CVE-2025-22869

High

Advisory

Published 26 Feb 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,665; of 17,781 indexed, latest versions
Container images: 1,928; deployed by those charts
Fix available: 8 of 8; affected packages

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

Carried by container images the latest versions of 1,665 of 17,781 indexed charts deploy, on 1,928 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+137 more	0.35.0	1,928
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+22931+799fd806	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+22931+799fd806	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+22931+799fd806	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+22931+799fd806	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-6.module+el8.10.0+22931+799fd806	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-3.module+el8.10.0+22931+799fd806	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+22931+799fd806	1

OSV records: GHSA-hcg3-q754-cr77 RHSA-2025:3210
Also known as: GO-2025-3487, RHSA-2025:3268

Charts affected

1,665 by stars

Chart

Latest

Affected images

Radar Score

voice-biometricslumenvox

2.0.1

5 of 26 See more

voice-biometrics lumenvox 2.0.1

5 of the 26 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
library/traefik :v2.5	7d5a6ae66572	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.35.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.35.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.35.0

Open the chart page →

70,741

mattermost-enterprise-editionmattermost

2.6.103

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.35.0

Open the chart page →

3,600

traefik-forward-authmesosphere

0.3.10

2 of 2 See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.35.0

Open the chart page →

5,308

subspacemglants

0.1.0

1 of 1 See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.35.0

Open the chart page →

3,254

mw-kube-agent-v2middleware-labs

2.8.6

1 of 1 See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/crypto@v0.30.0	0.35.0

Open the chart page →

4,137

chartmuseummike7515

1.2.0

1 of 1 See more

chartmuseum mike7515 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0

Open the chart page →

3,168

miniomilvus

8.0.17

1 of 1 See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.35.0

Open the chart page →

6,915

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.35.0

Open the chart page →

13,738

maddymya

22.4.12

1 of 2 See more

maddy mya 22.4.12

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.7.1	6ab538e2f28b	golang.org/x/crypto@v0.18.0	0.35.0

Open the chart page →

1,412

nats-account-servernats

0.8.1

1 of 1 See more

nats-account-server nats 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
natsio/nats-account-server :1.0.0	a3381560aab6	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

2,634

natz-operatornatz-operator

0.9.5

1 of 1 See more

natz-operator natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	golang.org/x/crypto@v0.33.0	0.35.0

Open the chart page →

745

clowder2ncsa

1.9.7

2 of 12 See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	golang.org/x/crypto@v0.17.0	0.35.0
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0

Open the chart page →

37,373

ngrok-operatorngrok-operator

1.1.0

1 of 2 See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

1,896

node-exporternode-exporter

0.1.10

1 of 1 See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/crypto@v0.8.0	0.35.0

Open the chart page →

1,229

octopuso7studios-octopus-helm-charts

1.2.3

1 of 5 See more

octopus o7studios-octopus-helm-charts 1.2.3

1 of the 5 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.18.0	abdc9f9f0120	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

6,091

oadaoada

5.0.5

1 of 11 See more

oada oada 5.0.5

1 of the 11 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.35.0

Open the chart page →

13,317

transfer.shobeone

1.0.5

1 of 1 See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	golang.org/x/crypto@v0.14.0	0.35.0

Open the chart page →

1,171

orbitalregorbitalreg

0.3.0

1 of 4 See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
orbitalreg/orbitalreg-api :0.1.0	45f2620337af	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

2,278

kubernetes-dashboard-proxyosc

0.7.2

2 of 4 See more

kubernetes-dashboard-proxy osc 0.7.2

2 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.7.0	2e500d29e9d5	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0
quay.io/oauth2-proxy/oauth2-proxy :v7.1.3	ecd26b74a01f	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0

Open the chart page →

6,005

hlf-caowkin

2.1.0

1 of 2 See more

hlf-ca owkin 2.1.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/crypto@v0.0.0-20201117144127-c1f2f97bffc9	0.35.0

Open the chart page →

3,424

hlf-ordowkin

3.1.0

1 of 1 See more

hlf-ord owkin 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/crypto@v0.0.0-20200221231518-2aa609cf4a9d	0.35.0

Open the chart page →

3,350

hlf-peerowkin

5.1.0

1 of 1 See more

hlf-peer owkin 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/crypto@v0.0.0-20200221231518-2aa609cf4a9d	0.35.0

