CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,684; of 17,787 indexed, latest versions
Container images: 1,948; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,684 of 17,787 indexed charts deploy, on 1,948 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,948
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,684 by stars

Chart

Latest

Affected images

Radar Score

glassflow-etlglassflow

0.5.21

2 of 16 See more

glassflow-etl glassflow 0.5.21

2 of the 16 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.35.0
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

12,072

gliderglider

0.1.5

1 of 1 See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
nadoo/glider :0.16	38aadefbd607	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

894

go-file-servergo-file-server

1.0.0

1 of 2 See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,215

gofitgofit

0.0.1

1 of 1 See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/bamaas/gofit :0.0.1	32b6a174b419	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

650

gorsegorse-io

0.4.2

3 of 4 See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.35.0
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.35.0
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.35.0

Open the chart page →

4,380

Governify-Bluejaygovernify

0.1.0

1 of 12 See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

22,565

Governify-Falcongovernify

0.1.0

1 of 10 See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

24,360

jaegergpg-dev

3.3.3

2 of 5 See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.35.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

19,291

kubernetes-dashboardgpg-dev

7.5.0

3 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

3 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.7.0	60595892c2cf	golang.org/x/crypto@v0.23.0	0.35.0
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	golang.org/x/crypto@v0.21.0	0.35.0
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

6,075

metrics-servergpg-dev

3.12.1

1 of 1 See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,071

opentelemetry-demogpg-dev

0.33.8

7 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	golang.org/x/crypto@v0.27.0	0.35.0
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	golang.org/x/crypto@v0.17.0	0.35.0
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/crypto@v0.29.0	0.35.0
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/crypto@v0.25.0	0.35.0
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/crypto@v0.23.0	0.35.0
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/crypto@v0.17.0	0.35.0
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

47,117

mimir-openshift-experimentalgrafana

2.1.0

3 of 4 See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.35.0
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.35.0

Open the chart page →

17,759

prometheusgrafana-uxadax

26.0.1

6 of 6 See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/crypto@v0.28.0	0.35.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/crypto@v0.26.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

5,304

grafregistratiecomponentgrafregistratiecomponent

1.0.0

1 of 3 See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

7,510

grapple-installergrapple-installer

0.3.22

1 of 1 See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

7,935

fasttrackmlgresearch

0.1.0

1 of 1 See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gresearch/fasttrackml :latest	16d1228220fc	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,391

siembolgresearch

0.1.6

1 of 4 See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

14,312

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,589

loki-proxygroundcover

0.1.1

1 of 1 See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

2,175

tailscale-subnet-routergtaylor

1.2.1

1 of 1 See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.35.0

Open the chart page →

1,834

docker-authhalkeye

0.1.1

1 of 1 See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0

Open the chart page →

2,374

matrix-media-repohalkeye

1.0.5

1 of 1 See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

4,455

cert-manager-webhook-arvanhbahadorzadeh

0.1.1

1 of 1 See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

3,022

kubernetes-event-exporterhbahadorzadeh

0.1.0

1 of 1 See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	golang.org/x/crypto@v0.0.0-20191029031824-8986dd9e96cf	0.35.0

Open the chart page →

2,630

hdx-oss-v2hdx-oss-v2

0.8.4

1 of 5 See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/mongo :5.0.14-focal	50cae5081ab4	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

6,747

heliconehelicone

0.1.42

1 of 14 See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
supabase/gotrue :v2.91.0	7174d551d720	golang.org/x/crypto@v0.9.0	0.35.0

Open the chart page →

23,472

helm-airportshelm-airports

0.1.0

1 of 7 See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

12,696

airports-kafkahelm-airports-dan

0.1.0

1 of 2 See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

4,547

helm-airportshelm-airports-dan

0.1.0

1 of 7 See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

5,573

airports-kafkahelm-airports-kafka

0.1.0

1 of 2 See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

4,547

home-assistanthelm-chart-roei

2025.3.0

1 of 1 See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

4,646

logging-stackhelm-charts-alexis-carbillet

0.1.0

5 of 9 See more

logging-stack helm-charts-alexis-carbillet 0.1.0

5 of the 9 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0
grafana/grafana :11.1.0	079600c9517b	golang.org/x/crypto@v0.24.0	0.35.0
grafana/loki :2.6.1	1ee60f980950	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0
grafana/loki :2.8.2	b1da1d23037e	golang.org/x/crypto@v0.5.0	0.35.0
grafana/loki-canary :2.6.1	ab2a2569307b	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

