CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 59th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,682; of 17,797 indexed, latest versions
Container images: 1,947; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,682 of 17,797 indexed charts deploy, on 1,947 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,947
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,682 by stars

Chart

Latest

Affected images

Radar Score

fsmopenshift

0.1.8-ubi.6

3 of 6 See more

fsm openshift 0.1.8-ubi.6

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

16,563

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

4,170

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

5,863

opscruiseopenshift

0.35.100

3 of 11 See more

opscruise openshift 0.35.100

3 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0

Open the chart page →

8,224

osm-edgeopenshift

1.2.1-ubi8

3 of 7 See more

osm-edge openshift 1.2.1-ubi8

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/crypto@v0.5.0	0.35.0
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/crypto@v0.5.0	0.35.0
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

19,471

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.35.0

Open the chart page →

8,643

openvscode-serveropenvscode-server-helm

2.7.38

1 See more

openvscode-server openvscode-server-helm 2.7.38

1 container image this version deploys carries CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/crypto@v0.2.0	0.35.0

Open the chart page →

—

gitlab-proxyopslevel

0.0.8

1 of 1 See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/caddy :2.6	60fb54d36b4b	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

1,879

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

1,747

opslevelopslevel

2025.1.22

2 of 10 See more

opslevel opslevel 2025.1.22

2 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/crypto@v0.6.0	0.35.0
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

5,658

agentoptimizely-agent

1.4.0

1 of 1 See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,220

orderregistratiecomponentorderregistratiecomponent

1.0.0

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,501

prometheusosc

0.26.2

2 of 12 See more

prometheus osc 0.26.2

2 of the 12 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/crypto@v0.8.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0

Open the chart page →

3,381

grrosdfir-infrastructure

1.0.3

1 of 5 See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

11,020

osdfir-infrastructureosdfir-infrastructure

2.15.0

4 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	golang.org/x/crypto@v0.17.0	0.35.0
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.35.0
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/crypto@v0.22.0	0.35.0
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

72,857

yetiosdfir-infrastructure

1.0.5

1 of 4 See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

6,707

osm-edgeosm-edge

1.3.9

3 of 7 See more

osm-edge osm-edge 1.3.9

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
flomesh/osm-edge-bootstrap :1.3.9	b188e128cbfe	golang.org/x/crypto@v0.5.0	0.35.0
flomesh/osm-edge-controller :1.3.9	add7a4da4622	golang.org/x/crypto@v0.5.0	0.35.0
flomesh/osm-edge-injector :1.3.9	47287e3ad324	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

5,610

logging-operatorot-container-kit

0.4.0

1 of 1 See more

logging-operator ot-container-kit 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/opstree/logging-operator :v0.4.0	fd8bb57ef3cf	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0

Open the chart page →

1,802

lokiot-container-kit

1.0.1

3 of 5 See more

loki ot-container-kit 1.0.1

3 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/crypto@v0.21.0	0.35.0
grafana/promtail :3.0.0	d3de3da9431c	golang.org/x/crypto@v0.21.0	0.35.0
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

4,845

mongodb-operatorot-container-kit

0.3.1

1 of 1 See more

mongodb-operator ot-container-kit 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/opstree/mongodb-operator :v0.3.0	879b9bead838	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

1,873

pgaot-container-kit

1.0.3

3 of 6 See more

pga ot-container-kit 1.0.3

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.0	079600c9517b	golang.org/x/crypto@v0.24.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.35.0

Open the chart page →

5,143

vmot-container-kit

0.0.3

3 of 7 See more

vm ot-container-kit 0.0.3

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/crypto@v0.24.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

5,418

arpap2p-avs

0.1.3

1 of 2 See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/arpa-network/node-client :latest	657a2c9f6e6d	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,987

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/automata-network/multi-prover-avs/operator :v0.6.0	752f1aa02438	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

3,679

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

3,335

eigendap2p-avs

0.1.1

2 of 3 See more

eigenda p2p-avs 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	golang.org/x/crypto@v0.23.0	0.35.0
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

2,334

predicatep2p-avs

0.1.4

1 of 1 See more

predicate p2p-avs 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/predicatelabs/operator :v1.0.5	b62113fe1b27	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

893

parcaparca

4.19.0

2 of 2 See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	golang.org/x/crypto@v0.9.0	0.35.0
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

3,364

parcaparca-chart

0.1.0

1 of 1 See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	golang.org/x/crypto@v0.9.0	0.35.0

Open the chart page →

1,985

istio-operatorparticuleio

1.7.0

1 of 1 See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gcr.io/istio-testing/operator :latest	8d4576f7b98f	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

