StackRadar

CVE-2025-47913

High

Advisory

Published 13 Nov 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,023
of 17,790 indexed, latest versions
Container images
2,311
deployed by those charts
Fix available
8 of 8
affected packages

Red Hat Security Advisory: container-tools:rhel8 security update

Carried by container images the latest versions of 2,023 of 17,790 indexed charts deploy, on 2,311 images.

Affected packageAffected versionsFixed inImages
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-82.module+el8.10.0+23863+d7fda2d71
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+23863+d7fda2d71
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+23863+d7fda2d71
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+23863+d7fda2d71
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc4:1.2.9-2.module+el8.10.0+23863+d7fda2d71
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.5-5.module+el8.10.0+23863+d7fda2d71
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+23863+d7fda2d71
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+144 more0.43.02,311
OSV records
RHSA-2026:0753GO-2025-4116
Also known as
GHSA-56w8-48fp-6mgv, RHSA-2026:16701

Charts affected

2,023 by stars
ChartLatestAffected imagesRadar Score
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
golang.org/x/crypto@v0.36.0
0.43.0

Open the chart page →

5,515
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
golang.org/x/crypto@v0.21.0
0.43.0

Open the chart page →

5,795
giteakeyporttech0.2.101 of 4See more

gitea keyporttech 0.2.10

1 of the 4 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
golang.org/x/crypto@v0.0.0-20200604202706-70a84ac30bf9
0.43.0

Open the chart page →

5,408
kikplatekikplateVerified publisher0.22.01 of 3See more

kikplate kikplate 0.22.0

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/kikplate/kikplate-api:main2fbce0601a3c
golang.org/x/crypto@v0.31.0
0.43.0

Open the chart page →

2,783
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
minio/mc:latesta7fe349ef4bd
golang.org/x/crypto@v0.40.0
0.43.0
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
golang.org/x/crypto@v0.32.0
0.43.0

Open the chart page →

12,063
cert-managerkubeblocksVerified publisher1.17.24 of 4See more

cert-manager kubeblocks 1.17.2

4 of the 4 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.17.2ec56edb1161d
golang.org/x/crypto@v0.36.0
0.43.0
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
golang.org/x/crypto@v0.36.0
0.43.0
quay.io/jetstack/cert-manager-startupapicheck:v1.17.2e18989b4f912
golang.org/x/crypto@v0.36.0
0.43.0
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
golang.org/x/crypto@v0.36.0
0.43.0

Open the chart page →

2,900
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.009b7e8705673
golang.org/x/crypto@v0.18.0
0.43.0

Open the chart page →

20,424
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
golang.org/x/crypto@v0.17.0
0.43.0
kubesphere/kubectl:v1.27.1649b445b1b732
golang.org/x/crypto@v0.17.0
0.43.0

Open the chart page →

4,723
kubebrowsekubebrowse1.7.03 of 5See more

kubebrowse kubebrowse 1.7.0

3 of the 5 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
golang.org/x/crypto@v0.40.0
0.43.0
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
golang.org/x/crypto@v0.38.0
0.43.0
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
golang.org/x/crypto@v0.40.0
0.43.0

Open the chart page →

4,143
kubefedkubefed0.10.01 of 2See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.43.0

Open the chart page →

2,419
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
golang.org/x/crypto@v0.17.0
0.43.0

Open the chart page →

3,381
kubegems-localkubegemsOfficial1.24.101 of 2See more

kubegems-local kubegems 1.24.10

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
golang.org/x/crypto@v0.17.0
0.43.0

Open the chart page →

6,090
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
golang.org/x/crypto@v0.7.0
0.43.0

Open the chart page →

3,275
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
golang.org/x/crypto@v0.39.0
0.43.0

Open the chart page →

4,101
kubeseckubesecVerified publisher1.1.01 of 1See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
kubesec/kubesec:latest025a365d9f18
golang.org/x/crypto@v0.29.0
0.43.0

Open the chart page →

1,075
kube-site-followerkube-site-follower0.1.141 of 2See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
golang.org/x/crypto@v0.31.0
0.43.0

