CVE-2025-22871

Critical

Advisory

Published 8 Apr 2025In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,750; of 17,813 indexed, latest versions
Container images: 3,294; deployed by those charts
Fix available: 9 of 10; affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 2,750 of 17,813 indexed charts deploy, on 3,294 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
skopeorpm	2:1.11.2-0.1.el9, 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.11.2-0.1.el9_2.3, 2:1.11.3-0.1.module+el8.8.0+23219+eb2ac228	2
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-67.module+el8.8.0+22334+bb93e398	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.15-4.module+el8.8.0+22334+bb93e398	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.11-1.module+el8.8.0+22334+bb93e398	1
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-5.el8_10	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-1.module+el8.8.0+22334+bb93e398	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-1.module+el8.8.0+22334+bb93e398	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.0-3.module+el8.8.0+22334+bb93e398	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+151 more	1.23.8	3,294

OSV records: DEBIAN-CVE-2025-22871 RHSA-2025:9018 RHSA-2025:9025 RHSA-2025:9060 GO-2025-3563
Also known as: BIT-golang-2025-22871, GHSA-g9pc-8g42-g6vq, RHSA-2025:9142, RHSA-2025:9145, RHSA-2025:9199

Charts affected

2,750 by stars

Chart

Latest

Affected images

Radar Score

knativemesosphere-stable

1.10.8

7 of 7 See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.10.2	c2994c2b6c2c	stdlib@go1.20.4	1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.10.2	8319aa662b49	stdlib@go1.20.4	1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa :v1.10.2	eb612b929eaa	stdlib@go1.20.4	1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	stdlib@go1.20.4	1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.10.2	f66c41ad7a73	stdlib@go1.20.4	1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.10.2	7368aaddf2be	stdlib@go1.20.4	1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.10.2	4305209ce498	stdlib@go1.20.4	1.23.8

Open the chart page →

7,529

kommandermesosphere-stable

0.39.2

19 of 29 See more

kommander mesosphere-stable 0.39.2

19 of the 29 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	stdlib@go1.13.4	1.23.8
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.23.8
mesosphere/karma :v0.55-d2iq-proxy	4693bb4e0814	stdlib@go1.13.7	1.23.8
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	stdlib@go1.14.5	1.23.8
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	stdlib@go1.14.5	1.23.8
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	stdlib@go1.14.5	1.23.8
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	stdlib@go1.14.5	1.23.8
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	stdlib@go1.14.5	1.23.8
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	stdlib@go1.14.5	1.23.8
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	stdlib@go1.13.8	1.23.8
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	stdlib@go1.15.2	1.23.8
prom/prometheus :v2.19.2	cd134bd4fca0	stdlib@go1.14.4	1.23.8
thanosio/thanos :v0.19.0	88276fcd1491	stdlib@go1.15.10	1.23.8
thanosio/thanos :v0.15.0	b12d5c31bf5a	stdlib@go1.14.2	1.23.8
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	stdlib@go1.16.4	1.23.8
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	stdlib@go1.16.4	1.23.8
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	stdlib@go1.15.3	1.23.8
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	stdlib@go1.14.4	1.23.8
quay.io/thanos/thanos :v0.17.1	e362f02ed304	stdlib@go1.15	1.23.8

Open the chart page →

68,465

kube-prometheus-stackmesosphere-stable

75.9.1

2 of 7 See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	stdlib@go1.21.7	1.23.8
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	stdlib@go1.23.7	1.23.8

Open the chart page →

10,580

opsportalmesosphere-stable

0.9.5

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	stdlib@go1.13.7	1.23.8

Open the chart page →

7,033

veleromesosphere-stable

3.2.5

1 of 1 See more

velero mesosphere-stable 3.2.5

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.26.4	a0a972324d93	stdlib@go1.19.8	1.23.8

Open the chart page →

1,871

cortexmetakube

0.6.0

1 of 2 See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	stdlib@go1.16.3	1.23.8

