CVE-2025-47913

High

Advisory

Published 13 Nov 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,023; of 17,803 indexed, latest versions
Container images: 2,313; deployed by those charts
Fix available: 8 of 8; affected packages

Red Hat Security Advisory: container-tools:rhel8 security update

Carried by container images the latest versions of 2,023 of 17,803 indexed charts deploy, on 2,313 images.

Affected package	Affected versions	Fixed in	Images
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-82.module+el8.10.0+23863+d7fda2d7	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+23863+d7fda2d7	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+23863+d7fda2d7	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+23863+d7fda2d7	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	4:1.2.9-2.module+el8.10.0+23863+d7fda2d7	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.5-5.module+el8.10.0+23863+d7fda2d7	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+23863+d7fda2d7	1
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+144 more	0.43.0	2,313

OSV records: RHSA-2026:0753 GO-2025-4116
Also known as: GHSA-56w8-48fp-6mgv, RHSA-2026:16701

Charts affected

2,023 by stars

Chart

Latest

Affected images

Radar Score

lensoci-ai-incubations

0.1.14

7 of 16 See more

lens oci-ai-incubations 0.1.14

7 of the 16 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/crypto@v0.38.0	0.43.0
grafana/grafana :12.1.1	a1701c218024	golang.org/x/crypto@v0.39.0	0.43.0
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/crypto@v0.14.0	0.43.0
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/crypto@v0.14.0	0.43.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.85.0	ebb560bcb6bd	golang.org/x/crypto@v0.41.0	0.43.0
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	golang.org/x/crypto@v0.39.0	0.43.0
quay.io/prometheus/pushgateway :v1.11.1	03738d278e08	golang.org/x/crypto@v0.35.0	0.43.0

Open the chart page →

17,257

kueue-addonocm-helm-charts

0.1.4

1 of 1 See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/kueue-addon :v0.1.4	7f728514fead	golang.org/x/crypto@v0.37.0	0.43.0

Open the chart page →

1,619

multicluster-meshocm-helm-charts

0.0.2

1 of 1 See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/multicluster-mesh-addon :latest	3e010e1188f1	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.43.0

Open the chart page →

2,131

my-bloody-jenkinsodavid

0.1.218

1 of 1 See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	golang.org/x/crypto@v0.6.0	0.43.0

Open the chart page →

5,812

hive-metastoreolehrgf

0.1.0

1 of 1 See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.43.0

Open the chart page →

8,549

exposecontrollerolli-ai

1.0.5

1 of 1 See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.43.0

Open the chart page →

2,861

k8s-replicatorolli-ai

1.3.0

1 of 1 See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.43.0

Open the chart page →

2,825

nocodbone-acre-fund

0.4.6

1 of 3 See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.258.0	6779a4ddedf2	golang.org/x/crypto@v0.17.0	0.43.0

Open the chart page →

4,241

onedevonedev

11.9.0

1 of 1 See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
1dev/server :11.9.0	cd5b12fe5471	golang.org/x/crypto@v0.37.0	0.43.0

Open the chart page →

6,148

one-green-coreone-green-core

0.0.7

3 of 8 See more

one-green-core one-green-core 0.0.7

3 of the 8 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.3	ecc1b80b8ca2	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.43.0
library/influxdb :2.0.8	ba10ac9ba17a	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.43.0
library/telegraf :1.20.4	28e98eece020	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.43.0

Open the chart page →

9,582

onyx-stackonyx

0.3.1

3 of 12 See more

onyx-stack onyx 0.3.1

3 of the 12 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.17.2	72dc058e478d	golang.org/x/crypto@v0.37.0	0.43.0
ghcr.io/kedacore/keda-admission-webhooks :2.17.2	c8227c6edb4d	golang.org/x/crypto@v0.37.0	0.43.0
ghcr.io/kedacore/keda-metrics-apiserver :2.17.2	f312f50ddc57	golang.org/x/crypto@v0.37.0	0.43.0

Open the chart page →

6,697

raspberrymaticopenccu

3.83.6

1 of 1 See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/jens-maus/raspberrymatic :3.83.6.20250824	4b22b4f407c4	golang.org/x/crypto@v0.38.0	0.43.0

Open the chart page →

2,424

anchore-engineopencloudcx

1.13.0

1 of 2 See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
anchore/anchore-engine :v0.10.0	bde9eedf639d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0

