CVE-2025-47913

High

Advisory

Published 13 Nov 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,026; of 17,787 indexed, latest versions
Container images: 2,315; deployed by those charts
Fix available: 8 of 8; affected packages

Red Hat Security Advisory: container-tools:rhel8 security update

Carried by container images the latest versions of 2,026 of 17,787 indexed charts deploy, on 2,315 images.

Affected package	Affected versions	Fixed in	Images
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+23863+d7fda2d7	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+23863+d7fda2d7	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+23863+d7fda2d7	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+23863+d7fda2d7	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	4:1.2.9-2.module+el8.10.0+23863+d7fda2d7	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-5.module+el8.10.0+23863+d7fda2d7	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+23863+d7fda2d7	1
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+144 more	0.43.0	2,315

OSV records: RHSA-2026:0753 GO-2025-4116
Also known as: GHSA-56w8-48fp-6mgv, RHSA-2026:16701

Charts affected

2,026 by stars

Chart

Latest

Affected images

Radar Score

stash-communityappscode

0.42.0

2 of 4 See more

stash-community appscode 0.42.0

2 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.43.0
ghcr.io/stashed/stash :v0.42.0	3a98245a7667	golang.org/x/crypto@v0.24.0	0.43.0

Open the chart page →

3,661

stash-opscenterappscode

2025.10.17

1 of 1 See more

stash-opscenter appscode 2025.10.17

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/stashed/stash-ui-server :v0.23.0	47cffbc65700	golang.org/x/crypto@v0.36.0	0.43.0

Open the chart page →

672

stash-ui-serverappscode

0.23.0

1 of 1 See more

stash-ui-server appscode 0.23.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/stashed/stash-ui-server :v0.23.0	47cffbc65700	golang.org/x/crypto@v0.36.0	0.43.0

Open the chart page →

672

statefulsetappscode

0.0.1

1 of 3 See more

statefulset appscode 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kube-rbac-proxy :v0.11.0	0df4ae70e3bd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0

Open the chart page →

2,732

appwriteappwrite-helm

1.3.2

1 of 8 See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
appwrite/appwrite :1.9.0	1aaa70127114	golang.org/x/crypto@v0.38.0	0.43.0

Open the chart page →

9,847

harbor-scanner-trivyaqua-helm

0.17.0

1 of 1 See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.43.0

Open the chart page →

5,203

argocdargo-helm-charts

1.0.0

2 of 3 See more

argocd argo-helm-charts 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	golang.org/x/crypto@v0.31.0	0.43.0
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	golang.org/x/crypto@v0.27.0	0.43.0

Open the chart page →

7,338

argo-workflowsargo-helm-charts

1.0.0

2 of 2 See more

argo-workflows argo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocli :v3.7.1	6efd1cb89dc1	golang.org/x/crypto@v0.38.0	0.43.0
quay.io/argoproj/workflow-controller :v3.7.1	66388d1b2f08	golang.org/x/crypto@v0.38.0	0.43.0

Open the chart page →

1,826

argonix-apiargonix

0.2.3

1 of 4 See more

argonix-api argonix 0.2.3

1 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/argonix-io/argonix-api :1.0.0	cb5f24732197	golang.org/x/crypto@v0.27.0	0.43.0

Open the chart page →

4,819

arlas-aiasarlas-stack

28.8.0

2 of 22 See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.12.18-debian-12-r1	c0ede65eb88e	golang.org/x/crypto@v0.27.0	0.43.0
bitnamilegacy/minio :2025.4.22-debian-12-r1	d7cd0e172c4c	golang.org/x/crypto@v0.37.0	0.43.0

Open the chart page →

40,411

arma-reforgerarma-reforger

0.5.3

6 of 8 See more

arma-reforger arma-reforger 0.5.3

6 of the 8 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.5.1	28fe26c8b8b1	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.43.0
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	golang.org/x/crypto@v0.3.0	0.43.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.43.0
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.43.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/crypto@v0.1.0	0.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.43.0

Open the chart page →

23,407

cluster-autoscalerarzu

9.19.1

1 of 1 See more

cluster-autoscaler arzu 9.19.1

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
breton/cool :dev	41b1bb483aa2	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0

Open the chart page →

1,773

itera-lmaarzu

1.34.60

3 of 6 See more

itera-lma arzu 1.34.60

3 of the 6 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
grafana/grafana :9.0.1	a738d0744784	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.43.0
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.43.0

