StackRadar

CVE-2025-22871

Critical

Advisory

Published 8 Apr 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,750
of 17,813 indexed, latest versions
Container images
3,294
deployed by those charts
Fix available
9 of 10
affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 2,750 of 17,813 indexed charts deploy, on 3,294 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
skopeorpm2:1.11.2-0.1.el9, 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.11.2-0.1.el9_2.3, 2:1.11.3-0.1.module+el8.8.0+23219+eb2ac2282
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-67.module+el8.8.0+22334+bb93e3981
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.15-4.module+el8.8.0+22334+bb93e3981
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.11-1.module+el8.8.0+22334+bb93e3981
git-lfsrpm2.13.3-3.el8_60:3.4.1-5.el8_101
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-1.module+el8.8.0+22334+bb93e3981
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.8.0+22334+bb93e3981
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.0-3.module+el8.8.0+22334+bb93e3981
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+151 more1.23.83,294
OSV records
DEBIAN-CVE-2025-22871RHSA-2025:9018RHSA-2025:9025RHSA-2025:9060GO-2025-3563
Also known as
BIT-golang-2025-22871, GHSA-g9pc-8g42-g6vq, RHSA-2025:9142, RHSA-2025:9145, RHSA-2025:9199

Charts affected

2,750 by stars
ChartLatestAffected imagesRadar Score
knativemesosphere-stable1.10.87 of 7See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
stdlib@go1.20.4
1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
stdlib@go1.20.4
1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
stdlib@go1.20.4
1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
stdlib@go1.20.4
1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.10.2f66c41ad7a73
stdlib@go1.20.4
1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.10.27368aaddf2be
stdlib@go1.20.4
1.23.8
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.10.24305209ce498
stdlib@go1.20.4
1.23.8

Open the chart page →

7,529
kommandermesosphere-stable0.39.219 of 29See more

kommander mesosphere-stable 0.39.2

19 of the 29 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
grafana/grafana:6.6.0052147d7e0ec
stdlib@go1.13.4
1.23.8
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.23.8
mesosphere/karma:v0.55-d2iq-proxy4693bb4e0814
stdlib@go1.13.7
1.23.8
mesosphere/kommander-federation-authorizedlister:v0.21.263bc411b930b
stdlib@go1.14.5
1.23.8
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
stdlib@go1.14.5
1.23.8
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
stdlib@go1.14.5
1.23.8
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
stdlib@go1.14.5
1.23.8
mesosphere/kommander-licensing-controller-manager:v0.21.28e18bbe407f7
stdlib@go1.14.5
1.23.8
mesosphere/kommander-licensing-webhook:v0.21.2265edcd2a1ca
stdlib@go1.14.5
1.23.8
mesosphere/kubeaddons-addon-initializer:v0.2.8c10011f866f2
stdlib@go1.13.8
1.23.8
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
stdlib@go1.15.2
1.23.8
prom/prometheus:v2.19.2cd134bd4fca0
stdlib@go1.14.4
1.23.8
thanosio/thanos:v0.19.088276fcd1491
stdlib@go1.15.10
1.23.8
thanosio/thanos:v0.15.0b12d5c31bf5a
stdlib@go1.14.2
1.23.8
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
stdlib@go1.16.4
1.23.8
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
stdlib@go1.16.4
1.23.8
quay.io/kubernetes-multicluster/kubefed:v0.7.06d56f69b15a3
stdlib@go1.15.3
1.23.8
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
stdlib@go1.14.4
1.23.8
quay.io/thanos/thanos:v0.17.1e362f02ed304
stdlib@go1.15
1.23.8

Open the chart page →

68,465
kube-prometheus-stackmesosphere-stable75.9.12 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.23.8
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
stdlib@go1.23.7
1.23.8

Open the chart page →

10,580
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.2.09f863160127b
stdlib@go1.13.7
1.23.8

Open the chart page →

7,033
veleromesosphere-stable3.2.51 of 1See more

velero mesosphere-stable 3.2.5

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
stdlib@go1.19.8
1.23.8

Open the chart page →

1,871
cortexmetakube0.6.01 of 2See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
stdlib@go1.16.3
1.23.8

Open the chart page →

4,116
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
stdlib@go1.17.3
1.23.8

Open the chart page →

8,972
wg-access-servermglants0.4.71 of 1See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
stdlib@go1.13.8
1.23.8

Open the chart page →

2,753
gogsmhio0.9.21 of 2See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
gogs/gogs:0.12.1420d53bb7277
stdlib@go1.14.7
1.23.8