Open the chart page →

18,034

bbsimopencord

4.8.11

1 of 1 See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
voltha/bbsim :1.16.7	d90403d58016	golang.org/x/crypto@v0.0.0-20200204104054-c9f3fb736b72	0.43.0

Open the chart page →

3,918

bbsim-sadis-serveropencord

0.3.5

1 of 1 See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
voltha/bbsim-sadis-server :0.4.0	762b272d439e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.43.0

Open the chart page →

3,731

nem-monitoringopencord

1.3.22

1 of 9 See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.43.0

Open the chart page →

4,620

volthaopencord

2.14.0

1 of 2 See more

voltha opencord 2.14.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.43.0

Open the chart page →

3,825

voltha-adapter-openoltopencord

2.14.0

1 of 1 See more

voltha-adapter-openolt opencord 2.14.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
voltha/voltha-openolt-adapter :4.5.16	d6d79c08350a	golang.org/x/crypto@v0.24.0	0.43.0

Open the chart page →

898

voltha-adapter-openonuopencord

2.14.0

1 of 1 See more

voltha-adapter-openonu opencord 2.14.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
voltha/voltha-openonu-adapter-go :2.12.25	d8f2eb5f2a7e	golang.org/x/crypto@v0.32.0	0.43.0

Open the chart page →

844

voltha-infraopencord

2.14.0

2 of 10 See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.43.0
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.43.0

Open the chart page →

41,148

voltha-stackopencord

2.14.0

3 of 4 See more

voltha-stack opencord 2.14.0

3 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
voltha/voltha-openolt-adapter :4.5.16	d6d79c08350a	golang.org/x/crypto@v0.24.0	0.43.0
voltha/voltha-openonu-adapter-go :2.12.25	d8f2eb5f2a7e	golang.org/x/crypto@v0.32.0	0.43.0
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.43.0

Open the chart page →

5,567

federated-gatewayopenfaas

0.1.0

1 of 1 See more

federated-gateway openfaas 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	golang.org/x/crypto@v0.16.0	0.43.0

Open the chart page →

1,240

gcp-pubsub-connectoropenfaas

0.0.1

1 of 1 See more

gcp-pubsub-connector openfaas 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/gcp-pubsub-connector :0.0.1	8df071f5b719	golang.org/x/crypto@v0.35.0	0.43.0

Open the chart page →

1,162

nats-connectoropenfaas

0.3.2

1 of 1 See more

nats-connector openfaas 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.43.0

Open the chart page →

1,471

postgres-connectoropenfaas

0.1.2

1 of 1 See more

postgres-connector openfaas 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	golang.org/x/crypto@v0.32.0	0.43.0

Open the chart page →

1,215

probuilderopenfaas

0.2.0

1 of 2 See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.10.0	c2aeafaed434	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.43.0

Open the chart page →

4,761

kruise-state-metricsopenkruise

0.2.0

1 of 1 See more

kruise-state-metrics openkruise 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.43.0

Open the chart page →

1,929

openldapopenldap

0.1.1

1 of 2 See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.43.0

Open the chart page →

5,295

sentinelopennms-helm-charts

0.4.0

1 of 2 See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
opennms/sentinel :36.0.2	88869082a14f	golang.org/x/crypto@v0.27.0	0.43.0

Open the chart page →

2,087

minioopenobserve

5.0.7

2 of 2 See more

minio openobserve 5.0.7

2 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	golang.org/x/crypto@v0.3.0	0.43.0
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	golang.org/x/crypto@v0.5.0	0.43.0

Open the chart page →

7,613

openobserve-collectoropenobserve

0.4.6

1 of 1 See more

openobserve-collector openobserve 0.4.6

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.15.0	db384bf43222	golang.org/x/crypto@v0.31.0	0.43.0

Open the chart page →

731

exporteropenshift

1.0.47

2 of 3 See more

exporter openshift 1.0.47

2 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	golang.org/x/crypto@v0.14.0	0.43.0
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	golang.org/x/crypto@v0.25.0	0.43.0

Open the chart page →

13,076

fsmopenshift

0.1.8-ubi.6

3 of 6 See more

fsm openshift 0.1.8-ubi.6

3 of the 6 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.43.0
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.43.0
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.43.0

Open the chart page →

16,567

harikubeopenshift

0.16.3

1 of 3 See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	golang.org/x/crypto@v0.42.0	0.43.0

Open the chart page →

2,653

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	golang.org/x/crypto@v0.17.0	0.43.0

