CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,684; of 17,787 indexed, latest versions
Container images: 1,948; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,684 of 17,787 indexed charts deploy, on 1,948 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,948
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,684 by stars

Chart

Latest

Affected images

Radar Score

glassflow-etlglassflow

0.5.21

2 of 16 See more

glassflow-etl glassflow 0.5.21

2 of the 16 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.35.0
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

12,072

gliderglider

0.1.5

1 of 1 See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
nadoo/glider :0.16	38aadefbd607	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

894

go-file-servergo-file-server

1.0.0

1 of 2 See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,215

gofitgofit

0.0.1

1 of 1 See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/bamaas/gofit :0.0.1	32b6a174b419	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

650

gorsegorse-io

0.4.2

3 of 4 See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.35.0
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.35.0
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.35.0

Open the chart page →

4,380

Governify-Bluejaygovernify

0.1.0

1 of 12 See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

22,565

Governify-Falcongovernify

0.1.0

1 of 10 See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

24,360

jaegergpg-dev

3.3.3

2 of 5 See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.35.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

19,291

kubernetes-dashboardgpg-dev

7.5.0

3 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

3 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.7.0	60595892c2cf	golang.org/x/crypto@v0.23.0	0.35.0
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	golang.org/x/crypto@v0.21.0	0.35.0
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

6,075

metrics-servergpg-dev

3.12.1

1 of 1 See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,071

opentelemetry-demogpg-dev

0.33.8

7 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	golang.org/x/crypto@v0.27.0	0.35.0
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	golang.org/x/crypto@v0.17.0	0.35.0
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/crypto@v0.29.0	0.35.0
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/crypto@v0.25.0	0.35.0
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/crypto@v0.23.0	0.35.0
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

47,117

mimir-openshift-experimentalgrafana

2.1.0

3 of 4 See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.35.0
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.35.0

Open the chart page →

17,759

prometheusgrafana-uxadax

26.0.1

6 of 6 See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/crypto@v0.26.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

5,304

grafregistratiecomponentgrafregistratiecomponent

1.0.0

1 of 3 See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,510

grapple-installergrapple-installer

0.3.22

1 of 1 See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

7,935

fasttrackmlgresearch

0.1.0

1 of 1 See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gresearch/fasttrackml :latest	16d1228220fc	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,391

siembolgresearch

0.1.6

1 of 4 See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

14,312

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,589

loki-proxygroundcover

0.1.1

1 of 1 See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

2,175

tailscale-subnet-routergtaylor

1.2.1

1 of 1 See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.35.0

Open the chart page →

1,834

docker-authhalkeye

0.1.1

1 of 1 See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0

Open the chart page →

2,374

matrix-media-repohalkeye

1.0.5

1 of 1 See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

4,455

cert-manager-webhook-arvanhbahadorzadeh

0.1.1

1 of 1 See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,022

kubernetes-event-exporterhbahadorzadeh

0.1.0

1 of 1 See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	golang.org/x/crypto@v0.0.0-20191029031824-8986dd9e96cf	0.35.0

Open the chart page →

2,630

hdx-oss-v2hdx-oss-v2

0.8.4

1 of 5 See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/mongo :5.0.14-focal	50cae5081ab4	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

6,747

heliconehelicone

0.1.42

1 of 14 See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
supabase/gotrue :v2.91.0	7174d551d720	golang.org/x/crypto@v0.9.0	0.35.0

Open the chart page →

23,472

helm-airportshelm-airports

0.1.0

1 of 7 See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

12,696

airports-kafkahelm-airports-dan

0.1.0

1 of 2 See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

4,547

helm-airportshelm-airports-dan

0.1.0

1 of 7 See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

5,573

airports-kafkahelm-airports-kafka

0.1.0

1 of 2 See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

4,547

home-assistanthelm-chart-roei

2025.3.0

1 of 1 See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

4,646

logging-stackhelm-charts-alexis-carbillet

0.1.0

5 of 9 See more

logging-stack helm-charts-alexis-carbillet 0.1.0

5 of the 9 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0
grafana/grafana :11.1.0	079600c9517b	golang.org/x/crypto@v0.24.0	0.35.0
grafana/loki :2.6.1	1ee60f980950	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0
grafana/loki :2.8.2	b1da1d23037e	golang.org/x/crypto@v0.5.0	0.35.0
grafana/loki-canary :2.6.1	ab2a2569307b	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

12,650

monitoring-stackhelm-charts-alexis-carbillet

0.1.0

7 of 11 See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

7 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/crypto@v0.27.0	0.35.0
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/crypto@v0.8.0	0.35.0
quay.io/prometheus/node-exporter :v1.7.0	4cb2b9019f17	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	golang.org/x/crypto@v0.8.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

9,461

cortex-gatewayhelm-charts-nr

0.1.9

1 of 1 See more

cortex-gateway helm-charts-nr 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0

Open the chart page →

2,234

dregsyhelm-charts-nr

0.1.5

1 of 1 See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

2,969

hoppscotchhelm-charts-nr

0.3.1

1 of 1 See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

3,451

k8s-cloudwatch-adapterhelm-charts-nr

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter helm-charts-nr 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

2,468

kube-benchhelm-charts-nr

0.1.17

1 of 1 See more

kube-bench helm-charts-nr 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,623

labelsmanager-controllerhelm-charts-nr

1.0.4

1 of 1 See more

labelsmanager-controller helm-charts-nr 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0