Open the chart page →

8,608

assemblylineassemblyline

7.4.19

2 of 12 See more

assemblyline assemblyline 7.4.19

2 of the 12 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-01-11T05-49-32Z	026ae522febc	golang.org/x/crypto@v0.17.0	0.43.0
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	golang.org/x/crypto@v0.17.0	0.43.0

Open the chart page →

12,092

dltkvassist-iot-data-integrity-verification

0.2.0

3 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

3 of the 9 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.43.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.43.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.43.0

Open the chart page →

77,821

dltflassist-iot-dlt-based-fl

0.2.0

3 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

3 of the 9 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.43.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.43.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.43.0

Open the chart page →

77,821

fllocaloperationsassist-iot-fl-local-operations

1.1.0

1 of 3 See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0

Open the chart page →

3,786

fl-orchestrator-guiassist-iot-fl-orchestrator

0.1.0

1 of 3 See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0

Open the chart page →

9,407

flrepositorydbassist-iot-fl-repository

1.1.0

1 of 2 See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0

Open the chart page →

4,367

performanceandusagediagnosisassist-iot-pud

1.0.0

4 of 7 See more

performanceandusagediagnosis assist-iot-pud 1.0.0

4 of the 7 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
grafana/grafana :9.1.1	9746858c20e6	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/crypto@v0.8.0	0.43.0
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.43.0

Open the chart page →

8,556

semantic-repositoryassist-iot-semantic-repository

1.1.0

1 of 3 See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	golang.org/x/crypto@v0.40.0	0.43.0

Open the chart page →

1,069

smartorchestratorassist-iot-smart-orchestrator

4.0.0

2 of 14 See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

2 of the 14 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/crypto@v0.35.0	0.43.0
library/mongo :4.4.6	6efa05203990	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.43.0

Open the chart page →

42,460

astrotrekastria

0.0.2

3 of 4 See more

astrotrek astria 0.0.2

3 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.43.0
ghcr.io/astriaorg/astria-indexer :0.1.0	5cf1e5709820	golang.org/x/crypto@v0.24.0	0.43.0
ghcr.io/astriaorg/astria-indexer-api :0.1.0	3490d9900af1	golang.org/x/crypto@v0.24.0	0.43.0

Open the chart page →

31,807

celestia-localastria

9.0.0

2 of 2 See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v6.1.0-rc0	a604aefa3fae	golang.org/x/crypto@v0.42.0	0.43.0
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	golang.org/x/crypto@v0.41.0	0.43.0

Open the chart page →

3,281

celestia-nodeastria

0.7.1

1 of 1 See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	golang.org/x/crypto@v0.41.0	0.43.0

Open the chart page →

1,502

evm-faucetastria

0.1.5

1 of 1 See more

evm-faucet astria 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/ria-faucet :0.0.1	a06c8ebef427	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0

Open the chart page →

1,764

evm-rollupastria

4.1.0

1 of 2 See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/astria-geth :latest	4249e403225a	golang.org/x/crypto@v0.24.0	0.43.0

Open the chart page →

3,921

evm-stackastria

5.0.3

1 of 2 See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/astria-geth :latest	4249e403225a	golang.org/x/crypto@v0.24.0	0.43.0

Open the chart page →

3,921

flame-rollupastria

0.1.3

1 of 2 See more

flame-rollup astria 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/flame :0.1.0	c8af1c5aae40	golang.org/x/crypto@v0.24.0	0.43.0

Open the chart page →

3,587

graph-nodeastria

0.2.2

1 of 3 See more

graph-node astria 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ipfs/kubo :v0.17.0	803fac58ba15	golang.org/x/crypto@v0.1.0	0.43.0

Open the chart page →

5,394

sequencerastria

4.0.0

2 of 3 See more

sequencer astria 4.0.0

2 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
cometbft/cometbft :v0.38.17	22c2ac018f40	golang.org/x/crypto@v0.32.0	0.43.0
rclone/rclone :1.56.0	f2fc45c8bc57	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.43.0

Open the chart page →

6,239

sequencer-faucetastria

0.9.2

1 of 1 See more

sequencer-faucet astria 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/seq-faucet :0.9.0	bf3cb9b505b6	golang.org/x/crypto@v0.26.0	0.43.0

Open the chart page →

1,312

authorization-componentauthorization-component

1.0.0

1 of 3 See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/authorization-component-php :latest	94a749392fcf	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.43.0

Open the chart page →

7,561

botkubeavesha

1.0.0

1 of 2 See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/kubeshop/botkube :v1.0.0	669e27a5d1af	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.43.0

