CVE-2025-47913

High

Advisory

Published 13 Nov 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,023; of 17,790 indexed, latest versions
Container images: 2,311; deployed by those charts
Fix available: 8 of 8; affected packages

Red Hat Security Advisory: container-tools:rhel8 security update

Carried by container images the latest versions of 2,023 of 17,790 indexed charts deploy, on 2,311 images.

Affected package	Affected versions	Fixed in	Images
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+23863+d7fda2d7	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+23863+d7fda2d7	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+23863+d7fda2d7	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+23863+d7fda2d7	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	4:1.2.9-2.module+el8.10.0+23863+d7fda2d7	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-5.module+el8.10.0+23863+d7fda2d7	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+23863+d7fda2d7	1
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+144 more	0.43.0	2,311

OSV records: RHSA-2026:0753 GO-2025-4116
Also known as: GHSA-56w8-48fp-6mgv, RHSA-2026:16701

Charts affected

2,023 by stars

Chart

Latest

Affected images

Radar Score

cert-manager-setupmesosphere-stable

0.2.10

3 of 5 See more

cert-manager-setup mesosphere-stable 0.2.10

3 of the 5 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	golang.org/x/crypto@v0.5.0	0.43.0
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	golang.org/x/crypto@v0.5.0	0.43.0
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	golang.org/x/crypto@v0.5.0	0.43.0

Open the chart page →

7,179

dexmesosphere-stable

2.14.1

2 of 5 See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.43.0
mesosphere/dex-controller :v0.16.1	1b2dd9c0b0fc	golang.org/x/crypto@v0.23.0	0.43.0

Open the chart page →

18,583

gatekeepermesosphere-stable

0.6.11

1 of 2 See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0

Open the chart page →

3,034

istio-helm-cnimesosphere-stable

1.23.6

1 of 1 See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
istio/install-cni :1.23.6	ab34c4740f44	golang.org/x/crypto@v0.36.0	0.43.0

Open the chart page →

3,322

istio-helm-istiodmesosphere-stable

1.23.6

1 of 2 See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
istio/pilot :1.23.6	9c3d6a218181	golang.org/x/crypto@v0.36.0	0.43.0

Open the chart page →

4,644

kafka-operatormesosphere-stable

0.25.1

1 of 2 See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	golang.org/x/crypto@v0.7.0	0.43.0

Open the chart page →

1,241

knativemesosphere-stable

1.10.8

1 of 7 See more

knative mesosphere-stable 1.10.8

1 of the 7 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	golang.org/x/crypto@v0.1.0	0.43.0

Open the chart page →

7,479

kommandermesosphere-stable

0.39.2

17 of 29 See more

kommander mesosphere-stable 0.39.2

17 of the 29 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.43.0
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.43.0
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.43.0
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.43.0
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.43.0
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.43.0
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.43.0
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.43.0
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0

Open the chart page →

68,330

kube-prometheus-stackmesosphere-stable

75.9.1

3 of 7 See more

kube-prometheus-stack mesosphere-stable 75.9.1

3 of the 7 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
grafana/grafana :12.0.2	b5b59bfc7561	golang.org/x/crypto@v0.38.0	0.43.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/crypto@v0.36.0	0.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/crypto@v0.38.0	0.43.0

Open the chart page →

9,543

opsportalmesosphere-stable

0.9.5

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.43.0

Open the chart page →

7,027

cortexmetakube

0.6.0

1 of 2 See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.43.0

Open the chart page →

4,107

istio-operatormetakube

1.12.0

1 of 1 See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
istio/operator :1.12.0	6cfce8a071b9	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.43.0

Open the chart page →

8,940

wg-access-servermglants

0.4.7

1 of 1 See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.43.0

Open the chart page →

2,745

gogsmhio

0.9.2

1 of 2 See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
gogs/gogs :0.12.1	420d53bb7277	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.43.0

Open the chart page →

3,230

kube-agent-chartmiddleware-labs

0.1.2

1 of 1 See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/crypto@v0.1.0	0.43.0

Open the chart page →

1,799

middleware-odigosmiddleware-labs

0.2.41

3 of 6 See more

middleware-odigos middleware-labs 0.2.41

3 of the 6 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.43.0
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.43.0
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.43.0

