CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,686; of 17,790 indexed, latest versions
Container images: 1,951; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,686 of 17,790 indexed charts deploy, on 1,951 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,951
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,686 by stars

Chart

Latest

Affected images

Radar Score

u4a-componentkubebb

0.2.10

4 of 8 See more

u4a-component kubebb 0.2.10

4 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubebb/iam-controller :v0.2.0-20240128	8ffbfa2d67e9	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.35.0
kubebb/iam-provider :v0.2.0-20240128	0ba03fcee3a7	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.35.0
kubebb/kube-oidc-proxy-ce :v0.3.0-20221008	58d5efec568b	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
kubebb/oidc-server :v0.2.0	2b5894ef1e2f	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.35.0

Open the chart page →

13,834

weaviatekubebb

16.3.0

1 of 1 See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
semitechnologies/weaviate :1.19.1	7a00d226f063	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

1,876

argo-workflowskubeblocks

0.40.14

2 of 2 See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

2,885

calicokubeblocks

3.28.0

3 of 3 See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.0	cef0c907b8f4	golang.org/x/crypto@v0.22.0	0.35.0
calico/kube-controllers :v3.28.0	8f04e4772a2b	golang.org/x/crypto@v0.22.0	0.35.0
calico/node :v3.28.0	385bf6391fea	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

3,308

casdoor-helm-chartskubeblocks

1.753.0

1 of 1 See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
casbin/casdoor :v1.753.0	770ad9ec3190	golang.org/x/crypto@v0.21.0	0.35.0

Open the chart page →

2,306

chaos-meshkubeblocks

2.7.2

4 of 4 See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.6	78dc63bc5b89	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	golang.org/x/crypto@v0.17.0	0.35.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	golang.org/x/crypto@v0.17.0	0.35.0
ghcr.io/chaos-mesh/chaos-mesh :v2.7.2	8bc853c7414c	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

13,572

ciliumkubeblocks

1.15.1

2 of 2 See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

5,130

geminikubeblocks

0.13.4

1 of 8 See more

gemini kubeblocks 0.13.4

1 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

3,103

gemini-schedulerkubeblocks

0.1.1

1 of 1 See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

1,419

grafanakubeblocks

6.59.4

1 of 1 See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :10.1.1	1b9ca4bbc4a2	golang.org/x/crypto@v0.11.0	0.35.0

Open the chart page →

3,568

kubetrankubeblocks

0.1.0

1 of 1 See more

kubetran kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
apecloud/kubetran-platform :latest	32bd92c7f7fa	golang.org/x/crypto@v0.13.0	0.35.0

Open the chart page →

1,207

lokikubeblocks

5.39.0

3 of 5 See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.34.1	045c9125634c	golang.org/x/crypto@v0.8.0	0.35.0
grafana/loki :2.9.2	6074e01dbe03	golang.org/x/crypto@v0.14.0	0.35.0
grafana/loki-canary :2.9.2	4249db29b992	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

5,862

metrics-serverkubeblocks

3.12.0

1 of 1 See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,137

nvidia-gpu-exporterkubeblocks

0.3.1

1 of 1 See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

4,502

openebskubeblocks

3.10.0

2 of 3 See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

10,587

postgres-operatorkubeblocks

1.12.2

1 of 1 See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

1,555

prometheuskubeblocks

15.16.1

5 of 6 See more

prometheus kubeblocks 15.16.1

5 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/alertmanager :v0.24.0	088464f949de	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

10,309

victoria-metrics-alertkubeblocks

0.8.3-reload

1 of 3 See more

victoria-metrics-alert kubeblocks 0.8.3-reload

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.35.0

Open the chart page →

3,715

kubeclaritykubeclarity

2.23.3

2 of 5 See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/crypto@v0.12.0	0.35.0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

5,520

cephfs-csikubegems

1.0.8

1 of 6 See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0

Open the chart page →

4,452

chartmuseumkubegems

3.8.0

1 of 1 See more

chartmuseum kubegems 3.8.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

3,526

gatewaykubegems

0.3.2

2 of 2 See more

gateway kubegems 0.3.2

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,505

giteakubegems

5.0.8

1 of 2 See more

gitea kubegems 5.0.8

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gitea/gitea :1.16.8	b0bdf102b485	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0