12,650

monitoring-stackhelm-charts-alexis-carbillet

0.1.0

7 of 11 See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

7 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/crypto@v0.27.0	0.35.0
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/crypto@v0.8.0	0.35.0
quay.io/prometheus/node-exporter :v1.7.0	4cb2b9019f17	golang.org/x/crypto@v0.14.0	0.35.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	golang.org/x/crypto@v0.8.0	0.35.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

9,461

cortex-gatewayhelm-charts-nr

0.1.9

1 of 1 See more

cortex-gateway helm-charts-nr 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0

Open the chart page →

2,234

dregsyhelm-charts-nr

0.1.5

1 of 1 See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0

Open the chart page →

2,969

hoppscotchhelm-charts-nr

0.3.1

1 of 1 See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

3,451

k8s-cloudwatch-adapterhelm-charts-nr

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter helm-charts-nr 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

2,468

kube-benchhelm-charts-nr

0.1.17

1 of 1 See more

kube-bench helm-charts-nr 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/crypto@v0.17.0	0.35.0

Open the chart page →

1,623

labelsmanager-controllerhelm-charts-nr

1.0.4

1 of 1 See more

labelsmanager-controller helm-charts-nr 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0

Open the chart page →

2,305

listmonkhelm-charts-nr

0.1.12

1 of 1 See more

listmonk helm-charts-nr 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

2,537

node-problem-detectorhelm-charts-nr

2.3.17

1 of 1 See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

2,349

weblatehelm-charts-nr

0.3.2

1 of 3 See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.35.0

Open the chart page →

7,987

helmfile-gitops-agenthelmfile-gitops-agent

1.1.96

1 of 3 See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/helmfile/helmfile :v1.7.4	f20e612d5a98	golang.org/x/crypto@v0.24.0	0.35.0

Open the chart page →

2,597

countlyhelmforge

1.2.6

1 of 3 See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
countly/countly-server :25.05.4	e3c238248f99	golang.org/x/crypto@v0.23.0	0.35.0

Open the chart page →

18,923

gophishhelmforge

0.1.5

1 of 1 See more

gophish helmforge 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
gophish/gophish :0.12.1	8a57cd171999	golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d	0.35.0

Open the chart page →

2,819

ryothelmforge

1.0.0

1 of 2 See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

5,916

openbashelm-openbas

1.8.14

3 of 7 See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
openbas/caldera-server :5.1.0	a277796d9724	golang.org/x/crypto@v0.12.0	0.35.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.35.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

25,099

goshimmerhiveroad

0.2.14

1 of 1 See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
iotaledger/goshimmer :v0.8.6	b02a8f77474f	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0

Open the chart page →

2,544

cratedb-adapterhmdmph

0.1.0

1 of 1 See more

cratedb-adapter hmdmph 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

2,913

imageproxyhmphu

0.1.1

1 of 1 See more

imageproxy hmphu 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
willnorris/imageproxy :latest	21d0c90f4c31	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0

