Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.127.1	c3c4a9de2a0b	stdlib@go1.19.8	1.23.9
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	stdlib@go1.23.6	1.23.9
ghcr.io/element-hq/ess-helm/matrix-tools :0.3.2	0eac0521be29	stdlib@go1.23.7	1.23.9

Open the chart page →

9,328

resource-binding-operatorrock8s

0.1.0

1 of 1 See more

resource-binding-operator rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/resource-binding-operator :0.1.0	63cf51392ce7	stdlib@go1.19.13	1.23.9

Open the chart page →

917

reviewboardrock8s

0.0.1

1 of 3 See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
beanbag/reviewboard :latest	6b840f546e1c	stdlib@go1.18.1	1.23.9

Open the chart page →

6,202

zentaorock8s

0.0.1

1 of 1 See more

zentao rock8s 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
easysoft/quickon-zentao :18.5	592ad5df1f8b	stdlib@go1.20.3	1.23.9

Open the chart page →

1,535

monitoringrocketchat-server

0.0.17

2 of 9 See more

monitoring rocketchat-server 0.0.17

2 of the 9 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/grafana-operator :v5.18.0	0af2faec9d6f	stdlib@go1.24.2	1.23.9
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	stdlib@go1.23.7	1.23.9

Open the chart page →

6,887

ai-agentromholdings

0.0.1

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	stdlib@go1.22.4	1.23.9

Open the chart page →

9,703

argocdromholdings

1.8.1

2 of 3 See more

argocd romholdings 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	stdlib@go1.14.12	1.23.9
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	stdlib@go1.14.9	1.23.9

Open the chart page →

10,484

argocd-certificate-refreshromholdings

0.10.8

1 of 1 See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	stdlib@go1.17.13	1.23.9

Open the chart page →

13,033

argo-workflowromholdings

0.1.6

1 of 1 See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	stdlib@go1.19.8	1.23.9

Open the chart page →

1,587

calertromholdings

0.0.1

1 of 1 See more

calert romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	stdlib@go1.18	1.23.9

Open the chart page →

4,699

calicoromholdings

0.1.1

4 of 4 See more

calico romholdings 0.1.1

4 of the 4 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	stdlib@go1.15.2	1.23.9
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	stdlib@go1.15.2	1.23.9
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	stdlib@go1.15.2	1.23.9
quay.io/devtron/calico-networking :pod2daemon-flexvol-v3.19.1	c1f36b6e18e0	stdlib@go1.15.2	1.23.9

Open the chart page →

10,094

clairromholdings

0.1.14

1 of 2 See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	stdlib@go1.17.6	1.23.9

Open the chart page →

6,237

devtron-enterpriseromholdings

48.0.0

15 of 28 See more

devtron-enterprise romholdings 48.0.0

15 of the 28 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	stdlib@go1.18.2	1.23.9
quay.io/devtron/casbin :172ef62b-9450794d-464-39422	5bf041aacadd	stdlib@go1.24.0	1.23.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.23.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	stdlib@go1.16.6	1.23.9
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	stdlib@go1.20.10	1.23.9
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	stdlib@go1.14.15	1.23.9
quay.io/devtron/kubectl :latest	2ad610626658	stdlib@go1.18.5	1.23.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	stdlib@go1.19.9	1.23.9
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.23.9
quay.io/devtron/nats-box :latest	48cdd3054b20	stdlib@go1.19.2	1.23.9
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.23.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.23.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	stdlib@go1.17.6	1.23.9
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.23.9
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	stdlib@go1.21.5	1.23.9

Open the chart page →

68,765

devtron-in-clustercdromholdings

0.10.2

2 of 2 See more

devtron-in-clustercd romholdings 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	stdlib@go1.15.7	1.23.9
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	stdlib@go1.20.7	1.23.9

Open the chart page →

5,055

devtron-logs-dumpromholdings

0.1.0

1 of 1 See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	stdlib@go1.20.4	1.23.9

Open the chart page →

4,979

devtron-operatorromholdings

0.23.3

7 of 11 See more

devtron-operator romholdings 0.23.3

7 of the 11 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	stdlib@go1.18.2	1.23.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.23.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	stdlib@go1.16.6	1.23.9
quay.io/devtron/kubectl :latest	2ad610626658	stdlib@go1.18.5	1.23.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	stdlib@go1.19.9	1.23.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.23.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	stdlib@go1.17.6	1.23.9

Open the chart page →

33,219

dgraphromholdings

0.0.20

1 of 1 See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	stdlib@go1.17.3	1.23.9

Open the chart page →

11,981

discord-alertmanagerromholdings

0.10.0

1 of 1 See more

discord-alertmanager romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/discord-alertmanager :ceceb475-65-352	03586419ca31	stdlib@go1.18.1	1.23.9

