CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,681; of 17,792 indexed, latest versions
Container images: 1,945; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,681 of 17,792 indexed charts deploy, on 1,945 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,945
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,681 by stars

Chart

Latest

Affected images

Radar Score

vcluster-pro-k8sloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.35.0
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/crypto@v0.1.0	0.35.0
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/crypto@v0.1.0	0.35.0

Open the chart page →

8,235

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0

Open the chart page →

2,993

loggingcomponentloggingcomponent

1.0.0

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,501

nightingalelogic3579

0.3.1

1 of 6 See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

9,062

logicservicelogicservice

1.0.0

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,508

0.1.0

1 of 2 See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
aboogie/login_test_backend :new	9c41a4483ac8	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

6,578

apica-ascentlogiqai

2.0.4

5 of 19 See more

apica-ascent logiqai 2.0.4

5 of the 19 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	golang.org/x/crypto@v0.18.0	0.35.0
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.35.0
minio/minio :RELEASE.2020-09-17T04-49-20Z	e2b7b633c250	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

23,689

logtidelogtide

2.1.14

1 of 4 See more

logtide logtide 2.1.14

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg15	6343bdc87ca1	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

2,775

chronograflsst-sqre

1.3.5

1 of 1 See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

2,349

sasquatchlsst-sqre

0.1.13

2 of 6 See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/kapacitor :1.6.3	7232f6388a4d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

9,347

telegraf-dslsst-sqre

1.0.23

1 of 1 See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/telegraf :1.19-alpine	addb86c0c520	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

3,773

kube-benchm9sweeper

1.6.0

1 of 1 See more

kube-bench m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.17	6672264accce	golang.org/x/crypto@v0.4.0	0.35.0

Open the chart page →

1,400

m9sweeperm9sweeper

1.6.0

2 of 6 See more

m9sweeper m9sweeper 1.6.0

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubesec/kubesec :v2.13.0	c0f3b0673578	golang.org/x/crypto@v0.6.0	0.35.0
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

9,805

magistralamagistrala-devops

0.16.2

11 of 42 See more

magistrala magistrala-devops 0.16.2

11 of the 42 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.35.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.35.0
library/nats :2.10.17-alpine	b7752304692b	golang.org/x/crypto@v0.24.0	0.35.0
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/crypto@v0.9.0	0.35.0
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/crypto@v0.31.0	0.35.0
timescale/timescaledb :latest-pg12	645fd9e92d76	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	golang.org/x/crypto@v0.31.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	golang.org/x/crypto@v0.31.0	0.35.0
quay.io/prometheus/pushgateway :v1.11.0	99392035ae99	golang.org/x/crypto@v0.32.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

24,537

kruisematrixone-operator

1.8.3

1 of 2 See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openkruise/kruise-manager :v1.8.3	0482722b4e56	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

1,775

matrix-sliding-syncmatrix-sliding-sync

0.2.3

1 of 1 See more

matrix-sliding-sync matrix-sliding-sync 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,599

focalboardmattermost

0.5.0

1 of 1 See more

focalboard mattermost 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mattermost/focalboard :0.6.7	f2f987dada52	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0

Open the chart page →

4,014

mattermost-calls-offloadermattermost

0.2.1

1 of 1 See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mattermost/calls-offloader :v0.9.0	b440b282599e	golang.org/x/crypto@v0.16.0	0.35.0

Open the chart page →

1,422

mattermost-chaos-enginemattermost

0.2.0

1 of 1 See more

mattermost-chaos-engine mattermost 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mattermost/mattermost-app-chaosengine :c153e43	6268954edd67	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0

Open the chart page →

4,074

mattermost-push-proxymattermost

0.14.3

1 of 1 See more

mattermost-push-proxy mattermost 0.14.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mattermost/mattermost-push-proxy :6.3.0	45c53061c74e	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

897

mayastormayastor

2.12.1

5 of 31 See more

mayastor mayastor 2.12.1

5 of the 31 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/crypto@v0.32.0	0.35.0
library/nats :2.9.17-alpine	1a7b320b2942	golang.org/x/crypto@v0.8.0	0.35.0
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	golang.org/x/crypto@v0.8.0	0.35.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.35.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