Open the chart page →

5,074

istio-discoveryavesha

1.16.0

1 of 1 See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
istio/pilot :1.16.0	ac0284d75ec9	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.43.0

Open the chart page →

6,948

appmesh-jaegeraws

1.0.3

1 of 1 See more

appmesh-jaeger aws 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.29	42822be7888b	golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63	0.43.0

Open the chart page →

2,480

appmesh-prometheusaws

1.0.3

1 of 2 See more

appmesh-prometheus aws 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.43.0

Open the chart page →

2,939

aws-node-termination-handler-2aws

0.2.0

1 of 2 See more

aws-node-termination-handler-2 aws 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller :v2.0.0-beta	9637c80dd23f	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.43.0

Open the chart page →

2,952

aws-sigv4-proxy-admission-controlleraws

0.1.2

1 of 1 See more

aws-sigv4-proxy-admission-controller aws 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller :1.0	67b89ae52240	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0

Open the chart page →

2,139

axonops-developer-operatoraxonops-developer-operator

0.1.0

1 of 1 See more

axonops-developer-operator axonops-developer-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/axonops/axonops-developer-operator :v0.1.0	b3d6600c8ba5	golang.org/x/crypto@v0.31.0	0.43.0

Open the chart page →

749

azure-advanced-backupazure-advanced-backup

0.4.1

1 of 1 See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/dodevops/azure-advanced-backup :0.4.0	1041d4449e49	golang.org/x/crypto@v0.0.0-20220314234724-5d542ad81a58	0.43.0

Open the chart page →

4,568

ambassadorazureorkestra

6.7.9

1 of 2 See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
datawire/aes :1.13.6	2beb65062c8b	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.43.0

Open the chart page →

5,521

helm-controllerazureorkestra

0.1.1

2 of 2 See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
fluxcd/helm-controller :v0.9.0	92b891e495d8	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.43.0
fluxcd/source-controller :v0.10.0	31a8c79a6803	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.43.0

Open the chart page →

7,705

keptn-addonsazureorkestra

0.1.0

4 of 4 See more

keptn-addons azureorkestra 0.1.0

4 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
keptn/distributor :0.8.3	6bc3df9e0d6a	golang.org/x/crypto@v0.0.0-20210314154223-e6e6c4f2bb5b	0.43.0
keptn/distributor :0.8.4	72e17527a4f9	golang.org/x/crypto@v0.0.0-20210314154223-e6e6c4f2bb5b	0.43.0
keptncontrib/prometheus-service :0.6.0	29969dd547de	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.43.0
keptnsandbox/job-executor-service :0.1.3	6e6d323dd7ae	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.43.0

Open the chart page →

10,621

prometheusazureorkestra

14.8.0

3 of 6 See more

prometheus azureorkestra 14.8.0

3 of the 6 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.43.0
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.43.0
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.43.0

Open the chart page →

9,661

krakendbaboulinet

0.1.34

1 of 1 See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :2.7.0	9219cda867e2	golang.org/x/crypto@v0.24.0	0.43.0

Open the chart page →

1,191

ragflowbaboulinet

0.1.1

1 of 5 See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	golang.org/x/crypto@v0.17.0	0.43.0

Open the chart page →

5,860

prometheus-blackbox-exporterbackbox-exporter

7.8.0

1 of 1 See more

prometheus-blackbox-exporter backbox-exporter 7.8.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.23.0	ca04aa9d9093	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.43.0

Open the chart page →

1,494

balance-registrationbalance-registration

0.1.0

1 of 4 See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
conduction/balance-registration-php :dev	c36094a41369	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.43.0

Open the chart page →

8,408

bluesky-pdsbear

0.4.208

1 of 1 See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/bluesky-social/pds :0.4.208	637083d9369d	golang.org/x/crypto@v0.41.0	0.43.0