Open the chart page →

902
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
golang.org/x/crypto@v0.6.0
0.43.0

Open the chart page →

2,489
mesherykubesphere-stable0.5.011 of 13See more

meshery kubesphere-stable 0.5.0

11 of the 13 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
golang.org/x/crypto@v0.37.0
0.43.0
layer5/meshery-app-mesh:stable-latest77d59943b3d6
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.43.0
layer5/meshery-consul:stable-latest25a4cc38abcd
golang.org/x/crypto@v0.14.0
0.43.0
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
golang.org/x/crypto@v0.0.0-20190829043050-9756ffdc2472
0.43.0
layer5/meshery-istio:stable-latestfde47c141ec6
golang.org/x/crypto@v0.35.0
0.43.0
layer5/meshery-kuma:stable-latest9d25f029a8a2
golang.org/x/crypto@v0.14.0
0.43.0
layer5/meshery-linkerd:stable-latestb99c73bac1f5
golang.org/x/crypto@v0.17.0
0.43.0
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
golang.org/x/crypto@v0.5.0
0.43.0
layer5/meshery-nsm:stable-latestebd6a8faf21f
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.43.0
layer5/meshery-osm:stable-latestec898e5786c6
golang.org/x/crypto@v0.5.0
0.43.0
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
golang.org/x/crypto@v0.5.0
0.43.0

Open the chart page →

24,690
kube-state-metricskubestar-state-metricsVerified publisher0.1.101 of 1See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.6.0bdab4e49d71d
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.43.0

Open the chart page →

1,575
kubetailkubetailVerified publisher0.26.01 of 3See more

kubetail kubetail 0.26.0

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/kubetail-org/kubetail-cluster-agent:0.7.1a5eee8cab215
golang.org/x/crypto@v0.36.0
0.43.0

Open the chart page →

1,850
kube-vault-controllerkube-vault-controller1.2.01 of 1See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
golang.org/x/crypto@v0.6.0
0.43.0

Open the chart page →

1,550
kube-vip-cloud-providerkube-vip0.2.101 of 1See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
kubevip/kube-vip-cloud-provider:v0.0.12f8f4e3401f76
golang.org/x/crypto@v0.36.0
0.43.0

Open the chart page →

791
kubemodkubmod0.5.22 of 2See more

kubemod kubmod 0.5.2

2 of the 2 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
kubemod/kubemod:v0.19.11f8154f7e80c
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.43.0
kubemod/kubemod-crt:v1.3.0028347c9fa77
golang.org/x/crypto@v0.0.0-20210506145944-38f3c27a63bf
0.43.0

Open the chart page →

4,542
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.14 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

4 of the 5 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
golang.org/x/crypto@v0.10.0
0.43.0
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
golang.org/x/crypto@v0.13.0
0.43.0
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
golang.org/x/crypto@v0.13.0
0.43.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
golang.org/x/crypto@v0.13.0
0.43.0

Open the chart page →

7,087
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.03 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

3 of the 5 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
golang.org/x/crypto@v0.13.0
0.43.0
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
golang.org/x/crypto@v0.13.0
0.43.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
golang.org/x/crypto@v0.13.0
0.43.0

Open the chart page →

5,941
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.23 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

3 of the 5 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
golang.org/x/crypto@v0.13.0
0.43.0
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
golang.org/x/crypto@v0.13.0
0.43.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
golang.org/x/crypto@v0.13.0
0.43.0

Open the chart page →

6,872
kube-fencingkvaps2.4.11 of 2See more

kube-fencing kvaps 2.4.1

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.43.0

Open the chart page →

2,538
linstorkvaps1.14.04 of 11See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.43.0
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.43.0
ghcr.io/kvaps/linstor-ha-controller:v1.14.08e7b44bbd123
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.43.0
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.43.0

Open the chart page →

15,551
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
golang.org/x/crypto@v0.37.0
0.43.0

