StackRadar

CVE-2025-22874

Unscored

Advisory

Published 11 Jun 2025In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
195
of 17,781 indexed, latest versions
Container images
184
deployed by those charts
Fix available
1 of 1
affected package

Usage of ExtKeyUsageAny disables policy validation in crypto/x509

Carried by container images the latest versions of 195 of 17,781 indexed charts deploy, on 184 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.24.0, go1.24.1, go1.24.2, go1.24.31.24.4184
OSV records
GO-2025-3749
Also known as
BIT-golang-2025-22874

Charts affected

195 by stars
ChartLatestAffected imagesRadar Score
msmmedia-streaming-meshVerified publisher0.1.172 of 6See more

msm media-streaming-mesh 0.1.17

2 of the 6 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
stdlib@go1.24.0
1.24.4
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
stdlib@go1.24.0
1.24.4

Open the chart page →

11,286
registry-syncermesosphere0.1.01 of 1See more

registry-syncer mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
regclient/regsync:v0.8.33d8d8e40afb7
stdlib@go1.24.2
1.24.4

Open the chart page →

370
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
stdlib@go1.24.3
1.24.4

Open the chart page →

10,180
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.62 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

2 of the 6 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-lang-aggregator:0.1.0ae6e13970ec2
stdlib@go1.24.0
1.24.4
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.24.4

Open the chart page →

3,713
enterprise-operatormongodb-helm-charts1.33.01 of 1See more

enterprise-operator mongodb-helm-charts 1.33.0

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator-ubi:1.33.0b05101723412
stdlib@go1.24.2
1.24.4

Open the chart page →

1,536
mongopingmongoping1.3.11 of 1See more

mongoping mongoping 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
udhos/mongoping:1.3.103b08b63f524
stdlib@go1.24.2
1.24.4

Open the chart page →

1,136
ciliumnicklasfrahm-ciliumVerified publisher0.7.41 of 6See more

cilium nicklasfrahm-cilium 0.7.4

1 of the 6 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.18.2858f807ea4e2
stdlib@go1.24.2
1.24.4

Open the chart page →

7,092
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
stdlib@go1.24.2
1.24.4

Open the chart page →

4,674
nutanix-flow-cninutanix-helm-releasesVerified publisher1.1.01 of 7See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

1 of the 7 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
stdlib@go1.24.2
1.24.4

Open the chart page →

4,988
lensoci-ai-incubations0.1.142 of 16See more

lens oci-ai-incubations 0.1.14

2 of the 16 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
stdlib@go1.24.3
1.24.4
quay.io/prometheus/pushgateway:v1.11.103738d278e08
stdlib@go1.24.1
1.24.4

Open the chart page →

17,070
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
stdlib@go1.24.2
1.24.4

Open the chart page →

6,037
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
stdlib@go1.24.2
1.24.4

Open the chart page →

6,338
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
yetiplatform/bloomcheck:dev85683ddfccbb
stdlib@go1.24.2
1.24.4
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
stdlib@go1.24.3
1.24.4

Open the chart page →

71,208
otel-add-onotel-add-onVerified publisher0.1.41 of 1See more

otel-add-on otel-add-on 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
ghcr.io/kedify/otel-add-on:v0.1.4a6f2155bd822
stdlib@go1.24.3
1.24.4

Open the chart page →

725
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
stdlib@go1.24.3
1.24.4

Open the chart page →

1,016
pacmanpacman-mhVerified publisher0.1.281 of 2See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
library/mongo:7.0.28-jammy88785f6f665a
stdlib@go1.24.0
1.24.4

Open the chart page →

3,562
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
stdlib@go1.24.2
1.24.4

Open the chart page →

7,062
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
stdlib@go1.24.2
1.24.4

Open the chart page →

4,889
pixiecorepnnl-miscscripts0.0.161 of 1See more

pixiecore pnnl-miscscripts 0.0.16

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
pnnlmiscscripts/pixiecore:1.0.1-1c6f17741a0d7
stdlib@go1.24.1
1.24.4

Open the chart page →

943
rabbitpingrabbitping1.3.01 of 1See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
udhos/rabbitping:1.3.0474c467bbf42
stdlib@go1.24.3
1.24.4

Open the chart page →

889
cloudnative-pgradar-baseVerified publisher0.23.21 of 1See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
stdlib@go1.24.0
1.24.4

Open the chart page →

849
memosrm3lVerified publisher0.1.11 of 1See more

memos rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
neosmemo/memos:0.24c6defc2dfb98
stdlib@go1.24.3
1.24.4

Open the chart page →

1,614
monitoringrocketchat-server0.0.172 of 9See more

monitoring rocketchat-server 0.0.17

2 of the 9 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
ghcr.io/grafana/grafana-operator:v5.18.00af2faec9d6f
stdlib@go1.24.2
1.24.4
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
stdlib@go1.24.3
1.24.4