Open the chart page →

3,688

ngrok-operatorpaganuzzi

0.0.2

1 of 1 See more

ngrok-operator paganuzzi 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.35.0

Open the chart page →

2,811

patch-operatorpatch-operator

0.1.11

2 of 2 See more

patch-operator patch-operator 0.1.11

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.35.0

Open the chart page →

7,807

spirephilips-labs

0.12.2

3 of 6 See more

spire philips-labs 0.12.2

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/spiffe/spire-agent :1.6.0	62517726d0c4	golang.org/x/crypto@v0.6.0	0.35.0
ghcr.io/spiffe/spire-controller-manager :0.2.2	5e90b2d092df	golang.org/x/crypto@v0.6.0	0.35.0
ghcr.io/spiffe/spire-server :1.6.0	635b9024cad2	golang.org/x/crypto@v0.6.0	0.35.0

Open the chart page →

7,236

chadbotphntom

0.2.3

1 of 1 See more

chadbot phntom 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/chadbot :0.2.3	97c28e4178ad	golang.org/x/crypto@v0.10.0	0.35.0

Open the chart page →

1,103

chartmuseumphntom

4.0.20

1 of 1 See more

chartmuseum phntom 4.0.20

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
phntom/chartmuseum :v0.16.0	53883b65d9b7	golang.org/x/crypto@v0.9.0	0.35.0

Open the chart page →

2,939

pipelinewise-operatorpipelinewise-operator

0.5.1

1 of 1 See more

pipelinewise-operator pipelinewise-operator 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dirathea/pipelinewise-operator :v0.5.0	8d4c9f773ae1	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0

Open the chart page →

2,121

secrets-store-csi-driver-provider-awsportefaix-hub

0.4.0

1 of 1 See more

secrets-store-csi-driver-provider-aws portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-2021.08.13.20.34-linux-amd64	02aed3370fce	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0

Open the chart page →

2,206

postgres-backuppostgres-backup

0.3.0

1 of 2 See more

postgres-backup postgres-backup 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
nerzhul/mc-arm64 :2020.10.03	4215df511f31	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.35.0

Open the chart page →

5,462

rethinkdbpozetron

1.1.9

1 of 1 See more

rethinkdb pozetron 1.1.9

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
pozetroninc/rethinkdb-cluster :v2.4.1	6b06a098f994	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.35.0

Open the chart page →

2,912

home-assistantpree-helm-charts

1.80.0

1 of 1 See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.9.2	a1bc133af84e	golang.org/x/crypto@v0.26.0	0.35.0

Open the chart page →

2,133

prometheus-pingmesh-exporterprometheus-community

0.5.0

1 of 1 See more

prometheus-pingmesh-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
dongjiang1989/pingmesh-agent :v1.2.2	c82de0272da0	golang.org/x/crypto@v0.28.0	0.35.0

Open the chart page →

848

prometheusprometheus-worawutchan

13.0.0

3 of 6 See more

prometheus prometheus-worawutchan 13.0.0

3 of the 6 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.35.0
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.35.0

Open the chart page →

9,939

kubernetes-dashboardpyalive-cdmswebapp

5.8.0

1 of 1 See more

kubernetes-dashboard pyalive-cdmswebapp 5.8.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.6.1	290bebc3cd96	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.35.0

Open the chart page →

1,662

phpqonstrukt

0.2.0

1 of 1 See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
qonstrukt/php :8.4-v8-apache	089af7925aa1	golang.org/x/crypto@v0.0.0-20200403201458-baeed622b8d8	0.35.0

Open the chart page →

23,964

velero-s3-deploymentradar-base

0.4.2

2 of 4 See more

velero-s3-deployment radar-base 0.4.2

2 of the 4 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
velero/velero :v1.9.0	277fbfaf8dcf	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.35.0

Open the chart page →

4,798

rclonerclone

2.2.0

1 of 1 See more

rclone rclone 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
rclone/rclone :1.68	74c51b8817e5	golang.org/x/crypto@v0.25.0	0.35.0

Open the chart page →

1,672

backup-repository-serverriotkit-org

4.0.0

1 of 1 See more

backup-repository-server riotkit-org 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/riotkit-org/backup-repository :v4.0.0	ab41ffa78f69	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.35.0

