogicservice

1.0.0

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,510

0.1.0

1 of 2 See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
aboogie/login_test_backend :new	9c41a4483ac8	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

6,591

apica-ascentlogiqai

2.0.4

5 of 19 See more

apica-ascent logiqai 2.0.4

5 of the 19 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	golang.org/x/crypto@v0.18.0	0.35.0
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.35.0
minio/minio :RELEASE.2020-09-17T04-49-20Z	e2b7b633c250	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

23,727

logtidelogtide

2.1.14

1 of 4 See more

logtide logtide 2.1.14

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg15	6343bdc87ca1	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

2,961

chronograflsst-sqre

1.3.5

1 of 1 See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

2,349

sasquatchlsst-sqre

0.1.13

2 of 6 See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/kapacitor :1.6.3	7232f6388a4d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

9,351

telegraf-dslsst-sqre

1.0.23

1 of 1 See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/telegraf :1.19-alpine	addb86c0c520	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

3,773

kube-benchm9sweeper

1.6.0

1 of 1 See more

kube-bench m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.17	6672264accce	golang.org/x/crypto@v0.4.0	0.35.0

Open the chart page →

1,400

m9sweeperm9sweeper

1.6.0

2 of 6 See more

m9sweeper m9sweeper 1.6.0

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubesec/kubesec :v2.13.0	c0f3b0673578	golang.org/x/crypto@v0.6.0	0.35.0
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

9,848

magistralamagistrala-devops

0.16.2

11 of 42 See more

magistrala magistrala-devops 0.16.2

11 of the 42 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.35.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.35.0
library/nats :2.10.17-alpine	b7752304692b	golang.org/x/crypto@v0.24.0	0.35.0
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/crypto@v0.9.0	0.35.0
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/crypto@v0.31.0	0.35.0
timescale/timescaledb :latest-pg12	645fd9e92d76	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	golang.org/x/crypto@v0.31.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	golang.org/x/crypto@v0.31.0	0.35.0
quay.io/prometheus/pushgateway :v1.11.0	99392035ae99	golang.org/x/crypto@v0.32.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

24,748

kruisematrixone-operator

1.8.3

1 of 2 See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openkruise/kruise-manager :v1.8.3	0482722b4e56	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

1,927

matrix-sliding-syncmatrix-sliding-sync

0.2.3

1 of 1 See more

matrix-sliding-sync matrix-sliding-sync 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,607

focalboardmattermost

0.5.0

1 of 1 See more

focalboard mattermost 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mattermost/focalboard :0.6.7	f2f987dada52	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0

Open the chart page →

4,015

mattermost-calls-offloadermattermost

0.2.1

1 of 1 See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mattermost/calls-offloader :v0.9.0	b440b282599e	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

1,423

mattermost-chaos-enginemattermost

0.2.0

1 of 1 See more

mattermost-chaos-engine mattermost 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mattermost/mattermost-app-chaosengine :c153e43	6268954edd67	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0

Open the chart page →

4,075

mattermost-push-proxymattermost

0.14.3

1 of 1 See more

mattermost-push-proxy mattermost 0.14.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mattermost/mattermost-push-proxy :6.3.0	45c53061c74e	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

897

mayastormayastor

2.12.1

5 of 31 See more

mayastor mayastor 2.12.1

5 of the 31 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/crypto@v0.32.0	0.35.0
library/nats :2.9.17-alpine	1a7b320b2942	golang.org/x/crypto@v0.8.0	0.35.0
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	golang.org/x/crypto@v0.8.0	0.35.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.35.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

21,596

eoloplantmca-eoloplaner

0.1.0

1 of 7 See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.35.0

Open the chart page →

29,857

medewerkercatalogusmedewerkercatalogus

1.0.0

1 of 3 See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,338

cameramedia-streaming-mesh

0.2.5

1 of 3 See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

18,682

msmmedia-streaming-mesh

0.1.17

1 of 6 See more

msm media-streaming-mesh 0.1.17

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

11,603

msm-rtspmedia-streaming-mesh

0.0.2

1 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

18,682

rtspmedia-streaming-mesh

0.0.14

1 of 2 See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

18,682

mediawiki-backupmediawiki-backup

0.2.1

1 of 1 See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

1,919

memo-componentmemo-component

1.0.0

1 of 3 See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,520

dex-k8s-authenticatormesosphere

1.4.3

1 of 1 See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mesosphere/dex-k8s-authenticator :v1.4.1-d2iq	f3d9982cc2fd	golang.org/x/crypto@v0.11.0	0.35.0