Open the chart page →

2,305

listmonkhelm-charts-nr

0.1.12

1 of 1 See more

listmonk helm-charts-nr 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

2,537

node-problem-detectorhelm-charts-nr

2.3.17

1 of 1 See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,349

weblatehelm-charts-nr

0.3.2

1 of 3 See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.35.0

Open the chart page →

7,987

helmfile-gitops-agenthelmfile-gitops-agent

1.1.96

1 of 3 See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/helmfile/helmfile :v1.7.4	f20e612d5a98	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

2,597

countlyhelmforge

1.2.6

1 of 3 See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
countly/countly-server :25.05.4	e3c238248f99	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

18,923

gophishhelmforge

0.1.5

1 of 1 See more

gophish helmforge 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gophish/gophish :0.12.1	8a57cd171999	golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d	0.35.0

Open the chart page →

2,819

ryothelmforge

1.0.0

1 of 2 See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

5,916

openbashelm-openbas

1.8.14

3 of 7 See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openbas/caldera-server :5.1.0	a277796d9724	golang.org/x/crypto@v0.12.0	0.35.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.35.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

25,099

goshimmerhiveroad

0.2.14

1 of 1 See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
iotaledger/goshimmer :v0.8.6	b02a8f77474f	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

2,544

cratedb-adapterhmdmph

0.1.0

1 of 1 See more

cratedb-adapter hmdmph 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,913

imageproxyhmphu

0.1.1

1 of 1 See more

imageproxy hmphu 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
willnorris/imageproxy :latest	21d0c90f4c31	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0

Open the chart page →

2,140

Container images carrying it

1,948 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
alpine/k8s :1.32.3	eec354133193	golang.org/x/crypto@v0.32.0	0.35.0	1
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/crypto@v0.13.0	0.35.0	1
altinity/clickhouse-operator :0.16.1	db7dde971407	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.35.0	1
amazon/aws-otel-collector :v0.27.0	d8ab0eef5074	golang.org/x/crypto@v0.1.0	0.35.0	1
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	golang.org/x/crypto@v0.14.0	0.35.0	1
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1
ambassador/aes-authsvc :v4.0.0-preview.1	2a4598b03a6a	golang.org/x/crypto@v0.10.0	0.35.0	1
ambassador/aes-wafsvc :v4.0.0-preview.1	5fc571509b8c	golang.org/x/crypto@v0.10.0	0.35.0	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
anchore/kai :v0.5.0	8aad6d0912dd	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0	1
andrcuns/smocker :0.18.5	b4a8eb20581a	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.35.0	1
ansgroup/cert-manager-webhook-safedns :v1.0.1	cd6b0ef2b309	golang.org/x/crypto@v0.0.0-20191202143827-86a70503ff7e	0.35.0	1
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
apache/camel-k :1.10.4	3bb13d14f64a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
apache/shardingsphere-operator :0.3.0	ffe68d6b99c0	golang.org/x/crypto@v0.6.0	0.35.0	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0	1
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.35.0	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0	1
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.35.0	1
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	golang.org/x/crypto@v0.26.0	0.35.0	1
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	golang.org/x/crypto@v0.17.0	0.35.0	1
apecloud/kubetran-platform :latest	32bd92c7f7fa	golang.org/x/crypto@v0.13.0	0.35.0	1
apecloud/pyroscope :0.37.2	dbca95a15bc1	golang.org/x/crypto@v0.1.0	0.35.0	1
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	golang.org/x/crypto@v0.22.0	0.35.0	1
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.35.0	1
aquasec/kube-bench :v0.6.17	6672264accce	golang.org/x/crypto@v0.4.0	0.35.0	1
aquasec/kube-bench :v0.6.9	c329d73fea58	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
aquasec/postee :2.12.0-amd64	0795cba777e7	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0	1
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0	1
aquasec/trivy :0.43.1	944a04445179	golang.org/x/crypto@v0.10.0	0.35.0	1
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0	1
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	golang.org/x/crypto@v0.32.0	0.35.0	1
aristidetm/basic-notebook :3.6.5	469dbc951224	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
artifacthub/db-migrator :v1.23.0	28c13565ac5c	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
artifacthub/db-migrator :v1.19.0	2a746b289fcd	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
artifacthub/hub :v1.19.0	111918d8c399	golang.org/x/crypto@v0.24.0	0.35.0	1
artifacthub/scanner :v1.19.0	323d026e78c3	golang.org/x/crypto@v0.24.0	0.35.0	1
artifacthub/tracker :v1.19.0	6596c8c4d955	golang.org/x/crypto@v0.24.0	0.35.0	1
arunvelsriram/utils :latest	655ad18fd8d6	golang.org/x/crypto@v0.22.0	0.35.0	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
astarte/astarte-kubernetes-operator :26.5.1	e3ff1b3c0c98	golang.org/x/crypto@v0.28.0	0.35.0	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	golang.org/x/crypto@v0.22.0	0.35.0	1
baserow/baserow :1.30.1	df0c42eb67e8	golang.org/x/crypto@v0.14.0	0.35.0	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	1
beopenit/door-helm :v3.0.1	b4d9f9bee224	golang.org/x/crypto@v0.13.0	0.35.0	1
beopenit/onboarding-operator-kubernetes :v3.0.2	75a48144e682	golang.org/x/crypto@v0.0.0-20220314234659-1baeb1ce4c0b	0.35.0	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
bicarus/mx-notifier :1.1.8	bed688d16762	golang.org/x/crypto@v0.3.0	0.35.0	1