Open the chart page →

2,140

Container images carrying it

1,948 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
bicarus/wg-access-server :v0.8.2	06cab48e9334	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.35.0	1
binwiederhier/ntfy :v2.11.0	4a7d0f0adc6d	golang.org/x/crypto@v0.23.0	0.35.0	1
binwiederhier/ntfy :v2.6.2	83e2e43d9956	golang.org/x/crypto@v0.10.0	0.35.0	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	golang.org/x/crypto@v0.27.0	0.35.0	1
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	golang.org/x/crypto@v0.17.0	0.35.0	1
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	golang.org/x/crypto@v0.3.0	0.35.0	1
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	golang.org/x/crypto@v0.24.0	0.35.0	1
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	golang.org/x/crypto@v0.17.0	0.35.0	1
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	golang.org/x/crypto@v0.23.0	0.35.0	1
bitnamilegacy/minio :2024.12.18-debian-12-r1	c0ede65eb88e	golang.org/x/crypto@v0.27.0	0.35.0	1
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	golang.org/x/crypto@v0.27.0	0.35.0	1
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	golang.org/x/crypto@v0.25.0	0.35.0	1
bitnamilegacy/mongodb :7.0.8-debian-12-r2	3163c3842bfd	golang.org/x/crypto@v0.14.0	0.35.0	1
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
bitnamilegacy/mongodb :7.0.5-debian-11-r6	6fe59ed5d79f	golang.org/x/crypto@v0.14.0	0.35.0	1
bitnamilegacy/mongodb :4.4.5	e3c9d6b4bc92	golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5	0.35.0	1
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
bitnamilegacy/mysqld-exporter :0.14.0-debian-11-r103	04768b637c94	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	1
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	golang.org/x/crypto@v0.14.0	0.35.0	1
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0	1
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	golang.org/x/crypto@v0.32.0	0.35.0	1
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	golang.org/x/crypto@v0.14.0	0.35.0	1
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	golang.org/x/crypto@v0.25.0	0.35.0	1
bitnamilegacy/rabbitmq-cluster-operator :1.14.0-scratch-r5	67ac64a9623a	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0	1
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0	1
bitnamilegacy/thanos :0.37.1-debian-12-r0	5bf82b98c82c	golang.org/x/crypto@v0.28.0	0.35.0	1
bitnami/sealed-secrets-controller :v0.18.5	0516f987fae2	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.35.0	1
blipai/deckard :0.0.28	737d5d19a312	golang.org/x/crypto@v0.17.0	0.35.0	1
bloxstaking/ssv-node :v2.2.0	bf6d7d2fdc93	golang.org/x/crypto@v0.32.0	0.35.0	1
breton/cool :dev	41b1bb483aa2	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	1
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.35.0	1
buddyspencer/gickup :0.10.38	6b656f19b0c1	golang.org/x/crypto@v0.25.0	0.35.0	1
buddyspencer/gickup :0.10.30	9e7dbf923c12	golang.org/x/crypto@v0.22.0	0.35.0	1
buildkite/agent :3.25.0	aec38cfaae0e	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.35.0	1
bulich/domain-exporter :latest	6d0b780f7c7b	golang.org/x/crypto@v0.9.0	0.35.0	1
burningalchemist/sql_exporter :0.16.0	b8e4757c7def	golang.org/x/crypto@v0.28.0	0.35.0	1
bytesafe/bytesafe-ce :v1.0.4	ee287384c005	golang.org/x/crypto@v0.9.0	0.35.0	1
caarlos0/domain_exporter :v1.23.0	d11dec138900	golang.org/x/crypto@v0.18.0	0.35.0	1
calico/cni :v3.28.0	cef0c907b8f4	golang.org/x/crypto@v0.22.0	0.35.0	1
calico/cni :v3.28.1	e486870cfde8	golang.org/x/crypto@v0.22.0	0.35.0	1
calico/kube-controllers :v3.28.0	8f04e4772a2b	golang.org/x/crypto@v0.22.0	0.35.0	1
calico/kube-controllers :v3.28.1	eadb3a25109a	golang.org/x/crypto@v0.22.0	0.35.0	1
calico/node :v3.28.0	385bf6391fea	golang.org/x/crypto@v0.22.0	0.35.0	1
calico/node :v3.28.1	d8c644a8a3ee	golang.org/x/crypto@v0.22.0	0.35.0	1
camptocamp/bucket-cloner :latest	acfafc308d88	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.35.0	1
caroga/commentoplusplus :v1.8.7	f3233882b3bd	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	1
casbin/casdoor :v1.224.0	66f836ef778b	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0	1
casbin/casdoor :v1.753.0	770ad9ec3190	golang.org/x/crypto@v0.21.0	0.35.0	1
cbeneke/hcloud-fip-controller :v0.4.1	dc658078d7ba	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0	1