CVE-2025-47914

Medium

Advisory

Published 19 Nov 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,111; of 17,813 indexed, latest versions
Container images: 2,388; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read

Carried by container images the latest versions of 2,111 of 17,813 indexed charts deploy, on 2,388 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+147 more	0.45.0	2,388

OSV records: GHSA-f6x5-jh6r-wrfv
Also known as: GO-2025-4135

Charts affected

2,111 by stars

Chart

Latest

Affected images

Radar Score

knative-servingknative-serving

1.18.3

1 of 7 See more

knative-serving knative-serving 1.18.3

1 of the 7 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	5b93308a392c	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

3,777

komiserkomiser-eks

3.1.10

1 of 1 See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
tailwarden/komiser :3.1.10	3f68c8ae7993	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

1,272

simple-oauth2-proxykostiantyn-matsebora-helm-charts

0.3.7

1 of 1 See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.7.0	9ed7eaf72050	golang.org/x/crypto@v0.27.0	0.45.0

Open the chart page →

927

kovi-tile38kovi-charts

0.1.1

1 of 1 See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
tile38/tile38 :1.33.4	afb7e82f9485	golang.org/x/crypto@v0.21.0	0.45.0

Open the chart page →

1,208

kpingkping

0.3.5

1 of 1 See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
kayrosuno/kping :latest	f3bd44b29b0d	golang.org/x/crypto@v0.41.0	0.45.0

Open the chart page →

2,255

authnkrateo

0.23.0

1 of 1 See more

authn krateo 0.23.0

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
ghcr.io/krateoplatformops/authn :0.23.0	791c8f9d885a	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

678

installerkrateo

2.7.1

1 of 2 See more

installer krateo 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

3,277

installer-pre-upgradekrateo

2.7.1

1 of 1 See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

2,543

kubeflowkromanow94-kubeflow

0.5.1

9 of 30 See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
kubeflowkatib/katib-controller :v0.17.0	72f14e03b9e1	golang.org/x/crypto@v0.21.0	0.45.0
kubeflownotebookswg/kfam :v1.9.2	2060a2ede788	golang.org/x/crypto@v0.14.0	0.45.0
kubeflownotebookswg/notebook-controller :v1.9.2	0f14bd28fdd5	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
kubeflownotebookswg/profile-controller :v1.9.2	f05a5538ae7e	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0
kubeflownotebookswg/tensorboard-controller :v1.9.2	6536a9f61193	golang.org/x/crypto@v0.14.0	0.45.0
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	golang.org/x/crypto@v0.22.0	0.45.0
gcr.io/ml-pipeline/cache-server :2.3.0	293941ee4f65	golang.org/x/crypto@v0.22.0	0.45.0
gcr.io/ml-pipeline/persistenceagent :2.3.0	109ac1b38c41	golang.org/x/crypto@v0.22.0	0.45.0
gcr.io/ml-pipeline/scheduledworkflow :2.3.0	f7e67e0bc071	golang.org/x/crypto@v0.22.0	0.45.0

Open the chart page →

71,574

lndkronkltd

0.3.9

3 of 4 See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
thesisrobot/lnd :v0.14.1-beta	d94c8dbf6dac	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0
thesisrobot/loop :v0.11.1-beta	89ae07e787ca	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.45.0
thesisrobot/pool :v0.3.3-alpha	2d1c388a4bda	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.45.0

Open the chart page →

8,476

casdoorkrzwiatrzyk

1.0.0

1 of 1 See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
casbin/casdoor :v1.224.0	66f836ef778b	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0

Open the chart page →

3,650

nocodbkrzwiatrzyk

0.0.1

1 of 1 See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.100.2	b0b91ec2a2dd	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0

Open the chart page →

2,321

pipecdkrzwiatrzyk

0.39.0

1 of 3 See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0

Open the chart page →

3,821

traggokrzwiatrzyk

1.0.0

1 of 1 See more

traggo krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
traggo/server :0.2.3	f1ced637510e	golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f	0.45.0

Open the chart page →

1,886

ksoc-pluginsksoc

1.9.10

1 of 5 See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.34	e97e0e7a2088	golang.org/x/crypto@v0.31.0	0.45.0

Open the chart page →

3,213

bc-depositorykubebb

0.0.3

1 of 1 See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
hyperledgerk8s/bc-saas :v0.0.1-20230524	d8bc31176257	golang.org/x/crypto@v0.7.0	0.45.0

Open the chart page →

1,947

bc-explorerkubebb

0.0.3

1 of 1 See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
hyperledgerk8s/bc-explorer :v20230504	1f1a06b61f18	golang.org/x/crypto@v0.7.0	0.45.0

Open the chart page →

1,947

chartmuseumkubebb

3.10.2

1 of 1 See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.0	71d1f1c0179e	golang.org/x/crypto@v0.9.0	0.45.0

Open the chart page →

2,276

cluster-componentkubebb

0.2.2

2 of 4 See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
kubebb/cert-manager-cainjector :v1.8.0	f83cd256229b	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.45.0
kubebb/cert-manager-controller :v1.8.0	20509de4b399	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.45.0

Open the chart page →

8,178

fabric-operatorkubebb

0.1.0

1 of 1 See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
hyperledgerk8s/fabric-operator :7776e71	29a8af8be270	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.45.0

Open the chart page →

3,997

kubebbkubebb

0.0.1

1 of 1 See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
kubebb/core :latest	e366c34a9b8d	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