Open the chart page →

2,137

Container images carrying it

2,315 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/crypto@v0.24.0	0.43.0	1
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.43.0	1
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.43.0	1
donetick/donetick :v0.1.60	849a43d9e363	golang.org/x/crypto@v0.40.0	0.43.0	1
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/crypto@v0.10.0	0.43.0	1
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/crypto@v0.28.0	0.43.0	1
dongjiang1989/pingmesh-agent :v1.2.2	c82de0272da0	golang.org/x/crypto@v0.28.0	0.43.0	1
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/crypto@v0.26.0	0.43.0	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/crypto@v0.17.0	0.43.0	1
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/crypto@v0.17.0	0.43.0	1
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/crypto@v0.24.0	0.43.0	1
drone/drone :2.28.2	55897c8fb22d	golang.org/x/crypto@v0.40.0	0.43.0	1
drone/drone-runner-docker :1.8.1	137e79c5e23c	golang.org/x/crypto@v0.0.0-20190621222207-cc06ce4a13d4	0.43.0	1
drone/kubernetes-secrets :latest	206df2280ecf	golang.org/x/crypto@v0.0.0-20180808211826-de0752318171	0.43.0	1
drorivry4/rego :latest	e035d49b15ca	golang.org/x/crypto@v0.17.0	0.43.0	1
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	golang.org/x/crypto@v0.12.0	0.43.0	1
dtzar/helm-kubectl :3.11.2	a1041bb0f1d1	golang.org/x/crypto@v0.5.0	0.43.0	1
duplicati/duplicati :2.0.5.111_canary_2020-09-26	8660f0eda7c9	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.43.0	1
durellirsd/security-smells-api :v1	7398aca4fc2e	golang.org/x/crypto@v0.21.0	0.43.0	1
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	golang.org/x/crypto@v0.14.0	0.43.0	1
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0	1
eclipseaerios/federator :1.1.0	18c7f0d101c0	golang.org/x/crypto@v0.23.0	0.43.0	1
eclipseaerios/iota-tangle-peerer :latest	99d7ff18d416	golang.org/x/crypto@v0.28.0	0.43.0	1
eclipseaerios/llo-api :1.2.0	ab7a04182191	golang.org/x/crypto@v0.14.0	0.43.0	1
eclipseaerios/llo-docker-operator :1.1.2	d7ec28bfe735	golang.org/x/crypto@v0.31.0	0.43.0	1
elastic/apm-server :7.17.6	c7a1c63257d0	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.43.0	1
emqx/ecp-emqx-agent-downloader :2.5.1	a8431baa7950	golang.org/x/crypto@v0.21.0	0.43.0	1
emqx/ecp-main :2.5.1	fa876f71e5d6	golang.org/x/crypto@v0.28.0	0.43.0	1
emqxecp/otelcol :2.5.0	4c31d9bec846	golang.org/x/crypto@v0.26.0	0.43.0	1
emqx/edge-operator-controller :0.0.5	53865c1267d9	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.43.0	1
engrmth/bnkr :2.1.0	6d8464e6f0e8	golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5	0.43.0	1
envoyproxy/ai-gateway-controller :003ab39f36923b5d40609a601e2951b73f6318fb	ec1f06ee29a7	golang.org/x/crypto@v0.40.0	0.43.0	1
envoyproxy/ratelimit :v1.4.0	71081616da3e	golang.org/x/crypto@v0.0.0-20191219195013-becbf705a915	0.43.0	1
epamedp/admin-console-operator :2.14.0	90f9921d8d58	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0	1
epamedp/codebase-operator :2.12.0-MDTU-DDM-SNAPSHOT.10	96028c86f0dd	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0	1
epamedp/edp-admin-console :2.14.0	616c678ba3e7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0	1
epamedp/edp-argocd-operator :0.2.0	976a662a5e72	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0	1
epamedp/edp-headlamp :0.25.0	93417e18bb1a	golang.org/x/crypto@v0.18.0	0.43.0	1
epamedp/gerrit-operator :2.11.0-MDTU-DDM-SNAPSHOT.2	b71fb39e0c9e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0	1
epamedp/jenkins-operator :2.15.3	28ef56bc0ca3	golang.org/x/crypto@v0.14.0	0.43.0	1
epamedp/jenkins-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	ff25e9fe4419	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0	1
epamedp/keycloak-operator :1.11.0-MDTU-DDM-SNAPSHOT.10	5d352199e12e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0	1
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.43.0	1
epamedp/reconciler :2.12.0	d33e938b6d59	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0	1
erenozcan17/go_backend :v4.2	50b4f23422b6	golang.org/x/crypto@v0.9.0	0.43.0	1
erigontech/erigon :v2.61.2	88706754b627	golang.org/x/crypto@v0.31.0	0.43.0	1
etejeda/butlerci :0.1.0	737d58183abc	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0	1
ethereum/client-go :v1.15.10	1f36ca5922a5	golang.org/x/crypto@v0.35.0	0.43.0	1
ethereum/client-go :v1.16.5	32b878e4144a	golang.org/x/crypto@v0.36.0	0.43.0	1
ethereum/client-go :v1.10.18	6d6d12a40465	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0	1