CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,684; of 17,787 indexed, latest versions
Container images: 1,948; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,684 of 17,787 indexed charts deploy, on 1,948 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,948
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,684 by stars

Chart

Latest

Affected images

Radar Score

vclustermain

0.17.0

5 of 10 See more

vcluster main 0.17.0

5 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/crypto@v0.4.0	0.35.0
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/crypto@v0.8.0	0.35.0
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

11,556

headplanenbcloud

0.1.2

1 of 4 See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
headscale/headscale :0.25.1	a7a8ae9616bb	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

7,968

netris-operatornetrisai

3.0.2

1 of 2 See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

1,588

open5gsopen5gs

2.3.4

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gradiant/open5gs-dbctl :0.10.3	332031245fce	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

9,300

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

8,767

prometheus-consul-exporterprometheus-community

1.1.1

1 of 1 See more

prometheus-consul-exporter prometheus-community 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/consul-exporter :v0.13.0	4e4cfd809e96	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

782

prometheus-json-exporterprometheus-community

0.20.1

1 of 1 See more

prometheus-json-exporter prometheus-community 0.20.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/json-exporter :v0.7.0	3a777171d39a	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

725

prometheus-smartctl-exporterprometheus-community

0.17.1

1 of 1 See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

1,064

prometheus-statsd-exporterprometheus-community

1.0.0

1 of 1 See more

prometheus-statsd-exporter prometheus-community 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

782

rke2-multusrke2-charts

3.7.1-build2021041601

1 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

4,519

popeyeself-hosters-by-night

0.6.1

1 of 1 See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

1,196

uffizzi-appuffizzi-app

1.3.0

3 of 14 See more

uffizzi-app uffizzi-app 1.3.0

3 of the 14 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

19,363

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

13,567

ansible-semaphoreansible-semaphore

0.1.0

1 of 1 See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

4,019

aperture-controlleraperture

2.34.0

2 of 5 See more

aperture-controller aperture 2.34.0

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
fluxninja/aperture-operator :2.34.0	356d7aa86632	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

4,663

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

3,300

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0

Open the chart page →

9,052

prometheusavesha

19.3.0

3 of 4 See more

prometheus avesha 19.3.0

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/crypto@v0.1.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0

Open the chart page →

5,484

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,250

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/crypto@v0.6.0	0.35.0

Open the chart page →

1,917

yatai-deploymentbentoml

1.1.21

1 of 2 See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,160

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	golang.org/x/crypto@v0.12.0	0.35.0

Open the chart page →

8,007

caddy-ingress-controllercaddy-ingress

1.3.0

1 of 1 See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,884

cert-managerchoerodon

1.8.2

3 of 4 See more

cert-manager choerodon 1.8.2

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0

Open the chart page →

7,775

popeyechristianhuth

2.4.3

1 of 1 See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

1,196

clowardenclowarden

0.2.3

1 of 4 See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

5,620

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

11 of 21 See more

coder-observability coder-observability 0.7.3

11 of the 21 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/agent :v0.40.3	f6cbec9409be	golang.org/x/crypto@v0.18.0	0.35.0
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/crypto@v0.21.0	0.35.0
grafana/loki-canary :3.1.0	39baf6d67f85	golang.org/x/crypto@v0.21.0	0.35.0
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/crypto@v0.23.0	0.35.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	golang.org/x/crypto@v0.24.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.35.0

Open the chart page →

24,698

convertigoconvertigo

8.4.3

2 of 5 See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	golang.org/x/crypto@v0.14.0	0.35.0
timescale/timescaledb :latest-pg16	289d55704b1b	golang.org/x/crypto@v0.32.0	0.35.0

Open the chart page →

17,475

cosmocosmo-platform

0.20.0

3 of 10 See more

cosmo cosmo-platform 0.20.0

3 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	golang.org/x/crypto@v0.23.0	0.35.0
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	golang.org/x/crypto@v0.31.0	0.35.0
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

27,984

dapr-dashboarddapr

0.15.0

1 of 1 See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
daprio/dashboard :0.15.0	4be696707bd1	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

1,301

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

3,451

kube-benchdeliveryhero

0.1.17

1 of 1 See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,623

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

2,537

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0

Open the chart page →

2,271

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

1 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

14,545

openshift-secured-redisInsighteximiait

0.9.2

1 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

13,874

ascii-moviegabe565

0.16.4

1 of 1 See more

ascii-movie gabe565 0.16.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/ascii-movie :1.9.6	27f85bb98da3	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