Open the chart page →

3,400

juicefs-csi-driverkubegems

0.19.2

2 of 6 See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.23.0	3e4daf9626d5	golang.org/x/crypto@v0.14.0	0.35.0
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

4,838

knative-servingkubegems

1.0.1

1 of 8 See more

knative-serving kubegems 1.0.1

1 of the 8 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	bac158dfb0c7	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0

Open the chart page →

10,469

kubegems-edgekubegems

1.24.10

1 of 1 See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

3,390

logging-operatorkubegems

3.17.6

1 of 1 See more

logging-operator kubegems 3.17.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0

Open the chart page →

1,800

prometheus-adapterkubegems

4.14.1

1 of 1 See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

937

prometheus-blackbox-exporterkubegems

7.1.3

1 of 1 See more

prometheus-blackbox-exporter kubegems 7.1.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.35.0

Open the chart page →

1,634

xpai-schedulerkubegems

1.12.1

1 of 2 See more

xpai-scheduler kubegems 1.12.1

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

2,324

gptchat-api-feishubotkubegemsapp

0.1.1

2 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

8,487

log-generatorkube-logging

0.6.0

1 of 1 See more

log-generator kube-logging 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.6.0	8324bbc0ec08	golang.org/x/crypto@v0.5.0	0.35.0

Open the chart page →

1,269

logging-demokube-logging

4.0.3

1 of 1 See more

logging-demo kube-logging 4.0.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.4.1	05aa441b20aa	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,267

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0

Open the chart page →

7,208

lokikube-ops

1.7.3

1 of 1 See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/loki :2.2.1	4fbd63194674	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

2,653

promtailkube-ops

1.5.1

1 of 2 See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/promtail :2.2.1	34de6387233b	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0

Open the chart page →

4,157

tor-proxykubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
peterdavehello/tor-socks-proxy :latest	0cc12d36d312	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

1,481

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/crypto@v0.13.0	0.35.0

Open the chart page →

3,630

harbor-operatorkubernetes-replicator

1.6.3

1 of 1 See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,205

kubernetes-secret-generatorkubernetes-replicator

3.4.1

1 of 1 See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

855

api-serverkubeshop

0.11.16

1 of 2 See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :0.11.16	0ad97f07a78b	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0

Open the chart page →

3,432

kusk-gatewaykubeshop

0.0.65

1 of 2 See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway :v1.5.4	8b5bfd57a3ce	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

1,621

testkube-logskubeshop

0.2.2

1 of 1 See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubeshop/testkube-logs-server :latest	094186b19698	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

1,286

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,562

cloudnative-pgkube-site-follower

0.23.0

1 of 1 See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

909

fluentbit-operatorkubesphere

0.1.0

1 of 2 See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubesphere/fluentbit-operator :v0.9.0	b87db3c57cb3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

2,902

gitlabkubesphere

4.2.3

5 of 17 See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.35.0
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0

Open the chart page →

38,178

harborkubesphere

1.9.3

7 of 11 See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.35.0
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	golang.org/x/crypto@v0.0.0-20220513210258-46612604a0f9	0.35.0

Open the chart page →

17,851

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0

Open the chart page →

8,580

cranekubesphere-stable

0.5.2

2 of 3 See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0
gocrane/craned :v0.5.1	a1400909118c	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.35.0