Open the chart page →

8,370

middleware-visionmiddleware-labs

0.2.65

3 of 6 See more

middleware-vision middleware-labs 0.2.65

3 of the 6 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.43.0
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.43.0
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.43.0

Open the chart page →

8,361

mw-autoinstrumentationmiddleware-labs

1.2.6

2 of 6 See more

mw-autoinstrumentation middleware-labs 1.2.6

2 of the 6 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.132.0	5e331c925091	golang.org/x/crypto@v0.39.0	0.43.0
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/crypto@v0.37.0	0.43.0

Open the chart page →

3,714

mw-kube-agentmiddleware-labs

0.1.2

1 of 1 See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/crypto@v0.12.0	0.43.0

Open the chart page →

1,594

sshportalmidokura-community

0.1.4

1 of 2 See more

sshportal midokura-community 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
moul/sshportal :v1.19.3	332b603727c3	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.43.0

Open the chart page →

2,338

argocd-extra-app-info-exportermikejoh

0.1.12

1 of 1 See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
mikejoh/argocd-extra-app-info-exporter :0.2.0	5c5a3b734271	golang.org/x/crypto@v0.28.0	0.43.0

Open the chart page →

1,334

local-path-provisionermikejoh

0.0.29

1 of 1 See more

local-path-provisioner mikejoh 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	golang.org/x/crypto@v0.25.0	0.43.0

Open the chart page →

1,300

miniomilvus-helm

8.0.20

1 of 1 See more

minio milvus-helm 8.0.20

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-05-28T17-19-04Z	391d1d45fdbe	golang.org/x/crypto@v0.23.0	0.43.0

Open the chart page →

1,537

pulsarv2milvus-helm

2.7.8

2 of 4 See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.43.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.43.0

Open the chart page →

15,855

minio-operatorminio-operator

4.3.7

1 of 2 See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.43.0

Open the chart page →

6,085

aws-api-gateway-operatormintel

0.1.2

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/crypto@v0.2.0	0.43.0

Open the chart page →

10,639

standard-application-stackmintel

11.4.1

1 of 12 See more

standard-application-stack mintel 11.4.1

1 of the 12 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/crypto@v0.2.0	0.43.0

Open the chart page →

10,515

jupyterhubmizzoukube

0.0.1-set.by.chartpress

1 of 7 See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/crypto@v0.16.0	0.43.0

Open the chart page →

1,883

cert-manager-webhook-duckdnsmmontes

1.2.3

1 of 1 See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0

Open the chart page →

2,847

cockroachdb-operatormmontes

0.1.0

1 of 1 See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-operator :v2.1.0	983312754620	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0

Open the chart page →

7,775

mongodbmmontes

0.5.0

1 of 1 See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
library/mongo :4.4.13	05678ae4e5e1	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.43.0

Open the chart page →

7,148

corednsmoikot

1.13.3

1 of 1 See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
coredns/coredns :1.7.0	73ca82b4ce82	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.43.0

Open the chart page →

2,547

pritunl-vpnmoinologics

0.0.1

1 of 1 See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
goofball222/pritunl :1.32.3602.80	7bf26032dfce	golang.org/x/crypto@v0.6.0	0.43.0

Open the chart page →

2,470

backendmojaloop

0.1.0

2 of 6 See more

backend mojaloop 0.1.0

2 of the 6 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.43.0
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.43.0

Open the chart page →

16,111

reporting-nifi-processor-svcmojaloop

0.0.2

1 of 3 See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
library/mongo :6.0.2	71a63fc2438e	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0

Open the chart page →

6,220

enterprise-operatormongodb-helm-charts

1.33.0

1 of 1 See more

enterprise-operator mongodb-helm-charts 1.33.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-enterprise-operator-ubi :1.33.0	b05101723412	golang.org/x/crypto@v0.37.0	0.43.0

Open the chart page →

1,554

mongodb-query-exportermongodb-query-exporter

5.1.0

1 of 1 See more

mongodb-query-exporter mongodb-query-exporter 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/raffis/mongodb-query-exporter :v5.1.0	ca6ac8a5b329	golang.org/x/crypto@v0.13.0	0.43.0

Open the chart page →

989

mongodb-secure-backupmongodb-secure-backup

1.0.0

1 of 2 See more

mongodb-secure-backup mongodb-secure-backup 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	golang.org/x/crypto@v0.32.0	0.43.0