Open the chart page →

2,113
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.43.0

Open the chart page →

7,510
lgtm-stacklgtm-stackVerified publisher0.1.32 of 8See more

lgtm-stack lgtm-stack 0.1.3

2 of the 8 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2024-01-16T16-06-34Z591b097ea2d4
golang.org/x/crypto@v0.17.0
0.43.0
minio/minio:RELEASE.2024-01-18T22-51-28Z551682a57a94
golang.org/x/crypto@v0.18.0
0.43.0

Open the chart page →

5,614
keptn-metrics-operatorlifecycle-toolkitVerified publisher0.5.01 of 1See more

keptn-metrics-operator lifecycle-toolkit 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
golang.org/x/crypto@v0.36.0
0.43.0

Open the chart page →

825
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.43.0

Open the chart page →

4,456
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge2 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.3104d224a9999b
golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63
0.43.0
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
golang.org/x/crypto@v0.12.0
0.43.0

Open the chart page →

4,389
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
golang.org/x/crypto@v0.38.0
0.43.0

Open the chart page →

7,915
go-hello-worldloafoe0.14.01 of 1See more

go-hello-world loafoe 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/loafoe/go-hello-world:v2.13.0d3fb171f20e1
golang.org/x/crypto@v0.41.0
0.43.0

Open the chart page →

672
jspolicyloftVerified publisher0.2.21 of 1See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
loftsh/jspolicy:0.2.225deb9bd2683
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.43.0

Open the chart page →

2,309
vcluster-eksloftVerified publisher0.0.0-ci.31 of 4See more

vcluster-eks loft 0.0.0-ci.3

1 of the 4 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.43.0

Open the chart page →

3,304
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
golang.org/x/crypto@v0.5.0
0.43.0

Open the chart page →

3,138
log2rbac-operatorlog2rbac-operator0.0.51 of 1See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
jkremser/log2rbac:v0.0.5e35cf56ef183
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.43.0

Open the chart page →

1,938
logclilogcliVerified publisher0.1.01 of 1See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
grafana/logcli:main-c90366d-amd643d85bb66e39b
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.43.0

Open the chart page →

2,947
voice-biometricslumenvox2.0.15 of 26See more

voice-biometrics lumenvox 2.0.1

5 of the 26 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.43.0
lumenvox/cloud-license:2.0.09a69862e1248
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.43.0
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.43.0
quay.io/prometheus/node-exporter:v1.1.222fbde17ab64
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.43.0
quay.io/prometheus/prometheus:v2.26.038d40a760569
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.43.0

Open the chart page →

71,216
lynqlynqVerified publisher1.1.221 of 1See more

lynq lynq 1.1.22

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/k8s-lynq/lynq:1.1.22229b05e3c717
golang.org/x/crypto@v0.36.0
0.43.0

Open the chart page →

621
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
golang.org/x/crypto@v0.42.0
0.43.0

Open the chart page →

13,582
plane-enterprisemakeplaneOfficialVerified publisher3.7.22 of 13See more

plane-enterprise makeplane 3.7.2

2 of the 13 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
golang.org/x/crypto@v0.40.0
0.43.0
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
golang.org/x/crypto@v0.40.0
0.43.0

Open the chart page →

4,942
mattermost-enterprise-editionmattermostVerified publisher2.6.1031 of 3See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-04-25T00-43-23Z1806872732e1
golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6
0.43.0

Open the chart page →

3,606
mcpmcp-chartsVerified publisher0.0.232 of 7See more

mcp mcp-charts 0.0.23

2 of the 7 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
golang.org/x/crypto@v0.41.0
0.43.0
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
golang.org/x/crypto@v0.42.0
0.43.0

Open the chart page →

6,994
traefik-forward-authmesosphere0.3.102 of 2See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.5.15efa21defcbc
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.43.0
mesosphere/traefik-forward-auth:3.1.05456581d7b76
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.43.0

Open the chart page →

5,308
subspacemglants0.1.01 of 1See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
subspacecommunity/subspace:1.5.0e2042b63fb35
golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37
0.43.0

Open the chart page →

3,254
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
golang.org/x/crypto@v0.30.0
0.43.0