Open the chart page →

6,859
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
stdlib@go1.24.0
1.24.4

Open the chart page →

68,240
donetickrtomik-helm-chartsVerified publisher1.0.61 of 1See more

donetick rtomik-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
donetick/donetick:v0.1.60849a43d9e363
stdlib@go1.24.3
1.24.4

Open the chart page →

1,511
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
stdlib@go1.24.0
1.24.4

Open the chart page →

5,819
saml-exportersaml-exporter0.5.01 of 2See more

saml-exporter saml-exporter 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.24.4

Open the chart page →

1,507
restic-serverschoolguys-helmcharts0.3.11 of 1See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
restic/rest-server:0.14.0d2aff06f47eb
stdlib@go1.24.3
1.24.4

Open the chart page →

2,257
secretssecrets-proxy1.0.61 of 1See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
udhos/secrets:1.0.6daa2b4eaac09
stdlib@go1.24.2
1.24.4

Open the chart page →

987
cortezasergiotocaliniVerified publisher1.0.11 of 1See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.60bcdcbcd3c63
stdlib@go1.24.1
1.24.4

Open the chart page →

3,286
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.17.326c826662ac8
stdlib@go1.24.2
1.24.4

Open the chart page →

7,157
skypilot-prometheus-serverskypilotVerified publisher0.11.12 of 3See more

skypilot-prometheus-server skypilot 0.11.1

2 of the 3 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.83.078aec597d87a
stdlib@go1.24.3
1.24.4
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
stdlib@go1.24.3
1.24.4

Open the chart page →

2,344
avalanchesnowplow-devopsVerified publisher0.12.11 of 6See more

avalanche snowplow-devops 0.12.1

1 of the 6 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
stdlib@go1.24.2
1.24.4

Open the chart page →

1,329
vertical-pod-autoscalersnowplow-devopsVerified publisher0.1.13 of 3See more

vertical-pod-autoscaler snowplow-devops 0.1.1

3 of the 3 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.4.171d817780aa9
stdlib@go1.24.3
1.24.4
registry.k8s.io/autoscaling/vpa-recommender:1.4.140b6d76e8526
stdlib@go1.24.3
1.24.4
registry.k8s.io/autoscaling/vpa-updater:1.4.18ebf269779c1
stdlib@go1.24.3
1.24.4

Open the chart page →

1,251
sqs-prometheus-exportersqs-prometheus-exporterVerified publisher2.0.31 of 1See more

sqs-prometheus-exporter sqs-prometheus-exporter 2.0.3

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
ghcr.io/jmriebold/sqs-prometheus-exporter:1.1.07564828ab7cb
stdlib@go1.24.0
1.24.4

Open the chart page →

367
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
stdlib@go1.24.3
1.24.4

Open the chart page →

2,540
stashswuuper-githubVerified publisher0.1.161 of 1See more

stash swuuper-github 0.1.16

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
stashapp/stash:v0.31.1df744af5a0c9
stdlib@go1.24.3
1.24.4

Open the chart page →

2,396
csi-hcloudsyself1.3.15 of 6See more

csi-hcloud syself 1.3.1

5 of the 6 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.9.05aaefc24f315
stdlib@go1.24.2
1.24.4
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
stdlib@go1.24.2
1.24.4
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.24.4
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.24.4
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
stdlib@go1.24.2
1.24.4

Open the chart page →

2,460
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
stdlib@go1.24.2
1.24.4

Open the chart page →

7,248
tfy-inferentia-operatortruefoundryVerified publisher0.2.81 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
stdlib@go1.24.2
1.24.4

Open the chart page →

2,902
typhoontyphoonVerified publisher0.2.32 of 2See more

typhoon typhoon 0.2.3

2 of the 2 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
stdlib@go1.24.0
1.24.4
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
stdlib@go1.24.0
1.24.4

Open the chart page →

1,672
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
stdlib@go1.24.2
1.24.4

Open the chart page →

45,239
proxyv2flyVerified publisher0.0.61 of 1See more

proxy v2fly 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
v2fly/v2fly-core:latestd06727b221fe
stdlib@go1.24.2
1.24.4

Open the chart page →

1,426
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
stdlib@go1.24.3
1.24.4

Open the chart page →

14,983
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-22874.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
stdlib@go1.24.1
1.24.4