Open the chart page →

4,116

istio-operatormetakube

1.12.0

1 of 1 See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
istio/operator :1.12.0	6cfce8a071b9	stdlib@go1.17.3	1.23.8

Open the chart page →

8,972

wg-access-servermglants

0.4.7

1 of 1 See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	stdlib@go1.13.8	1.23.8

Open the chart page →

2,753

gogsmhio

0.9.2

1 of 2 See more

3,232

postgresmicroboxlabs

0.3.0

1 of 1 See more

postgres microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
library/postgres :16.6	557fea37a744	stdlib@go1.18.2	1.23.8

Open the chart page →

3,961

kube-agent-chartmiddleware-labs

0.1.2

1 of 1 See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	stdlib@go1.18.9	1.23.8

Open the chart page →

1,808

middleware-odigosmiddleware-labs

0.2.41

4 of 6 See more

middleware-odigos middleware-labs 0.2.41

4 of the 6 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	stdlib@go1.18.10	1.23.8
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	stdlib@go1.18.10	1.23.8
ghcr.io/middleware-labs/odigos-odiglet :middleware-test-0.0.1	03c8c835ecee	stdlib@go1.19.6	1.23.8
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	stdlib@go1.18.10	1.23.8

Open the chart page →

8,385

middleware-visionmiddleware-labs

0.2.65

4 of 6 See more

middleware-vision middleware-labs 0.2.65

4 of the 6 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	stdlib@go1.18.10	1.23.8
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	stdlib@go1.18.10	1.23.8
ghcr.io/middleware-labs/vision-odiglet :middleware-test-0.0.3	bce34c98668e	stdlib@go1.19.7	1.23.8
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	stdlib@go1.18.10	1.23.8

Open the chart page →

8,377

mw-autoinstrumentationmiddleware-labs

1.2.6

1 of 6 See more

mw-autoinstrumentation middleware-labs 1.2.6

1 of the 6 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-lang-aggregator :0.1.0	ae6e13970ec2	stdlib@go1.24.0	1.23.8

Open the chart page →

3,755

mw-kube-agentmiddleware-labs

0.1.2

1 of 1 See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	stdlib@go1.20.14	1.23.8

Open the chart page →

1,611

sshportalmidokura-community

0.1.4

1 of 2 See more

sshportal midokura-community 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
moul/sshportal :v1.19.3	332b603727c3	stdlib@go1.17.6	1.23.8

Open the chart page →

2,339

argocd-extra-app-info-exportermikejoh

0.1.12

1 of 1 See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
mikejoh/argocd-extra-app-info-exporter :0.2.0	5c5a3b734271	stdlib@go1.23.4	1.23.8

Open the chart page →

1,365

imaginemikejoh

0.2.0

1 of 1 See more

imagine mikejoh 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
mikejoh/imagine :0.1.0	78737d7345f9	stdlib@go1.23.3	1.23.8

Open the chart page →

559

local-path-provisionermikejoh

0.0.29

1 of 1 See more

local-path-provisioner mikejoh 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	stdlib@go1.22.5	1.23.8

Open the chart page →

1,301

miniomilvus-helm

8.0.20

1 of 1 See more

minio milvus-helm 8.0.20

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-05-28T17-19-04Z	391d1d45fdbe	stdlib@go1.22.3	1.23.8

Open the chart page →

1,685

pulsarv2milvus-helm

2.7.8

2 of 4 See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	stdlib@go1.13.10	1.23.8
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	stdlib@go1.13.4	1.23.8

Open the chart page →

15,885

zkapps-dashboardmina

0.1.2

1 of 2 See more

zkapps-dashboard mina 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
library/postgres :12-alpine	7c8f48705831	stdlib@go1.18.2	1.23.8

Open the chart page →

1,672

minio-operatorminio-operator

4.3.7

1 of 2 See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	stdlib@go1.17.4	1.23.8