21,269

eoloplantmca-eoloplaner

0.1.0

1 of 7 See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.35.0

Open the chart page →

29,746

medewerkercatalogusmedewerkercatalogus

1.0.0

1 of 3 See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,337

cameramedia-streaming-mesh

0.2.5

1 of 3 See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

18,730

msmmedia-streaming-mesh

0.1.17

1 of 6 See more

msm media-streaming-mesh 0.1.17

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

11,528

msm-rtspmedia-streaming-mesh

0.0.2

1 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

18,730

rtspmedia-streaming-mesh

0.0.14

1 of 2 See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

18,730

mediawiki-backupmediawiki-backup

0.2.1

1 of 1 See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

1,919

memo-componentmemo-component

1.0.0

1 of 3 See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,519

dex-k8s-authenticatormesosphere

1.4.3

1 of 1 See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mesosphere/dex-k8s-authenticator :v1.4.1-d2iq	f3d9982cc2fd	golang.org/x/crypto@v0.11.0	0.35.0

Open the chart page →

1,019

flaggermesosphere

0.21.0

1 of 2 See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
weaveworks/flagger :0.19.0	a9c2e9df4227	golang.org/x/crypto@v0.0.0-20181025213731-e84da0312774	0.35.0

Open the chart page →

6,049

gatekeepermesosphere

0.6.11

1 of 2 See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,041

kafka-operatormesosphere

0.20.2

1 of 2 See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0

Open the chart page →

1,884

kubeaddons-catalogmesosphere

0.1.16

1 of 2 See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

12,052

kubefedmesosphere

0.5.2

1 of 1 See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mesosphere/kubefed :proxyurl	4fd8889195fe	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,151

kube-oidc-proxymesosphere

0.3.4

1 of 1 See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/kube-oidc-proxy :v0.3.0	e045b26eb6df	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

3,151

kudomesosphere

0.1.4

1 of 1 See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kudobuilder/controller :v0.9.0	69072d979708	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.35.0

Open the chart page →

5,690

local-path-provisionermesosphere

0.0.22

1 of 1 See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0

Open the chart page →

2,317

nfs-server-provisionermesosphere

0.6.1

1 of 1 See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

2,806

prometheus-operatormesosphere

12.11.13

3 of 8 See more

prometheus-operator mesosphere 12.11.13

3 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.35.0

Open the chart page →

11,704

traefik2mesosphere

9.18.0

1 of 1 See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/traefik :2.4.8	eda951fd29a8	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

3,349

azuredisk-csi-drivermesosphere-stable

0.8.1

4 of 6 See more

azuredisk-csi-driver mesosphere-stable 0.8.1

4 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620	0.35.0

Open the chart page →

14,107

cert-manager-setupmesosphere-stable

0.2.10

3 of 5 See more

cert-manager-setup mesosphere-stable 0.2.10

3 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	golang.org/x/crypto@v0.5.0	0.35.0
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	golang.org/x/crypto@v0.5.0	0.35.0
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

7,201

dexmesosphere-stable

2.14.1

2 of 5 See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0
mesosphere/dex-controller :v0.16.1	1b2dd9c0b0fc	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

19,270

gatekeepermesosphere-stable

0.6.11

1 of 2 See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,041

kafka-operatormesosphere-stable

0.25.1

1 of 2 See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	golang.org/x/crypto@v0.7.0	0.35.0

Open the chart page →

1,242

knativemesosphere-stable

1.10.8

1 of 7 See more

knative mesosphere-stable 1.10.8

1 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	golang.org/x/crypto@v0.1.0	0.35.0

Open the chart page →

7,528

kommandermesosphere-stable

0.39.2

17 of 29 See more

kommander mesosphere-stable 0.39.2

17 of the 29 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.35.0
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.35.0
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.35.0
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.35.0
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0