Open the chart page →

789

Container images carrying it

184 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cortezaproject/corteza:2024.9.60bcdcbcd3c63
stdlib@go1.24.1
1.24.4
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
stdlib@go1.24.1
1.24.4
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
stdlib@go1.24.3
1.24.4
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
stdlib@go1.24.0
1.24.4
1
donetick/donetick:v0.1.60849a43d9e363
stdlib@go1.24.3
1.24.4
1
epamedp/tekton-custom-task:0.2.067d896676f45
stdlib@go1.24.2
1.24.4
1
ethereum/client-go:v1.15.101f36ca5922a5
stdlib@go1.24.2
1.24.4
1
flanksource/batch-runner:v1.0.44689687a7cf95
stdlib@go1.24.2
1.24.4
1
flashcatcloud/nightingale:8.5.1421acb36181b
stdlib@go1.24.0
1.24.4
1
giantswarm/silence-operator:0.13.0a6cac55aa2d4
stdlib@go1.24.1
1.24.4
1
gomods/athens:v0.17.10f61d1e62359
stdlib@go1.24.1
1.24.4
1
gomods/athens:v0.18.197cc113b34b0
stdlib@go1.24.1
1.24.4
1
grafana/grafana:10.4.19a9043254ba16
stdlib@go1.24.3
1.24.4
1
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
stdlib@go1.24.1
1.24.4
1
grafana/promtail:3.5.165bfae480b57
stdlib@go1.24.3
1.24.4
1
graphprotocol/graph-node:v0.37.0f4452cdedd68
stdlib@go1.24.1
1.24.4
1
gresearch/armada-operator:latest6c43743e2b2d
stdlib@go1.24.0
1.24.4
1
honeycombio/honeycomb-kubernetes-agent:2.7.448c38d0870f2
stdlib@go1.24.3
1.24.4
1
ispras/svacer:11-2-042aa9fa9f189
stdlib@go1.24.3
1.24.4
1
jeboehm/mailserver-filter:5.0.92e756949e537d
stdlib@go1.24.1
1.24.4
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
stdlib@go1.24.1
1.24.4
1
jeboehm/mailserver-mta:5.0.925fb2f31c940d
stdlib@go1.24.1
1.24.4
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
stdlib@go1.24.1
1.24.4
1
kubeshop/testkube-logs-server:latest094186b19698
stdlib@go1.24.1
1.24.4
1
kubevip/kube-vip-cloud-provider:v0.0.12f8f4e3401f76
stdlib@go1.24.2
1.24.4
1
library/mongo:5.0.32-focal3b6c281e1c08
stdlib@go1.24.0
1.24.4
1
library/mongo:7.0.28-jammy88785f6f665a
stdlib@go1.24.0
1.24.4
1
library/nats:2.11.4c8cd23806eef
stdlib@go1.24.3
1.24.4
1
listmonk/listmonk:v6.0.0bf3903d54a46
stdlib@go1.24.1
1.24.4
1
livekit/livekit-server:v1.9.03602a85840d5
stdlib@go1.24.3
1.24.4
1
minio/mc:RELEASE.2025-04-16T18-13-26Zaead63c77f9d
stdlib@go1.24.2
1.24.4
1
minio/minio:RELEASE.2025-03-12T18-04-18Z46b3009bf704
stdlib@go1.24.1
1.24.4
1
n8nio/n8n:1.86.08b39ed5a2de9
stdlib@go1.24.0
1.24.4
1
natsio/nats-box:0.18.0abdc9f9f0120
stdlib@go1.24.3
1.24.4
1
neosmemo/memos:0.24c6defc2dfb98
stdlib@go1.24.3
1.24.4
1
opencsghq/lws:v0.6.1de15437db41b
stdlib@go1.24.0
1.24.4
1
openfga/openfga:v1.9.25e94966c11df
stdlib@go1.24.2
1.24.4
1
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
stdlib@go1.24.0
1.24.4
1
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
stdlib@go1.24.3
1.24.4
1
platzio/backend:v0.6.5d5e5972f344b
stdlib@go1.24.3
1.24.4
1
pnnlmiscscripts/pixiecore:1.0.1-1c6f17741a0d7
stdlib@go1.24.1
1.24.4
1
regclient/regsync:v0.8.33d8d8e40afb7
stdlib@go1.24.2
1.24.4
1
restic/rest-server:0.14.0d2aff06f47eb
stdlib@go1.24.3
1.24.4
1
stashapp/stash:v0.31.1df744af5a0c9
stdlib@go1.24.3
1.24.4
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
stdlib@go1.24.3
1.24.4
1
tobiasehlert/teslamateapi:1.20.2cf09259ad0ea
stdlib@go1.24.0
1.24.4
1
udhos/mongoping:1.3.103b08b63f524
stdlib@go1.24.2
1.24.4
1
udhos/rabbitping:1.3.0474c467bbf42
stdlib@go1.24.3
1.24.4
1
udhos/secrets:1.0.6daa2b4eaac09
stdlib@go1.24.2
1.24.4
1
v2fly/v2fly-core:latestd06727b221fe
stdlib@go1.24.2
1.24.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.