4,179

scaleway-webhookparticuleio

0.0.1

1 of 1 See more

scaleway-webhook particuleio 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,354

hammondpascaliske

2.0.0

1 of 2 See more

hammond pascaliske 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,807

home-assistantpascaliske

0.1.1

1 of 1 See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

4,807

vikunjapascaliske

5.1.0

1 of 1 See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

1,342

pax-prometheuspaxtecnologia

0.7.1

1 of 8 See more

pax-prometheus paxtecnologia 0.7.1

1 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,761

archive-analysispcp-helm-charts

1.0.1

1 of 1 See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/performancecopilot/archive-analysis :latest	8de11e2363fc	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,333

permission-managerpermission-manager

1.0.0-seal

1 of 1 See more

permission-manager permission-manager 1.0.0-seal

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

2,267

pet-battle-infrapetbattle

1.0.32

1 of 2 See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

15,474

pet-battle-tournamentpetbattle

1.0.40

1 of 3 See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

15,474

container-agentphntom

100.0.1

1 of 1 See more

container-agent phntom 100.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
circleci/container-agent :3	4d8d0ae5efc3	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,974

external-dns-host-networkphntom

0.0.12

1 of 1 See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/external-dns-host-network :0.0.12	3adadbac8443	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

4,644

goalertphntom

0.0.29

1 of 1 See more

goalert phntom 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/goalert :0.0.29	8ca4df55499b	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

1,050

kochiphntom

1.1.4

1 of 1 See more

kochi phntom 1.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,964

loki-stackphntom

2.10.2

2 of 2 See more

loki-stack phntom 2.10.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :2.4.2	b3af8ead67d7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0
grafana/promtail :2.4.2	626900031c4e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0

Open the chart page →

5,724

mindavphntom

0.1.6

1 of 2 See more

mindav phntom 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/mindav :0.1.7-kix3	5695f546abbb	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

4,159

npre-essentialsphntom

0.1.60

8 of 22 See more

npre-essentials phntom 0.1.60

8 of the 22 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :2.6.1	1ee60f980950	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0
grafana/promtail :2.7.0	c16c710f7333	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
phntom/chartmuseum :v0.15.2	9242b4df9e65	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
phntom/oauth2-proxy :v7.3.4	8ea656a2a895	golang.org/x/crypto@v0.0.0-20220314234659-1baeb1ce4c0b	0.35.0
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0

Open the chart page →

26,888

blockmeta-servicepinax

0.0.3

1 of 1 See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,688

firehose-corepinax

0.1.1

1 of 2 See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0

Open the chart page →

3,544

firehose-ethereumpinax

0.3.2

1 of 2 See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0

Open the chart page →

7,193

substreams-sink-kvpinax

0.0.4

1 of 1 See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

6,777

Container images carrying it

1,947 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kubeshop/botkube :v1.0.0	669e27a5d1af	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	1
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	golang.org/x/crypto@v0.31.0	0.35.0	1
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/crypto@v0.26.0	0.35.0	1
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0	1
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0	1
ghcr.io/kyverno/background-controller :v1.12.5	06ed5db6cd33	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/cleanup-controller :v1.12.5	b914032ef9ad	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
ghcr.io/kyverno/kyverno :v1.12.5	a61c7022abcf	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/leoquote/tencentcloud-info-exporter :main	d523c2c010cd	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
ghcr.io/linuxserver/duplicati :latest	a792931146b4	golang.org/x/crypto@v0.19.0	0.35.0	1
ghcr.io/loafoe/caddy-token :v0.3.0	528f2174fa2f	golang.org/x/crypto@v0.25.0	0.35.0	1
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	golang.org/x/crypto@v0.12.0	0.35.0	1
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/crypto@v0.5.0	0.35.0	1
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	golang.org/x/crypto@v0.14.0	0.35.0	1
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	golang.org/x/crypto@v0.12.0	0.35.0	1
ghcr.io/loft-sh/vcluster :0.16.4	84f70425f4dd	golang.org/x/crypto@v0.14.0	0.35.0	1
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/crypto@v0.14.0	0.35.0	1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0	1
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/crypto@v0.17.0	0.35.0	1
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	golang.org/x/crypto@v0.26.0	0.35.0	1
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	1
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.35.0	1
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/crypto@v0.1.0	0.35.0	1
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/crypto@v0.12.0	0.35.0	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/crypto@v0.30.0	0.35.0	1
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	golang.org/x/crypto@v0.32.0	0.35.0	1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud :latest	179bee5ef8b2	golang.org/x/crypto@v0.6.0	0.35.0	1