Open the chart page →

6,088

aws-api-gateway-operatormintel

0.1.2

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	stdlib@go1.19.7	1.23.8

Open the chart page →

10,793

standard-application-stackmintel

11.5.0

1 of 12 See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	stdlib@go1.19.7	1.23.8

Open the chart page →

10,702

jupyterhubmizzoukube

0.0.1-set.by.chartpress

1 of 7 See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	stdlib@go1.21.7	1.23.8

Open the chart page →

1,897

cert-manager-webhook-duckdnsmmontes

1.2.3

1 of 1 See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	stdlib@go1.15.13	1.23.8

Open the chart page →

2,855

cockroachdb-operatormmontes

0.1.0

1 of 1 See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-operator :v2.1.0	983312754620	stdlib@go1.13.14	1.23.8

Open the chart page →

7,800

echoperatormmontes

0.0.2

1 of 1 See more

echoperator mmontes 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/mmontes11/echoperator :v0.0.4	a544a71c6e3b	stdlib@go1.18.3	1.23.8

Open the chart page →

1,827

mariadbmmontes

0.3.0

1 of 1 See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
library/mariadb :10.7.3	07e06f2e7ae9	stdlib@go1.16.7	1.23.8

Open the chart page →

10,135

mongodbmmontes

0.5.0

1 of 1 See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
library/mongo :4.4.13	05678ae4e5e1	stdlib@go1.16.7	1.23.8

Open the chart page →

7,172

basic-git-servermoikot

0.0.2

1 of 1 See more

basic-git-server moikot 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
moikot/basic-git-server :0.0.2	0d941bd30ffa	stdlib@go1.14.9	1.23.8

Open the chart page →

2,955

corednsmoikot

1.13.3

1 of 1 See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
coredns/coredns :1.7.0	73ca82b4ce82	stdlib@go1.14.4	1.23.8

Open the chart page →

2,555

smartthings-metricsmoikot

0.1.0

1 of 1 See more

smartthings-metrics moikot 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
moikot/smartthings-metrics :0.1.0	8625f53aa9b7	stdlib@go1.14.13	1.23.8

Open the chart page →

1,745

smartthings-metrics-feat-log-detailsmoikot

0.0.92

1 of 1 See more

smartthings-metrics-feat-log-details moikot 0.0.92

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
moikot/smartthings-metrics :feat-log-details	fb8565140106	stdlib@go1.14.15	1.23.8

Open the chart page →

1,733

docker-registrymoinologics

0.1.1

1 of 1 See more

docker-registry moinologics 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
library/registry :2	a3d8aaa63ed8	stdlib@go1.20.8	1.23.8

Open the chart page →

550

pritunl-vpnmoinologics

0.0.1

1 of 1 See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
goofball222/pritunl :1.32.3602.80	7bf26032dfce	stdlib@go1.18.7	1.23.8

Open the chart page →

2,471

backendmojaloop

0.1.0

4 of 6 See more

backend mojaloop 0.1.0

4 of the 6 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	stdlib@go1.18.2	1.23.8
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	stdlib@go1.17	1.23.8
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	stdlib@go1.16.4	1.23.8
bitnamilegacy/zookeeper :3.7.2-debian-11-r5	cbf54314c401	stdlib@go1.21.5	1.23.8

Open the chart page →

16,349

reporting-nifi-processor-svcmojaloop

0.0.2

1 of 3 See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
library/mongo :6.0.2	71a63fc2438e	stdlib@go1.17.10	1.23.8

Open the chart page →

6,245

mongodb-query-exportermongodb-query-exporter

5.1.0

1 of 1 See more

mongodb-query-exporter mongodb-query-exporter 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/raffis/mongodb-query-exporter :v5.1.0	ca6ac8a5b329	stdlib@go1.20.5	1.23.8

Open the chart page →

989

mongodb-secure-backupmongodb-secure-backup

1.0.0

1 of 2 See more

mongodb-secure-backup mongodb-secure-backup 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	stdlib@go1.22.10	1.23.8