Open the chart page →

3,232
postgresmicroboxlabs0.3.01 of 1See more

postgres microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
library/postgres:16.6557fea37a744
stdlib@go1.18.2
1.23.8

Open the chart page →

3,961
kube-agent-chartmiddleware-labsVerified publisher0.1.21 of 1See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
stdlib@go1.18.9
1.23.8

Open the chart page →

1,808
middleware-odigosmiddleware-labsVerified publisher0.2.414 of 6See more

middleware-odigos middleware-labs 0.2.41

4 of the 6 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-autoscaler:middleware-test-0.0.14aac0389614e4
stdlib@go1.18.10
1.23.8
ghcr.io/middleware-labs/odigos-instrumentor:middleware-test-0.0.104ae1fc698a5
stdlib@go1.18.10
1.23.8
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
stdlib@go1.19.6
1.23.8
ghcr.io/middleware-labs/odigos-scheduler:middleware-test-0.0.109741c86aee7
stdlib@go1.18.10
1.23.8

Open the chart page →

8,385
middleware-visionmiddleware-labsVerified publisher0.2.654 of 6See more

middleware-vision middleware-labs 0.2.65

4 of the 6 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-autoscaler:middleware-test-0.0.231f7f89bc6585
stdlib@go1.18.10
1.23.8
ghcr.io/middleware-labs/vision-instrumentor:middleware-test-0.0.4dfa5907170c4
stdlib@go1.18.10
1.23.8
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
stdlib@go1.19.7
1.23.8
ghcr.io/middleware-labs/vision-scheduler:middleware-test-0.0.33609a075c825
stdlib@go1.18.10
1.23.8

Open the chart page →

8,377
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.61 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

1 of the 6 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-lang-aggregator:0.1.0ae6e13970ec2
stdlib@go1.24.0
1.23.8

Open the chart page →

3,755
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
stdlib@go1.20.14
1.23.8

Open the chart page →

1,611
sshportalmidokura-communityVerified publisher0.1.41 of 2See more

sshportal midokura-community 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
moul/sshportal:v1.19.3332b603727c3
stdlib@go1.17.6
1.23.8

Open the chart page →

2,339
argocd-extra-app-info-exportermikejohVerified publisher0.1.121 of 1See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
stdlib@go1.23.4
1.23.8

Open the chart page →

1,365
imaginemikejohVerified publisher0.2.01 of 1See more

imagine mikejoh 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
mikejoh/imagine:0.1.078737d7345f9
stdlib@go1.23.3
1.23.8

Open the chart page →

559
local-path-provisionermikejohVerified publisher0.0.291 of 1See more

local-path-provisioner mikejoh 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.299bebefa0b908
stdlib@go1.22.5
1.23.8

Open the chart page →

1,301
miniomilvus-helm8.0.201 of 1See more

minio milvus-helm 8.0.20

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-05-28T17-19-04Z391d1d45fdbe
stdlib@go1.22.3
1.23.8

Open the chart page →

1,685
pulsarv2milvus-helm2.7.82 of 4See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
stdlib@go1.13.10
1.23.8
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
stdlib@go1.13.4
1.23.8

Open the chart page →

15,885
zkapps-dashboardminaVerified publisher0.1.21 of 2See more

zkapps-dashboard mina 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
library/postgres:12-alpine7c8f48705831
stdlib@go1.18.2
1.23.8

Open the chart page →

1,672
minio-operatorminio-operator4.3.71 of 2See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
stdlib@go1.17.4
1.23.8

Open the chart page →

6,088
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
stdlib@go1.19.7
1.23.8

Open the chart page →

10,793
standard-application-stackmintel11.5.01 of 12See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
stdlib@go1.19.7
1.23.8

Open the chart page →

10,702
jupyterhubmizzoukube0.0.1-set.by.chartpress1 of 7See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
stdlib@go1.21.7
1.23.8

Open the chart page →

1,897
cert-manager-webhook-duckdnsmmontesVerified publisher1.2.31 of 1See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
ebrianne/cert-manager-webhook-duckdns:v1.2.39cd17700c9ec
stdlib@go1.15.13
1.23.8

Open the chart page →

2,855
cockroachdb-operatormmontesVerified publisher0.1.01 of 1See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
cockroachdb/cockroach-operator:v2.1.0983312754620
stdlib@go1.13.14
1.23.8

Open the chart page →

7,800
echoperatormmontesVerified publisher0.0.21 of 1See more

echoperator mmontes 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
ghcr.io/mmontes11/echoperator:v0.0.4a544a71c6e3b
stdlib@go1.18.3
1.23.8