986

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.35.0

Open the chart page →

3,030

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.35.0

Open the chart page →

7,579

multusgeek-cookbook

3.5.2

1 of 3 See more

multus geek-cookbook 3.5.2

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

4,908

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

10,202

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,371

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.35.0

Open the chart page →

2,610

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0

Open the chart page →

2,234

gitvotegitvote

1.5.0

1 of 6 See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

5,627

monitoring-stackhaukitech

0.1.11

2 of 3 See more

monitoring-stack haukitech 0.1.11

2 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

2,164

home-assistanthome-assistant

0.5.10

1 of 3 See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

2,338

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

2,622

Container images carrying it

1,948 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/aktosecurity/keelhq-keel :akto_v1.0.0	1eb61443d68e	golang.org/x/crypto@v0.31.0	0.35.0	1
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	golang.org/x/crypto@v0.3.0	0.35.0	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller :v2.0.0-beta	9637c80dd23f	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0	1
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller :1.0	67b89ae52240	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-2021.08.13.20.34-linux-amd64	02aed3370fce	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
public.ecr.aws/boundless-software/switchblade :release-v0.0.19-lcm	01d8413d5075	golang.org/x/crypto@v0.19.0	0.35.0	1
public.ecr.aws/cloudnatix/llmariner/session-manager-server :0.1.0-gfu-dev	b9537499ff9e	golang.org/x/crypto@v0.33.0	0.35.0	1
public.ecr.aws/docker/library/caddy :2.6.3	87cbd356af2e	golang.org/x/crypto@v0.5.0	0.35.0	1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	golang.org/x/crypto@v0.22.0	0.35.0	1
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0	1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.35.0	1
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
public.ecr.aws/karpenter/controller :v0.19.3	f0e5ab60b2df	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0	1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.34	e97e0e7a2088	golang.org/x/crypto@v0.31.0	0.35.0	1
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	golang.org/x/crypto@v0.26.0	0.35.0	1
public.ecr.aws/optimizely/webhook-broker :v0.2.3	cfc92cc2de65	golang.org/x/crypto@v0.31.0	0.35.0	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	golang.org/x/crypto@v0.5.0	0.35.0	1
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	golang.org/x/crypto@v0.14.0	0.35.0	1
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	golang.org/x/crypto@v0.25.0	0.35.0	1
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	golang.org/x/crypto@v0.31.0	0.35.0	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	golang.org/x/crypto@v0.0.0-20220210151621-f4118a5b28e2	0.35.0	1
public.ecr.aws/v0r6c2e2/minio :latest	08c90bd040bf	golang.org/x/crypto@v0.32.0	0.35.0	1
quay.io/aerokube/moon-ui :2.0.5	89990b146824	golang.org/x/crypto@v0.10.0	0.35.0	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	golang.org/x/crypto@v0.31.0	0.35.0	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/crypto@v0.14.0	0.35.0	1
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	golang.org/x/crypto@v0.17.0	0.35.0	1
quay.io/argoprojlabs/argocd-extension-metrics :v1.0.3	0d614816c4b7	golang.org/x/crypto@v0.9.0	0.35.0	1
quay.io/argoprojlabs/argocd-operator :v0.4.0	cf8faa986789	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0	1
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	golang.org/x/crypto@v0.17.0	0.35.0	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0	1
quay.io/backube/volsync :0.16.0	0d03a6aad575	golang.org/x/crypto@v0.0.0-20220312131142-6068a2e6cfdc	0.35.0	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/crypto@v0.0.0-20220507011949-2cf3adece122	0.35.0	1
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/crypto@v0.6.0	0.35.0	1
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/crypto@v0.14.0	0.35.0	1
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/crypto@v0.14.0	0.35.0	1
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	golang.org/x/crypto@v0.19.0	0.35.0	1
quay.io/brancz/kube-rbac-proxy :v0.18.0	754ab2a723c8	golang.org/x/crypto@v0.24.0	0.35.0	1
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.35.0	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	golang.org/x/crypto@v0.17.0	0.35.0	1
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	golang.org/x/crypto@v0.17.0	0.35.0	1
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	containers-common@2:1-64.module+el8.8.0+18571+eed59fc4 criu@3.15-4.module+el8.8.0+19044+f9982fd8 fuse-overlayfs@1.11-1.module+el8.8.0+18634+9a268292 golang.org/x/crypto@v0.11.0 libslirp@4.4.0-1.module+el8.8.0+18060+3f21f2cc runc@1:1.1.4-1.module+el8.8.0+18060+3f21f2cc skopeo@2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c slirp4netns@1.2.0-2.module+el8.8.0+18060+3f21f2cc	2:1-82.module+el8.10.0+22931+799fd806 0:3.18-5.module+el8.10.0+22931+799fd806 0:1.13-1.module+el8.10.0+22931+799fd806 0.35.0 0:4.4.0-2.module+el8.10.0+22931+799fd806 1:1.1.12-6.module+el8.10.0+22931+799fd806 2:1.14.5-3.module+el8.10.0+22931+799fd806 0:1.2.3-1.module+el8.10.0+22931+799fd806	1
quay.io/coreos/etcd :v3.5.11	842975891182	golang.org/x/crypto@v0.14.0	0.35.0	1
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/crypto@v0.21.0	0.35.0	1
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
quay.io/ddn/exascaler-csi-file-driver :v2.2.6	fe2e2e5a2751	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0	1