Open the chart page →

1,034

camera-viewermoreillon

0.2.1

1 of 4 See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	stdlib@go1.17.10	1.23.8

Open the chart page →

11,797

face-recognitionmoreillon

0.2.4

1 of 3 See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	stdlib@go1.17.10	1.23.8

Open the chart page →

8,584

mqtt-loggermoreillon

0.3.1

2 of 5 See more

mqtt-logger moreillon 0.3.1

2 of the 5 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	stdlib@go1.19.6	1.23.8
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	stdlib@go1.17.10	1.23.8

Open the chart page →

11,037

user-manager-mongodbmoreillon

0.6.2

1 of 4 See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.23.8

Open the chart page →

26,090

backupmorremeyer

4.0.0

1 of 1 See more

backup morremeyer 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
restic/restic :0.15.2	579e4e6a4931	stdlib@go1.19.8	1.23.8

Open the chart page →

2,303

hcloud-ccm-networksmorremeyer

2.0.0

1 of 1 See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	stdlib@go1.20.5	1.23.8

Open the chart page →

1,754

hcloud-csi-drivermorremeyer

3.0.0

6 of 6 See more

hcloud-csi-driver morremeyer 3.0.0

6 of the 6 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-csi-driver :v2.3.2	b7ed90d5fab2	stdlib@go1.19.7	1.23.8
registry.k8s.io/sig-storage/csi-attacher :v4.1.0	08721106b949	stdlib@go1.19	1.23.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	stdlib@go1.19	1.23.8
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	stdlib@go1.19	1.23.8
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	stdlib@go1.19	1.23.8
registry.k8s.io/sig-storage/livenessprobe :v2.9.0	2b10b24dafdc	stdlib@go1.19	1.23.8

Open the chart page →

7,192

chirpstackmosquitto-helm-chart

0.5.0

3 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

3 of the 8 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3	fb7667fe037f	stdlib@go1.19.3	1.23.8
chirpstack/chirpstack-network-server :3	c0bbbb7a3f1e	stdlib@go1.19.3	1.23.8
oliver006/redis_exporter :v1.14.0	d55e056987af	stdlib@go1.15.6	1.23.8

Open the chart page →

101,376

chirpstack-event-forwardmosquitto-helm-chart

0.1.2

1 of 1 See more

chirpstack-event-forward mosquitto-helm-chart 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	stdlib@go1.17.10	1.23.8