Open the chart page →

1,827
mariadbmmontesVerified publisher0.3.01 of 1See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
library/mariadb:10.7.307e06f2e7ae9
stdlib@go1.16.7
1.23.8

Open the chart page →

10,135
mongodbmmontesVerified publisher0.5.01 of 1See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
library/mongo:4.4.1305678ae4e5e1
stdlib@go1.16.7
1.23.8

Open the chart page →

7,172
basic-git-servermoikot0.0.21 of 1See more

basic-git-server moikot 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
moikot/basic-git-server:0.0.20d941bd30ffa
stdlib@go1.14.9
1.23.8

Open the chart page →

2,955
corednsmoikot1.13.31 of 1See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
coredns/coredns:1.7.073ca82b4ce82
stdlib@go1.14.4
1.23.8

Open the chart page →

2,555
smartthings-metricsmoikot0.1.01 of 1See more

smartthings-metrics moikot 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
moikot/smartthings-metrics:0.1.08625f53aa9b7
stdlib@go1.14.13
1.23.8

Open the chart page →

1,745
smartthings-metrics-feat-log-detailsmoikot0.0.921 of 1See more

smartthings-metrics-feat-log-details moikot 0.0.92

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
moikot/smartthings-metrics:feat-log-detailsfb8565140106
stdlib@go1.14.15
1.23.8

Open the chart page →

1,733
docker-registrymoinologics0.1.11 of 1See more

docker-registry moinologics 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
library/registry:2a3d8aaa63ed8
stdlib@go1.20.8
1.23.8

Open the chart page →

550
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
stdlib@go1.18.7
1.23.8

Open the chart page →

2,471
backendmojaloop0.1.04 of 6See more

backend mojaloop 0.1.0

4 of the 6 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
stdlib@go1.18.2
1.23.8
bitnamilegacy/kafka-exporter-archived:1.3.2e527fbf75dce
stdlib@go1.17
1.23.8
bitnamilegacy/mysqld-exporter:0.13.0a7e14cc919cb
stdlib@go1.16.4
1.23.8
bitnamilegacy/zookeeper:3.7.2-debian-11-r5cbf54314c401
stdlib@go1.21.5
1.23.8

Open the chart page →

16,349
reporting-nifi-processor-svcmojaloop0.0.21 of 3See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
library/mongo:6.0.271a63fc2438e
stdlib@go1.17.10
1.23.8

Open the chart page →

6,245
mongodb-query-exportermongodb-query-exporterVerified publisher5.1.01 of 1See more

mongodb-query-exporter mongodb-query-exporter 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
ghcr.io/raffis/mongodb-query-exporter:v5.1.0ca6ac8a5b329
stdlib@go1.20.5
1.23.8

Open the chart page →

989
mongodb-secure-backupmongodb-secure-backup1.0.01 of 2See more

mongodb-secure-backup mongodb-secure-backup 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
arconixforge/mongodb-secure-backup:v1.1c08d7c438966
stdlib@go1.22.10
1.23.8

Open the chart page →

1,034
camera-viewermoreillonVerified publisher0.2.11 of 4See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
stdlib@go1.17.10
1.23.8

Open the chart page →

11,797
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
stdlib@go1.17.10
1.23.8

Open the chart page →

8,584
mqtt-loggermoreillonVerified publisher0.3.12 of 5See more

mqtt-logger moreillon 0.3.1

2 of the 5 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
stdlib@go1.19.6
1.23.8
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
stdlib@go1.17.10
1.23.8

Open the chart page →

11,037
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.23.8

Open the chart page →

26,090
backupmorremeyer4.0.01 of 1See more

backup morremeyer 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
restic/restic:0.15.2579e4e6a4931
stdlib@go1.19.8
1.23.8

Open the chart page →

2,303
hcloud-ccm-networksmorremeyer2.0.01 of 1See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.16.08c07e6d7a76c
stdlib@go1.20.5
1.23.8

Open the chart page →

1,754
hcloud-csi-drivermorremeyer3.0.06 of 6See more

hcloud-csi-driver morremeyer 3.0.0

6 of the 6 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:v2.3.2b7ed90d5fab2
stdlib@go1.19.7
1.23.8
registry.k8s.io/sig-storage/csi-attacher:v4.1.008721106b949
stdlib@go1.19
1.23.8
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.7.04a4cae5118c4
stdlib@go1.19
1.23.8
registry.k8s.io/sig-storage/csi-provisioner:v3.4.0e468dddcd275
stdlib@go1.19
1.23.8
registry.k8s.io/sig-storage/csi-resizer:v1.7.03a7bdf5d1057
stdlib@go1.19
1.23.8
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
stdlib@go1.19
1.23.8