Open the chart page →

4,184

Container images carrying it

2,311 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
golang.org/x/crypto@v0.37.0
0.43.0
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
golang.org/x/crypto@v0.38.0
0.43.0
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
golang.org/x/crypto@v0.38.0
0.43.0
1
sealio/hermitcrab:v0.1.4a326a2f03660
golang.org/x/crypto@v0.22.0
0.43.0
1
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
golang.org/x/crypto@v0.1.0
0.43.0
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
golang.org/x/crypto@v0.35.0
0.43.0
1
semaphoreui/semaphore:v2.9.645b50bc11833f
golang.org/x/crypto@v0.20.0
0.43.0
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
golang.org/x/crypto@v0.35.0
0.43.0
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
golang.org/x/crypto@v0.35.0
0.43.0
1
semitechnologies/weaviate:1.19.17a00d226f063
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.43.0
1
sentriz/gonic:v0.13.1a74012a6adf3
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.43.0
1
shaowenchen/ops-controller-manager:latest26da43bb5b66
golang.org/x/crypto@v0.37.0
0.43.0
1
shaowenchen/ops-server:latest315444f703f4
golang.org/x/crypto@v0.37.0
0.43.0
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.43.0
1
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
golang.org/x/crypto@v0.1.0
0.43.0
1
signoz/alertmanager:0.5.07bc7de2e33c2
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.43.0
1
sikalabs/slu:v0.72.07bd267f30247
golang.org/x/crypto@v0.16.0
0.43.0
1
sikalabs/slu:v0.34.0fdc0c6711add
golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab
0.43.0
1
simonschneider/traefik-jwt-decode:latestd674ac370f80
golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620
0.43.0
1
simpleidserver/faasprometheus:0.0.425e378d57d78
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.43.0
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
golang.org/x/crypto@v0.21.0
0.43.0
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
golang.org/x/crypto@v0.21.0
0.43.0
1
sky5367/locust-plugins-timescale:latestd3150f201471
golang.org/x/crypto@v0.20.0
0.43.0
1
skylenet/ethereum-genesis-generator:latest210353ce7c89
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
0.43.0
1
slamdev/config-connector-templater:0.0.3a234541c9fa8
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.43.0
1
slamdev/external-secrets-operator:0.0.8855f6625dda4
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.43.0
1
slamdev/gke-preemptible-notifier:v0.0.3d5d6430108a3
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.43.0
1
smailkoz/torrserver:1.0.1117b52d15de8f0
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.43.0
1
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
golang.org/x/crypto@v0.38.0
0.43.0
1
softonic/node-policy-webhook:0.1.2ab6098c04a53
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.43.0
1
softonic/pod-defaulter:0.1.072017aed5902
golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de
0.43.0
1
softonic/rate-limit-operator:0.1.1910f6de37763
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.43.0
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.43.0
1
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.43.0
1
splunk/splunk-operator:2.0.0c4e0d3146226
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.43.0
1
springhack/frpc_ingress:latest4aceb821da88
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.43.0
1
sstarcher/ecr-cleaner:0.1.12d43c390cb19
golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734
0.43.0
1
sstarcher/helm-exporter:0.5.011769d01ba35
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
0.43.0
1
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
0.43.0
1
stakater/konfigurator:v0.1.393409565b1ef5
golang.org/x/crypto@v0.17.0
0.43.0
1
stakater/tronador:v0.0.137ce9acf2722
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.43.0
1
stakater/whitelister:v0.0.1639107924063e
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.43.0
1
stakater/workshop-operator:v0.0.3897bf456cc97c
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.43.0
1
stakkato95/twitter-service-analytics:0.1.05d48906d66b3
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.43.0
1
stakkato95/twitter-service-tweets:0.1.18412d8a8cac3
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.43.0
1
stakkato95/twitter-service-users:0.1.1456049efee9a
golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898
0.43.0
1
stashapp/stash:latest24dbd7607174
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.43.0
1
stashapp/stash-box:latesta534c8afdf39
golang.org/x/crypto@v0.36.0
0.43.0
1
statcan/ingress-istio-controller:1.4.0d7d6bd180c46
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.43.0
1
statcan/kubernetes-sidecar-terminator:2.0.2bc361ee7748f
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.43.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.