Open the chart page →

951

jcmhproxy-ingressromholdings

0.14.6

1 of 1 See more

jcmhproxy-ingress romholdings 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	stdlib@go1.19.13	1.23.9

Open the chart page →

1,379

kube-prometheus-stackromholdings

19.3.0

3 of 6 See more

kube-prometheus-stack romholdings 19.3.0

3 of the 6 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	stdlib@go1.17	1.23.9
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	stdlib@go1.16	1.23.9
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	stdlib@go1.16.7	1.23.9

Open the chart page →

8,659

migration-incluster-cdromholdings

0.10.0

1 of 1 See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.23.9

Open the chart page →

3,927

securityromholdings

0.2.2

1 of 1 See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	stdlib@go1.16.10	1.23.9

Open the chart page →

2,442

winter-soldierromholdings

0.10.6

1 of 1 See more

winter-soldier romholdings 0.10.6

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	stdlib@go1.18.10	1.23.9

Open the chart page →

1,176

zincromholdings

0.1.2

1 of 1 See more

zinc romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	stdlib@go1.19.7	1.23.9

Open the chart page →

1,514

controllerrookout

0.2.56

1 of 1 See more

controller rookout 0.2.56

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	stdlib@go1.20.5	1.23.9

Open the chart page →

1,967

datastorerookout

0.1.48

1 of 1 See more

datastore rookout 0.1.48

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rookout/data-on-prem :latest	51c0fce64467	stdlib@go1.20.5	1.23.9

Open the chart page →

1,948

operatorrookout

0.0.20

1 of 2 See more

operator rookout 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rookout/k8s-operator :latest	0d083f3ef1a7	stdlib@go1.15.15	1.23.9

Open the chart page →

2,209

rookout-hybridrookout

0.3.1

2 of 2 See more

rookout-hybrid rookout 0.3.1

2 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	stdlib@go1.20.5	1.23.9
rookout/data-on-prem :latest	51c0fce64467	stdlib@go1.20.5	1.23.9

Open the chart page →

3,915

routehub-serverroutehub-helm

1.0.1

1 of 3 See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
eqalpha/keydb :latest	6537505c4235	stdlib@go1.16.7	1.23.9

Open the chart page →

6,978

routr-connectroutr

0.4.3

1 of 10 See more

routr-connect routr 0.4.3

1 of the 10 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
fonoster/routr-edgeport :2.13.6	d08a8a574a50	stdlib@go1.21.0	1.23.9

Open the chart page →

11,025

chainrss3

0.1.28

5 of 8 See more

chain rss3 0.1.28

5 of the 8 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rss3/op-batcher :d2c5ced00901227473fc196fda838191f0cb4e02	e8adc09d9c07	stdlib@go1.21.3	1.23.9
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	stdlib@go1.21.7	1.23.9
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	stdlib@go1.21.3	1.23.9
rss3/op-proposer :d2c5ced00901227473fc196fda838191f0cb4e02	96672897ba9e	stdlib@go1.21.3	1.23.9
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	stdlib@go1.21.3	1.23.9

Open the chart page →

8,532

noderss3

0.7.2

1 of 3 See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.23.9

Open the chart page →

4,742

op-batcherrss3

0.1.0

1 of 2 See more

op-batcher rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	stdlib@go1.21.3	1.23.9

Open the chart page →

1,251

op-proposerrss3

0.1.0

1 of 2 See more

op-proposer rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	stdlib@go1.21.3	1.23.9

Open the chart page →

1,251

proxydrss3

0.1.0

1 of 1 See more

proxyd rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	stdlib@go1.21.3	1.23.9

Open the chart page →

2,110

vsl-chainrss3

0.1.0

4 of 7 See more

vsl-chain rss3 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-22873.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	stdlib@go1.21.3	1.23.9
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	stdlib@go1.21.7	1.23.9
rss3/op-node :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	45b91380bbe7	stdlib@go1.21.3	1.23.9
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	stdlib@go1.21.3	1.23.9