Open the chart page →

1,019

flaggermesosphere

0.21.0

1 of 2 See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
weaveworks/flagger :0.19.0	a9c2e9df4227	golang.org/x/crypto@v0.0.0-20181025213731-e84da0312774	0.35.0

Open the chart page →

6,049

gatekeepermesosphere

0.6.11

1 of 2 See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,041

kafka-operatormesosphere

0.20.2

1 of 2 See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0

Open the chart page →

1,884

kubeaddons-catalogmesosphere

0.1.16

1 of 2 See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

12,067

kubefedmesosphere

0.5.2

1 of 1 See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mesosphere/kubefed :proxyurl	4fd8889195fe	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,151

kube-oidc-proxymesosphere

0.3.4

1 of 1 See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/kube-oidc-proxy :v0.3.0	e045b26eb6df	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

3,151

kudomesosphere

0.1.4

1 of 1 See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kudobuilder/controller :v0.9.0	69072d979708	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.35.0

Open the chart page →

5,702

local-path-provisionermesosphere

0.0.22

1 of 1 See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0

Open the chart page →

2,318

nfs-server-provisionermesosphere

0.6.1

1 of 1 See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

2,806

prometheus-operatormesosphere

12.11.13

3 of 8 See more

prometheus-operator mesosphere 12.11.13

3 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.35.0

Open the chart page →

11,733

traefik2mesosphere

9.18.0

1 of 1 See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/traefik :2.4.8	eda951fd29a8	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

3,350

azuredisk-csi-drivermesosphere-stable

0.8.1

4 of 6 See more

azuredisk-csi-driver mesosphere-stable 0.8.1

4 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620	0.35.0

Open the chart page →

14,109

cert-manager-setupmesosphere-stable

0.2.10

3 of 5 See more

cert-manager-setup mesosphere-stable 0.2.10

3 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	golang.org/x/crypto@v0.5.0	0.35.0
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	golang.org/x/crypto@v0.5.0	0.35.0
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

7,216

dexmesosphere-stable

2.14.1

2 of 5 See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0
mesosphere/dex-controller :v0.16.1	1b2dd9c0b0fc	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

19,307

gatekeepermesosphere-stable

0.6.11

1 of 2 See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,041

kafka-operatormesosphere-stable

0.25.1

1 of 2 See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,242

knativemesosphere-stable

1.10.8

1 of 7 See more

knative mesosphere-stable 1.10.8

1 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	golang.org/x/crypto@v0.1.0	0.35.0

Open the chart page →

7,529

kommandermesosphere-stable

0.39.2

17 of 29 See more

kommander mesosphere-stable 0.39.2

17 of the 29 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.35.0
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.35.0
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.35.0
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.35.0
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0

Open the chart page →

68,442

Container images carrying it

1,948 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kube-logging/log-generator :v0.6.0	8324bbc0ec08	golang.org/x/crypto@v0.5.0	0.35.0	1
ghcr.io/kubeshop/botkube :v1.0.0	669e27a5d1af	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	1
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	golang.org/x/crypto@v0.31.0	0.35.0	1
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/crypto@v0.26.0	0.35.0	1
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0	1
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0	1
ghcr.io/kyverno/background-controller :v1.12.5	06ed5db6cd33	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/cleanup-controller :v1.12.5	b914032ef9ad	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
ghcr.io/kyverno/kyverno :v1.12.5	a61c7022abcf	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
ghcr.io/linuxserver/duplicati :latest	a792931146b4	golang.org/x/crypto@v0.19.0	0.35.0	1
ghcr.io/loafoe/caddy-token :v0.3.0	528f2174fa2f	golang.org/x/crypto@v0.25.0	0.35.0	1
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	golang.org/x/crypto@v0.12.0	0.35.0	1
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/crypto@v0.5.0	0.35.0	1
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	golang.org/x/crypto@v0.14.0	0.35.0	1
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	golang.org/x/crypto@v0.12.0	0.35.0	1
ghcr.io/loft-sh/vcluster :0.16.4	84f70425f4dd	golang.org/x/crypto@v0.14.0	0.35.0	1
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/crypto@v0.14.0	0.35.0	1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0	1
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/crypto@v0.17.0	0.35.0	1
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	golang.org/x/crypto@v0.26.0	0.35.0	1
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	1
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.35.0	1
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/crypto@v0.1.0	0.35.0	1
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/crypto@v0.12.0	0.35.0	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/crypto@v0.30.0	0.35.0	1
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/crypto@v0.32.0	0.35.0	1