Open the chart page →

68,417

opsportalmesosphere-stable

0.9.5

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

7,027

cortexmetakube

0.6.0

1 of 2 See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

4,115

Container images carrying it

1,945 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/netsoc/iamd :1.1.2	2fe6b69b20d7	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
ghcr.io/netsoc/shhd :0.1.6	0bb44992b62c	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0	1
ghcr.io/netsoc/webspaced :0.5.1	edc238a538a0	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
ghcr.io/nlamirault/bbox_exporter :1.0.0	f5dd1f7794c6	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.35.0	1
ghcr.io/nlamirault/freebox-exporter :1.0.0	2d522b664e12	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0	1
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	golang.org/x/crypto@v0.6.0	0.35.0	1
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	golang.org/x/crypto@v0.32.0	0.35.0	1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/olivetin/olivetin :2025.2.19	a89958921526	golang.org/x/crypto@v0.31.0	0.35.0	1
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/crypto@v0.12.0	0.35.0	1
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/crypto@v0.17.0	0.35.0	1
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	golang.org/x/crypto@v0.16.0	0.35.0	1
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	golang.org/x/crypto@v0.32.0	0.35.0	1
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	golang.org/x/crypto@v0.30.0	0.35.0	1
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/crypto@v0.25.0	0.35.0	1
ghcr.io/openstack-exporter/openstack-exporter :1.7.0	e5146a7dd515	golang.org/x/crypto@v0.8.0	0.35.0	1
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/crypto@v0.17.0	0.35.0	1
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0	1
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	golang.org/x/crypto@v0.16.0	0.35.0	1
ghcr.io/performancecopilot/archive-analysis :latest	8de11e2363fc	golang.org/x/crypto@v0.17.0	0.35.0	1
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0	1
ghcr.io/predicatelabs/operator :v1.0.5	b62113fe1b27	golang.org/x/crypto@v0.31.0	0.35.0	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	golang.org/x/crypto@v0.16.0	0.35.0	1
ghcr.io/pschichtel/cert-manager-webhook-cloudns :1.1.0	1020638bbe23	golang.org/x/crypto@v0.18.0	0.35.0	1
ghcr.io/pulumi/pulumi-esc-csi-provider :0.1.1	3fb058e93502	golang.org/x/crypto@v0.31.0	0.35.0	1
ghcr.io/raffis/mongodb-query-exporter :v5.1.0	ca6ac8a5b329	golang.org/x/crypto@v0.13.0	0.35.0	1
ghcr.io/riotkit-org/backup-maker-controller :v0.1.2	62370545ba3d	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.35.0	1
ghcr.io/riotkit-org/backup-repository :v4.0.0	ab41ffa78f69	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0	1
ghcr.io/riverqueue/riverui :0.5.3	2dc54179b25a	golang.org/x/crypto@v0.22.0	0.35.0	1
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/salesforce/sloop :sha-2ce8bbe	119e24f24b1d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
ghcr.io/schmitzis/cert-manager-webhook-bunny :latest	125e31c8e85a	golang.org/x/crypto@v0.5.0	0.35.0	1
ghcr.io/sergelogvinov/keydb :6.3.3	76a19ddc3626	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.35.0	1
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	golang.org/x/crypto@v0.31.0	0.35.0	1
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
ghcr.io/shaharia-lab/teredix :0.0.2	ec727be4417a	golang.org/x/crypto@v0.17.0	0.35.0	1
ghcr.io/siderolabs/talos-backup :v0.1.0-beta.2	03a71e140f1d	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/sintef/cert-manager-webhook-gandi :0.6.0	6819b34ccac8	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/spiffe/spire-agent :1.6.0	62517726d0c4	golang.org/x/crypto@v0.6.0	0.35.0	1
ghcr.io/spiffe/spire-controller-manager :0.2.2	5e90b2d092df	golang.org/x/crypto@v0.6.0	0.35.0	1
ghcr.io/spiffe/spire-server :1.6.0	635b9024cad2	golang.org/x/crypto@v0.6.0	0.35.0	1
ghcr.io/stashed/stash :v0.42.0	3a98245a7667	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/stashed/stash-enterprise :v0.42.1	759f3850eda9	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/stashed/stash-enterprise :v0.32.0	e9bde36e34b7	golang.org/x/crypto@v0.13.0	0.35.0	1
ghcr.io/stenic/k8status :0.17.0	93298e03089e	golang.org/x/crypto@v0.24.0	0.35.0	1