Open the chart page →

1,033

mongopingmongoping

1.3.1

1 of 1 See more

mongoping mongoping 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
udhos/mongoping :1.3.1	03b08b63f524	golang.org/x/crypto@v0.38.0	0.43.0

Open the chart page →

1,136

camera-viewermoreillon

0.2.1

1 of 4 See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0

Open the chart page →

11,694

face-recognitionmoreillon

0.2.4

1 of 3 See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0

Open the chart page →

8,556

mqtt-loggermoreillon

0.3.1

2 of 5 See more

mqtt-logger moreillon 0.3.1

2 of the 5 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.43.0
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0

Open the chart page →

10,998

user-manager-mongodbmoreillon

0.6.2

1 of 4 See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.43.0

Open the chart page →

23,263

backupmorremeyer

4.0.0

1 of 1 See more

backup morremeyer 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
restic/restic :0.15.2	579e4e6a4931	golang.org/x/crypto@v0.7.0	0.43.0

Open the chart page →

2,295

hcloud-ccm-networksmorremeyer

2.0.0

1 of 1 See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	golang.org/x/crypto@v0.10.0	0.43.0

Open the chart page →

1,739

chirpstackmosquitto-helm-chart

0.5.0

1 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3	fb7667fe037f	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.43.0

Open the chart page →

25,989

chirpstack-event-forwardmosquitto-helm-chart

0.1.2

1 of 1 See more

chirpstack-event-forward mosquitto-helm-chart 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.43.0

Open the chart page →

1,854

replacermosquitto-helm-chart

0.2.0

1 of 3 See more

replacer mosquitto-helm-chart 0.2.0

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0

Open the chart page →

3,931

configmapsecretsmozilla

0.0.1

1 of 1 See more

configmapsecrets mozilla 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.43.0

Open the chart page →

2,109

maddymt190502

4.1.2

1 of 1 See more

maddy mt190502 4.1.2

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.9.2	a4b839985b9b	golang.org/x/crypto@v0.32.0	0.43.0

Open the chart page →

893

Container images carrying it

2,311 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/synapsecns/sanguine/omnirpc :latest	5217e3d1fc70	golang.org/x/crypto@v0.33.0	0.43.0	4
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/crypto@v0.13.0	0.43.0	4
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/crypto@v0.13.0	0.43.0	4
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/crypto@v0.13.0	0.43.0	4
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.43.0	4
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.43.0	4
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/crypto@v0.36.0	0.43.0	4
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/crypto@v0.38.0	0.43.0	4
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.43.0	4
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0	3
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0	3
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.43.0	3
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/crypto@v0.14.0	0.43.0	3
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.43.0	3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.43.0	3
derailed/popeye :v0.22.1	8e68e22c7663	golang.org/x/crypto@v0.32.0	0.43.0	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.43.0	3
ethpandaops/tracoor :latest	d8514b9f4c59	golang.org/x/crypto@v0.38.0	0.43.0	3
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.43.0	3
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/crypto@v0.21.0	0.43.0	3
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/crypto@v0.27.0	0.43.0	3
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/crypto@v0.32.0	0.43.0	3
grafana/promtail :2.4.2	626900031c4e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0	3
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.43.0	3
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/crypto@v0.17.0	0.43.0	3
library/docker :20.10-dind :20-dind	af96c680a7e1	golang.org/x/crypto@v0.2.0	0.43.0	3
library/nats :2.10-alpine	b83efabe3e7d	golang.org/x/crypto@v0.37.0	0.43.0	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.43.0	3
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.43.0	3
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.43.0	3
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/crypto@v0.17.0	0.43.0	3
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/crypto@v0.31.0	0.43.0	3
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.43.0	3
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.43.0	3
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.43.0	3
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/crypto@v0.27.0	0.43.0	3
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	golang.org/x/crypto@v0.16.0	0.43.0	3
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.43.0	3
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/crypto@v0.27.0	0.43.0	3
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/crypto@v0.31.0	0.43.0	3
ghcr.io/home-assistant/home-assistant :2026.9.2	a1bc133af84e	golang.org/x/crypto@v0.26.0	0.43.0	3
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.43.0	3
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/crypto@v0.36.0	0.43.0	3
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0	3
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.43.0	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.43.0	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.43.0	3
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.43.0	3
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.43.0	3
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.43.0	3