Open the chart page →

4,234

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	golang.org/x/crypto@v0.31.0	0.43.0

Open the chart page →

5,863

mattermost-team-editionopenshift

6.6.83

1 of 4 See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	golang.org/x/crypto@v0.38.0	0.43.0

Open the chart page →

4,127

opscruiseopenshift

0.35.100

3 of 11 See more

opscruise openshift 0.35.100

3 of the 11 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.43.0
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.43.0

Open the chart page →

8,234

osm-edgeopenshift

1.2.1-ubi8

3 of 7 See more

osm-edge openshift 1.2.1-ubi8

3 of the 7 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/crypto@v0.5.0	0.43.0
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/crypto@v0.5.0	0.43.0
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/crypto@v0.5.0	0.43.0

Open the chart page →

19,476

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.43.0

Open the chart page →

8,687

openvscode-serveropenvscode-server-helm

2.7.38

1 of 2 See more

openvscode-server openvscode-server-helm 2.7.38

1 of the 2 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/crypto@v0.2.0	0.43.0

Open the chart page →

4,232

gitlab-proxyopslevel

0.0.8

1 of 1 See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
library/caddy :2.6	60fb54d36b4b	golang.org/x/crypto@v0.5.0	0.43.0

Open the chart page →

1,882

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	golang.org/x/crypto@v0.26.0	0.43.0

Open the chart page →

1,753

opslevelopslevel

2025.1.22

2 of 10 See more

opslevel opslevel 2025.1.22

2 of the 10 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/crypto@v0.6.0	0.43.0
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/crypto@v0.25.0	0.43.0

Open the chart page →

5,670

agentoptimizely-agent

1.4.0

1 of 1 See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/crypto@v0.14.0	0.43.0

Open the chart page →

1,230

orderregistratiecomponentorderregistratiecomponent

1.0.0

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.43.0

Open the chart page →

7,503

prometheusosc

0.26.2

2 of 12 See more

prometheus osc 0.26.2

2 of the 12 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/crypto@v0.8.0	0.43.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.43.0

Open the chart page →

3,381

grrosdfir-infrastructure

1.0.3

1 of 5 See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/crypto@v0.22.0	0.43.0

Open the chart page →

11,047

osdfir-infrastructureosdfir-infrastructure

2.15.0

6 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

6 of the 40 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
bitnamilegacy/git :latest	4b08d0c5af8d	golang.org/x/crypto@v0.36.0	0.43.0
library/arangodb :3.11.8	1e75d74954a4	golang.org/x/crypto@v0.17.0	0.43.0
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.43.0
gcr.io/kaniko-project/executor :latest	4e7a52dd1f14	golang.org/x/crypto@v0.38.0	0.43.0
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/crypto@v0.22.0	0.43.0
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.43.0

Open the chart page →

184,580

yetiosdfir-infrastructure

1.0.5

1 of 4 See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-47913.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	golang.org/x/crypto@v0.17.0	0.43.0