Open the chart page →

7,192
chirpstackmosquitto-helm-chart0.5.03 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

3 of the 8 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
chirpstack/chirpstack-application-server:3fb7667fe037f
stdlib@go1.19.3
1.23.8
chirpstack/chirpstack-network-server:3c0bbbb7a3f1e
stdlib@go1.19.3
1.23.8
oliver006/redis_exporter:v1.14.0d55e056987af
stdlib@go1.15.6
1.23.8

Open the chart page →

101,376
chirpstack-event-forwardmosquitto-helm-chart0.1.21 of 1See more

chirpstack-event-forward mosquitto-helm-chart 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22871.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/chirpstack-event-forward:v0.1.223dc6274cc4b
stdlib@go1.17.10
1.23.8

Open the chart page →

1,855

Container images carrying it

3,294 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/slskd/slskd:0.25.1ab9ed50e028b
stdlib@go1.22.2
1.23.8
1
ghcr.io/snapp-incubator/health-exporter:0.3.252a0d8f6278c
stdlib@go1.17.2
1.23.8
1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
stdlib@go1.23.3
1.23.8
1
ghcr.io/spiffe/spiffe-csi-driver:0.2.34144101005b2
stdlib@go1.20.1
1.23.8
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
stdlib@go1.20.1
1.23.8
1
ghcr.io/spiffe/spire-controller-manager:0.2.25e90b2d092df
stdlib@go1.20.1
1.23.8
1
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
stdlib@go1.20.1
1.23.8
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
stdlib@go1.23.3
1.23.8
1
ghcr.io/stashed/stash-crd-installer:v0.32.0c6f2a844b5dd
stdlib@go1.20.8
1.23.8
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
stdlib@go1.23.3
1.23.8
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
stdlib@go1.20.7
1.23.8
1
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
stdlib@go1.17.9
1.23.8
1
ghcr.io/stenic/sql-operator:1.13.2f4324baa2aad
stdlib@go1.17.13
1.23.8
1
ghcr.io/storax/kubedoom:0.6.0851ba8c80b93
stdlib@go1.17.6
1.23.8
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
stdlib@go1.22.1
1.23.8
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
stdlib@go1.18.5
1.23.8
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
stdlib@go1.18.5
1.23.8
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
stdlib@go1.18.5
1.23.8
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
stdlib@go1.18.5
1.23.8
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
stdlib@go1.18.5
1.23.8
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
stdlib@go1.22.9
1.23.8
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
stdlib@go1.22.9
1.23.8
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
stdlib@go1.18.10
1.23.8
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
stdlib@go1.18.10
1.23.8
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
stdlib@go1.21.13
1.23.8
1
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
stdlib@go1.22.5
1.23.8
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
stdlib@go1.20.3
1.23.8
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
stdlib@go1.20.5
1.23.8
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
stdlib@go1.22.4
1.23.8
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
stdlib@go1.20.6
1.23.8
1
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
stdlib@go1.22.4
1.23.8
1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
stdlib@go1.20.3
1.23.8
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
stdlib@go1.22.4
1.23.8
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
stdlib@go1.20.14
1.23.8
1
ghcr.io/tailscale/tailscale:v1.34.1ce1862e6b3a5
stdlib@go1.19.2-ts3fd24dee31
1.23.8
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
stdlib@go1.23.4
1.23.8
1
ghcr.io/tarampampam/error-pages:2.6.013e73da04ee4
stdlib@go1.17.6
1.23.8
1
ghcr.io/taskmedia/kubectl-gpg-ncftp:main0fb2b5584f7c
stdlib@go1.22.10
1.23.8
1
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
stdlib@go1.18.2
1.23.8
1
ghcr.io/tikalk/resource-manager:latest7f21d50e69cb
stdlib@go1.19
1.23.8
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
stdlib@go1.22.5
1.23.8
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
stdlib@go1.22.8
1.23.8
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
stdlib@go1.21.8
1.23.8
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
stdlib@go1.23.7
1.23.8
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
stdlib@go1.23.7
1.23.8
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
stdlib@go1.23.7
1.23.8
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
stdlib@go1.22.8
1.23.8
1
ghcr.io/twin/k8s-ttl-controller:v1.4.00525a7def93d
stdlib@go1.24.1
1.23.8
1
ghcr.io/twin/lighthouse:v0.0.45aeda2ea2ba2
stdlib@go1.22.3
1.23.8
1
ghcr.io/usememos/memos:0.24.04723d86e6797
stdlib@go1.23.6
1.23.8
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.