Open the chart page →

1,855

Container images carrying it

3,294 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.61.2	f04925fe1fa6	stdlib@go1.22.4	1.23.8	1
ghcr.io/netsoc/iamd :1.1.2	2fe6b69b20d7	stdlib@go1.16.6	1.23.8	1
ghcr.io/netsoc/shhd :0.1.6	0bb44992b62c	stdlib@go1.17	1.23.8	1
ghcr.io/netsoc/webspaced :0.5.1	edc238a538a0	stdlib@go1.16.8	1.23.8	1
ghcr.io/nicholaswilde/golinks :version-154c581	8e67b26324c5	stdlib@go1.16.5	1.23.8	1
ghcr.io/nicholaswilde/installer :version-0.2.9	47d8ecd310a9	stdlib@go1.15.3	1.23.8	1
ghcr.io/nicholaswilde/notes :version-ee287b9	ab9bc16465bc	stdlib@go1.16.5	1.23.8	1
ghcr.io/nicholaswilde/olivetin :version-2021-07-19	e1d5c8a01008	stdlib@go1.16.5	1.23.8	1
ghcr.io/nicholaswilde/shiori :version-v1.5.0	e0645abe6777	stdlib@go1.16.5	1.23.8	1
ghcr.io/nicholaswilde/static :version-ee8a20c	d1d47c730bc4	stdlib@go1.16.5	1.23.8	1
ghcr.io/nicholaswilde/todo :941c0d3-ls1	d7ba1341a940	stdlib@go1.14.15	1.23.8	1
ghcr.io/nicholaswilde/twtxt :version-0.1.1	58736a73ca10	stdlib@go1.16.5	1.23.8	1
ghcr.io/nicholaswilde/wiki :version-900b76a	6c4f261d8f5e	stdlib@go1.16.5	1.23.8	1
ghcr.io/nicholaswilde/writefreely :version-0.13.1	c3c8481b7e56	stdlib@go1.15.12	1.23.8	1
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent :0.1.0	e0c7cf2415f0	stdlib@go1.17.6	1.23.8	1
ghcr.io/nlamirault/bbox_exporter :1.0.0	f5dd1f7794c6	stdlib@go1.18.3	1.23.8	1
ghcr.io/nlamirault/freebox-exporter :1.0.0	2d522b664e12	stdlib@go1.19.2	1.23.8	1
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	stdlib@go1.19.4	1.23.8	1
ghcr.io/nousefreak/clusterfan :v0.1.0	4ea05e2a7b57	stdlib@go1.17.5	1.23.8	1
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	stdlib@go1.23.5	1.23.8	1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	stdlib@go1.17.6	1.23.8	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	stdlib@go1.22.6	1.23.8	1
ghcr.io/okteto/okteto :3.22.0	4585017f52f6	stdlib@go1.24.0	1.23.8	1
ghcr.io/oliverbaehler/cloudflare-tunnel-ingress-controller :0.2.3	0aec31e36d95	stdlib@go1.23.7	1.23.8	1
ghcr.io/olivetin/olivetin :2025.2.19	a89958921526	stdlib@go1.22.0	1.23.8	1
ghcr.io/onedr0p/exportarr :v1.6.1	60cf3d44aa0b	stdlib@go1.21.6	1.23.8	1
ghcr.io/openappsec/smartsync :latest	580d68c50cc7	stdlib@go1.18.10	1.23.8	1
ghcr.io/openappsec/smartsync-shared-files :latest	30c1daa0b33e	stdlib@go1.18.10	1.23.8	1
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	stdlib@go1.20.4	1.23.8	1
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	stdlib@go1.21.6	1.23.8	1
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	stdlib@go1.21.6	1.23.8	1
ghcr.io/openfaas/cron-connector :0.7.0	982498e8a41e	stdlib@go1.23.5	1.23.8	1
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	stdlib@go1.23.4	1.23.8	1
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	stdlib@go1.21.5	1.23.8	1
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	stdlib@go1.22.1	1.23.8	1
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	stdlib@go1.23.5	1.23.8	1
ghcr.io/openfaasltd/rabbitmq-connector :0.1.2	349f7dca95ec	stdlib@go1.23.5	1.23.8	1
ghcr.io/openfaasltd/sns-connector :0.2.0	e9ab76a4ec77	stdlib@go1.21.7	1.23.8	1
ghcr.io/openfaasltd/sqs-connector :0.3.4	d44ed3b3128c	stdlib@go1.23.5	1.23.8	1
ghcr.io/openfaas/mqtt-connector :0.4.3	3311a30b8fe6	stdlib@go1.18.5	1.23.8	1
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	stdlib@go1.18.5	1.23.8	1
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.23.8	1
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	stdlib@go1.22.5	1.23.8	1
ghcr.io/openstack-exporter/openstack-exporter :1.7.0	e5146a7dd515	stdlib@go1.18.10	1.23.8	1
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	stdlib@go1.22.8	1.23.8	1
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	stdlib@go1.22.8	1.23.8	1
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	stdlib@go1.21.5	1.23.8	1
ghcr.io/ot-container-kit/redis-operator/redis-operator :v0.18.0	90bfeb2e0d71	stdlib@go1.21.12	1.23.8	1
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	stdlib@go1.15.12	1.23.8	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	stdlib@go1.19.8	1.23.8	1