Open the chart page →

8,902

Container images carrying it

1,951 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/spiffe/spire-server :1.6.0	635b9024cad2	golang.org/x/crypto@v0.6.0	0.35.0	1
ghcr.io/stashed/stash :v0.42.0	3a98245a7667	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/stashed/stash-enterprise :v0.42.1	759f3850eda9	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/stashed/stash-enterprise :v0.32.0	e9bde36e34b7	golang.org/x/crypto@v0.13.0	0.35.0	1
ghcr.io/stenic/k8status :0.17.0	93298e03089e	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0	1
ghcr.io/streamingfast/blockmeta-service :2f971e0	4f0a86e490b6	golang.org/x/crypto@v0.17.0	0.35.0	1
ghcr.io/streamingfast/firehose-core :v1.10.2	22f84e3615c8	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.35.0	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	1
ghcr.io/substra/orchestrator-server :1.0.0	647e45284a80	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/substratusai/lingo :v0.2.1	2c807cd41ed4	golang.org/x/crypto@v0.21.0	0.35.0	1
ghcr.io/synapsecns/sanguine/agents :6e3887fc2a05aff0d159453cedbfbe5024b910bf	81a9ebc899a4	golang.org/x/crypto@v0.6.0	0.35.0	1
ghcr.io/synapsecns/sanguine/cctp-relayer :b5a1dd5288f1a18eb05994e130d626fed45a56fc	2f1408c94168	golang.org/x/crypto@v0.7.0	0.35.0	1
ghcr.io/synapsecns/sanguine/explorer :latest	00131e3d1eaf	golang.org/x/crypto@v0.33.0	0.35.0	1
ghcr.io/synapsecns/sanguine/promexporter :4a9aad096c2bd1160e56e5472ddac77fa0cde2e9	416c1c5aeb86	golang.org/x/crypto@v0.9.0	0.35.0	1
ghcr.io/synapsecns/sanguine/screener-api :latest	b3de2050460a	golang.org/x/crypto@v0.33.0	0.35.0	1
ghcr.io/synapsecns/sanguine/scribe :6e3887fc2a05aff0d159453cedbfbe5024b910bf	5e0a3dfa9f96	golang.org/x/crypto@v0.6.0	0.35.0	1
ghcr.io/synapsecns/sanguine/scribe :latest	81edba952403	golang.org/x/crypto@v0.33.0	0.35.0	1
ghcr.io/synapsecns/sanguine/sinner :latest	3e98a98f6074	golang.org/x/crypto@v0.16.0	0.35.0	1
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.35.0	1
ghcr.io/tikalk/resource-manager :latest	7f21d50e69cb	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0	1
ghcr.io/traefik/traefik-hub :v2.11.0	322f5f8cc105	golang.org/x/crypto@v0.14.0	0.35.0	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	golang.org/x/crypto@v0.26.0	0.35.0	1
ghcr.io/usememos/memos :0.24.0	4723d86e6797	golang.org/x/crypto@v0.32.0	0.35.0	1
ghcr.io/v6d-io/v6d/kube-rbac-proxy :v0.13.0	a2523c532c0c	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0	1
ghcr.io/voyagermesh/gateway-converter :v0.0.1	b92123805584	golang.org/x/crypto@v0.25.0	0.35.0	1
ghcr.io/wittdennis/homeassistant-otbr :4.2.3	1b53b0b3488e	golang.org/x/crypto@v0.31.0	0.35.0	1
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	golang.org/x/crypto@v0.31.0	0.35.0	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	golang.org/x/crypto@v0.24.0	0.35.0	1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator :v1.0.8	31060be60bec	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	golang.org/x/crypto@v0.31.0	0.35.0	1
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	golang.org/x/crypto@v0.23.0	0.35.0	1
ghcr.io/zeiss/natz-operator/account-server :0.9.5	b380b5f17c3f	golang.org/x/crypto@v0.33.0	0.35.0	1
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	golang.org/x/crypto@v0.33.0	0.35.0	1
ghcr.io/zeiss/typhoon/controller :0.2.3	4fdf4edfda45	golang.org/x/crypto@v0.33.0	0.35.0	1
ghcr.io/zoriya/kyoo_transcoder :4.7.1	2dadea51a91e	golang.org/x/crypto@v0.31.0	0.35.0	1
mcr.microsoft.com/aks/kaito/gpu-provisioner :0.2.0	1204a7e948e9	golang.org/x/crypto@v0.18.0	0.35.0	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	1
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	golang.org/x/crypto@v0.6.0	0.35.0	1
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	golang.org/x/crypto@v0.6.0	0.35.0	1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0	1