Open the chart page →

2,049

rke2-canalrke2-charts

3.13.3

2 of 2 See more

rke2-canal rke2-charts 3.13.3

2 of the 2 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
rancher/hardened-calico :v3.13.3	6d2cd61a338b	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.35.0
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.35.0

Open the chart page →

6,996

cloudflare-tunnelrlex

0.8.0

1 of 1 See more

cloudflare-tunnel rlex 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2023.10.0	c18744ae1767	golang.org/x/crypto@v0.11.0	0.35.0

Open the chart page →

1,684

hcloud-fip-controllerrlex

0.2.5

1 of 1 See more

hcloud-fip-controller rlex 0.2.5

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
cbeneke/hcloud-fip-controller :v0.4.1	dc658078d7ba	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.35.0

Open the chart page →

2,962

prometheus-webhook-dingtalkrlex

0.0.3

1 of 1 See more

prometheus-webhook-dingtalk rlex 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
timonwong/prometheus-webhook-dingtalk :v1.4.0	a0fcc028bd8d	golang.org/x/crypto@v0.0.0-20191205180655-e7c4368fe9dd	0.35.0

Open the chart page →

1,852

grafanaromanow-helm-charts

1.7.1

1 of 1 See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
grafana/grafana :8.3.4	cf81d2c753c8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0

Open the chart page →

2,835

jaeger-collectorromanow-helm-charts

1.5.0

1 of 1 See more

jaeger-collector romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.41.0	ff81f0a9f63c	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0

Open the chart page →

1,854

jaeger-queryromanow-helm-charts

1.5.0

1 of 1 See more

jaeger-query romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-query :1.41.0	b636f0f464bc	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.35.0

Open the chart page →

1,797

node-exporterromanow-helm-charts

1.7.1

1 of 1 See more

node-exporter romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0

Open the chart page →

844

prometheusromanow-helm-charts

1.7.2

1 of 1 See more

prometheus romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.52.0	5c435642ca4d	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

1,143

routehub-client-hubroutehub-helm

1.0.0

1 of 3 See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg16	d7db8f1085a3	golang.org/x/crypto@v0.22.0	0.35.0

Open the chart page →

12,930

kyoorubxkube

0.1.10

1 of 9 See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2025-22869.

Container image	Digest	Package	Fixed in
ghcr.io/zoriya/kyoo_transcoder :4.7.1	2dadea51a91e	golang.org/x/crypto@v0.31.0	0.35.0

Open the chart page →

30,234

Container images carrying it

1,928 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mongo :5.0.6-focal	8e70544b6c76	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.35.0	10
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.35.0	9
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	8
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.35.0	8
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.35.0	8
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.35.0	8
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.35.0	7
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.35.0	7
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.35.0	7
quay.io/thanos/thanos :v0.37.2	4ec6df40fdb9	golang.org/x/crypto@v0.28.0	0.35.0	7
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.35.0	6
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71	0.35.0	6
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.35.0	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.35.0	6
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	6
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.35.0	6
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.35.0	6
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	6
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0	6
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.35.0	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.35.0	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/crypto@v0.24.0	0.35.0	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.35.0	6
keelhq/keel :latest	73714afb4443	golang.org/x/crypto@v0.31.0	0.35.0	5
library/mongo :4.4	4be76f674fc4	golang.org/x/crypto@v0.25.0	0.35.0	5
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/crypto@v0.13.0	0.35.0	5
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56	0.35.0	5
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.35.0	5
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.35.0	5
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.35.0	5
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.35.0	4
grafana/loki :2.6.1	1ee60f980950	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.35.0	4
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	4
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	4
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.35.0	4
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.35.0	4
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.35.0	4
library/mongo :4.4.6	6efa05203990	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.35.0	4
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/crypto@v0.18.0	0.35.0	4
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.35.0	4
ghcr.io/synapsecns/sanguine/omnirpc :latest	5217e3d1fc70	golang.org/x/crypto@v0.33.0	0.35.0	4
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/crypto@v0.13.0	0.35.0	4
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/crypto@v0.13.0	0.35.0	4
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/crypto@v0.13.0	0.35.0	4
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.35.0	4
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.35.0	4
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	3
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.35.0	3
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.35.0	3
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/crypto@v0.14.0	0.35.0	3