Open the chart page →

6,756

Container images carrying it

2,313 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	golang.org/x/crypto@v0.31.0	0.43.0	1
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	golang.org/x/crypto@v0.6.0	0.43.0	1
ghcr.io/gabe565/matrimony :latest	d39a9d7c3e1b	golang.org/x/crypto@v0.19.0	0.43.0	1
ghcr.io/gabe565/transsmute :latest	c8ac95a30c31	golang.org/x/crypto@v0.36.0	0.43.0	1
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	golang.org/x/crypto@v0.14.0	0.43.0	1
ghcr.io/georgmangold/console :v1.8.1	58f4f180aa6e	golang.org/x/crypto@v0.36.0	0.43.0	1
ghcr.io/gla-rad/mc-mms-edgerouter :latest	3620d5680775	golang.org/x/crypto@v0.41.0	0.43.0	1
ghcr.io/gla-rad/mc-mms-router :latest	032e977d9adf	golang.org/x/crypto@v0.42.0	0.43.0	1
ghcr.io/glauth/glauth :v2.5.2	09c782ca5984	golang.org/x/crypto@v0.18.0	0.43.0	1
ghcr.io/gochain/rpc-proxy/rpc-proxy :latest	ca01f5ab95f7	golang.org/x/crypto@v0.36.0	0.43.0	1
ghcr.io/gotify/server :2.6.1	04f4c4bb7cdd	golang.org/x/crypto@v0.29.0	0.43.0	1
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	golang.org/x/crypto@v0.39.0	0.43.0	1
ghcr.io/grafana/grafana-operator :v5.18.0	0af2faec9d6f	golang.org/x/crypto@v0.36.0	0.43.0	1
ghcr.io/gurucomputing/headscale-ui :2026.03.17	015f5ba04bcb	golang.org/x/crypto@v0.40.0	0.43.0	1
ghcr.io/helm/chartmuseum :v0.16.0	71d1f1c0179e	golang.org/x/crypto@v0.9.0	0.43.0	1
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.43.0	1
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.43.0	1
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	golang.org/x/crypto@v0.36.0	0.43.0	1
ghcr.io/helmfile/helmfile :v1.7.4	f20e612d5a98	golang.org/x/crypto@v0.24.0	0.43.0	1
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	golang.org/x/crypto@v0.26.0	0.43.0	1
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	golang.org/x/crypto@v0.26.0	0.43.0	1
ghcr.io/home-assistant/home-assistant :2026.8.2	56690a89c79a	golang.org/x/crypto@v0.26.0	0.43.0	1
ghcr.io/home-assistant/home-assistant :2026.9.1 :latest	612d76760b54	golang.org/x/crypto@v0.26.0	0.43.0	1
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	golang.org/x/crypto@v0.26.0	0.43.0	1
ghcr.io/home-assistant/home-assistant :2022.5.4	ec6d67fbedfa	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.43.0	1
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.43.0	1
ghcr.io/home-operations/home-assistant :2026.3.1	067e54e2e107	golang.org/x/crypto@v0.26.0	0.43.0	1
ghcr.io/honeycombio/kspan/kspan :0.2	c966a4f8a4b7	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0	1
ghcr.io/ignisda/ryot :v10.5.0	a752b6aee537	golang.org/x/crypto@v0.31.0	0.43.0	1
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	golang.org/x/crypto@v0.42.0	0.43.0	1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw :latest	0e05a7b49c33	golang.org/x/crypto@v0.38.0	0.43.0	1
ghcr.io/invergent-ai/surogate-hub :latest	6d4106724d56	golang.org/x/crypto@v0.41.0	0.43.0	1
ghcr.io/itakurah/kubernetes-event-exporter :v1.7	8abb52b66557	golang.org/x/crypto@v0.17.0	0.43.0	1
ghcr.io/it-at-m/appswitcher-server :1.3.0	10006bc0f309	golang.org/x/crypto@v0.37.0	0.43.0	1
ghcr.io/jaconi-io/koptimize :1.2.5	aca1bbd609b6	golang.org/x/crypto@v0.9.0	0.43.0	1
ghcr.io/jaydee94/kubeseal-webgui/api :4.5.3	3cceb9462ae1	golang.org/x/crypto@v0.39.0	0.43.0	1
ghcr.io/jens-maus/raspberrymatic :3.83.6.20250824	4b22b4f407c4	golang.org/x/crypto@v0.38.0	0.43.0	1
ghcr.io/jmberesford/retrom-service :retrom-v0.7.14	4d763d58f11d	golang.org/x/crypto@v0.26.0	0.43.0	1
ghcr.io/jodevsa/wireguard-operator/manager :v2.0.28	39412bdd403b	golang.org/x/crypto@v0.21.0	0.43.0	1
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	golang.org/x/crypto@v0.32.0	0.43.0	1
ghcr.io/justwatchcom/sql_exporter :v0.8	c4b1d3d0f052	golang.org/x/crypto@v0.36.0	0.43.0	1
ghcr.io/k10app/businit :latest	94c9a3e799c2	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.43.0	1
ghcr.io/k8s-lynq/lynq :1.1.22	229b05e3c717	golang.org/x/crypto@v0.36.0	0.43.0	1
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.43.0	1
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.43.0	1
ghcr.io/kagent-dev/kagent/tools :0.2.1	50b431281d3e	golang.org/x/crypto@v0.41.0	0.43.0	1
ghcr.io/kagent-dev/kagent/tools :0.0.13	c8882543f693	golang.org/x/crypto@v0.42.0	0.43.0	1
ghcr.io/kalgurn/grl-exporter :v3.2.0	bd109b2bda38	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.43.0	1
ghcr.io/kedacore/keda :2.16.0	02348a19aeae	golang.org/x/crypto@v0.28.0	0.43.0	1
ghcr.io/kedacore/keda :2.17.0	112fc427d933	golang.org/x/crypto@v0.37.0	0.43.0	1