Open the chart page →

6,048

Container images carrying it

3,319 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
fluxninja/aperture-operator :2.34.0	356d7aa86632	stdlib@go1.21.5	1.23.9	1
fonoster/routr-edgeport :2.13.6	d08a8a574a50	stdlib@go1.21.0	1.23.9	1
foomo/csp-reporter :1.3.0	e436da524785	stdlib@go1.18	1.23.9	1
forchaladtest/mygowiki :1.0.1	70827eaecad1	stdlib@go1.22.6	1.23.9	1
foundationdb/fdb-kubernetes-operator :v2.3.0	7d7b6985291e	stdlib@go1.23.7	1.23.9	1
foxcpp/maddy :0.7.1	6ab538e2f28b	stdlib@go1.19.13	1.23.9	1
foxcpp/maddy :v0.5.2	8fa2bd8f6830	stdlib@go1.17.2	1.23.9	1
gabekangas/owncast :0.0.7	97461aedb580	stdlib@go1.15.2	1.23.9	1
galaxy/cloudman-server :latest	e5c265fe9fcd	stdlib@go1.17.13	1.23.9	1
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	stdlib@go1.22.7	1.23.9	1
garugaru/presto-exporter :cb666560e9e82d5ae36aef1e663c3d7f51cca9fc	5201314c28f3	stdlib@go1.14.13	1.23.9	1
garugaru/presto-loadbalancer :v0.1.5	89d66d117029	stdlib@go1.15.2	1.23.9	1
gboxproxy/gbox :v1.0.6	3a9f4a711d5c	stdlib@go1.17.9	1.23.9	1
geonetwork/gn-cloud-ogc-api-records-service :4.2.8-0	20c9bb761f67	stdlib@go1.19.11	1.23.9	1
gesellix/couchdb-prometheus-exporter :v27.2.0	5b891f1fc2b9	stdlib@go1.13.10	1.23.9	1
getsentry/relay :24.10.0	ba7bf9163219	stdlib@go1.19.8	1.23.9	1
giantswarm/silence-operator :0.13.0	a6cac55aa2d4	stdlib@go1.24.1	1.23.9	1
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	stdlib@go1.22.7	1.23.9	1
gitea/act_runner :0.2.11	c57233403eff	stdlib@go1.23.1	1.23.9	1
gitea/gitea :1.22.3	76f516a1a8c2	stdlib@go1.22.8	1.23.9	1
gitea/gitea :1.12.4	85416d6f65fe	stdlib@go1.14.8	1.23.9	1
gitea/gitea :1.21.6	ac73e0da341f	stdlib@go1.21.7	1.23.9	1
gitea/gitea :1.16.8	b0bdf102b485	stdlib@go1.18.2	1.23.9	1
gitea/gitea :1.13.0	d5ab14cd29af	stdlib@go1.15.5	1.23.9	1
gitlab/gitlab-runner :v15.3.0	860d4a3fec7a	stdlib@go1.17.9	1.23.9	1
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	stdlib@go1.13.8	1.23.9	1
gkarthics/container-resource-exporter :latest	6799af333e8a	stdlib@go1.14.7	1.23.9	1
glasskube/operator :0.12.2	be5133100d63	stdlib@go1.20.8	1.23.9	1
goalert/goalert :v0.32.0	08d57388b0cb	stdlib@go1.22.1	1.23.9	1
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	stdlib@go1.23.5	1.23.9	1
goccx/go-file-server :latest	f4b3ebea0303	stdlib@go1.21.10	1.23.9	1
gocrane/craned :v0.5.1	a1400909118c	stdlib@go1.17.2	1.23.9	1
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	stdlib@go1.17.2	1.23.9	1
gocrane/crane-scheduler-controller :0.1.23	a2d7e60576f9	stdlib@go1.17.2	1.23.9	1
gogs/gogs :0.12.3	0195b095d0b2	stdlib@go1.14.7	1.23.9	1
gogs/gogs :0.12.1	420d53bb7277	stdlib@go1.14.7	1.23.9	1
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	stdlib@go1.17.7	1.23.9	1
goharbor/harbor-acceld :0.2.13	451103a6c8d8	stdlib@go1.21.5	1.23.9	1
goharbor/harbor-core :v2.9.0	6412d679fdc3	stdlib@go1.20.7	1.23.9	1
goharbor/harbor-core :v2.5.3	86bf3031f4a7	stdlib@go1.17.7	1.23.9	1
goharbor/harbor-core :v2.11.1	c017dd84ee96	stdlib@go1.22.6	1.23.9	1
goharbor/harbor-jobservice :v2.9.0	39435daedd0c	stdlib@go1.20.7	1.23.9	1
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	stdlib@go1.17.7	1.23.9	1
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	stdlib@go1.17.7	1.23.9	1
goharbor/harbor-registryctl :v2.9.0	cce272836449	stdlib@go1.20.7	1.23.9	1
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	stdlib@go1.14.15	1.23.9	1
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	stdlib@go1.14.15	1.23.9	1
goharbor/registry-photon :v2.11.1	5645d459af2b	stdlib@go1.22.6	1.23.9	1
goharbor/registry-photon :v2.9.0	8a26e8cb7862	stdlib@go1.20.7	1.23.9	1
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	stdlib@go1.18.3	1.23.9	1