1,758

kubebb-corekubebb

0.1.27

1 of 1 See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
kubebb/core :v0.1.6	2b9e7f451d6b	golang.org/x/crypto@v0.12.0	0.45.0

Open the chart page →

1,947

miniokubebb

5.0.10

2 of 2 See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
hyperledgerk8s/minio-mc :RELEASE.2023-01-28T20-29-38Z	729b3d128487	golang.org/x/crypto@v0.3.0	0.45.0
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	golang.org/x/crypto@v0.5.0	0.45.0

Open the chart page →

7,614

tdsfkubebb

5.7.0

1 of 3 See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
kubebb/mesh-operator :v5.7.0	163ebbfc7a82	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0

Open the chart page →

6,504

u4a-componentkubebb

0.2.10

4 of 8 See more

u4a-component kubebb 0.2.10

4 of the 8 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
kubebb/iam-controller :v0.2.0-20240128	8ffbfa2d67e9	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.45.0
kubebb/iam-provider :v0.2.0-20240128	0ba03fcee3a7	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.45.0
kubebb/kube-oidc-proxy-ce :v0.3.0-20221008	58d5efec568b	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0
kubebb/oidc-server :v0.2.0	2b5894ef1e2f	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.45.0

Open the chart page →

13,856

weaviatekubebb

16.3.0

1 of 1 See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
semitechnologies/weaviate :1.19.1	7a00d226f063	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.45.0

Open the chart page →

1,876

argo-workflowskubeblocks

0.40.14

2 of 2 See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	golang.org/x/crypto@v0.17.0	0.45.0
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

2,886

calicokubeblocks

3.28.0

3 of 3 See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.0	cef0c907b8f4	golang.org/x/crypto@v0.22.0	0.45.0
calico/kube-controllers :v3.28.0	8f04e4772a2b	golang.org/x/crypto@v0.22.0	0.45.0
calico/node :v3.28.0	385bf6391fea	golang.org/x/crypto@v0.22.0	0.45.0

Open the chart page →

3,316

casdoor-helm-chartskubeblocks

1.753.0

1 of 1 See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
casbin/casdoor :v1.753.0	770ad9ec3190	golang.org/x/crypto@v0.21.0	0.45.0

Open the chart page →

2,307

chaos-meshkubeblocks

2.7.2

4 of 4 See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.6	78dc63bc5b89	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	golang.org/x/crypto@v0.17.0	0.45.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	golang.org/x/crypto@v0.17.0	0.45.0
ghcr.io/chaos-mesh/chaos-mesh :v2.7.2	8bc853c7414c	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

13,835

ciliumkubeblocks

1.15.1

2 of 2 See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	golang.org/x/crypto@v0.17.0	0.45.0
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

5,152

geminikubeblocks

0.13.4

1 of 8 See more

gemini kubeblocks 0.13.4

1 of the 8 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/crypto@v0.31.0	0.45.0

Open the chart page →

3,104

gemini-schedulerkubeblocks

0.1.1

1 of 1 See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	golang.org/x/crypto@v0.26.0	0.45.0

Open the chart page →

1,572

grafanakubeblocks

6.59.4

1 of 1 See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
grafana/grafana :10.1.1	1b9ca4bbc4a2	golang.org/x/crypto@v0.11.0	0.45.0

Open the chart page →

3,580

kubetrankubeblocks

0.1.0

1 of 1 See more

kubetran kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
apecloud/kubetran-platform :latest	32bd92c7f7fa	golang.org/x/crypto@v0.13.0	0.45.0

Open the chart page →

1,208

lokikubeblocks

5.39.0

3 of 5 See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.34.1	045c9125634c	golang.org/x/crypto@v0.8.0	0.45.0
grafana/loki :2.9.2	6074e01dbe03	golang.org/x/crypto@v0.14.0	0.45.0
grafana/loki-canary :2.9.2	4249db29b992	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

5,863

metrics-serverkubeblocks

3.12.0

1 of 1 See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	golang.org/x/crypto@v0.18.0	0.45.0

Open the chart page →

1,145

nvidia-gpu-exporterkubeblocks

0.3.1

1 of 1 See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0

Open the chart page →

4,524

openebskubeblocks

3.10.0

2 of 3 See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

10,631

postgres-operatorkubeblocks

1.12.2

1 of 1 See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	golang.org/x/crypto@v0.23.0	0.45.0

Open the chart page →

1,555

prometheuskubeblocks

15.16.1

5 of 6 See more

prometheus kubeblocks 15.16.1

5 of the 6 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
quay.io/prometheus/alertmanager :v0.24.0	088464f949de	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0

Open the chart page →

10,324

vaultkubeblocks

0.30.0

2 of 2 See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.19.0	bbb7f98dc67d	golang.org/x/crypto@v0.35.0	0.45.0
hashicorp/vault-k8s :1.6.2	103a2d817a74	golang.org/x/crypto@v0.35.0	0.45.0

Open the chart page →

3,044

victoria-metrics-alertkubeblocks

0.8.3-reload

1 of 3 See more

victoria-metrics-alert kubeblocks 0.8.3-reload

1 of the 3 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

3,717

kubeclaritykubeclarity

2.23.3

2 of 5 See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/crypto@v0.12.0	0.45.0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

5,521

cephfs-csikubegems

1.0.8

1 of 6 See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0

Open the chart page →

4,453

chartmuseumkubegems

3.8.0

1 of 1 See more

chartmuseum kubegems 3.8.0

1 of the 1 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.45.0

Open the chart page →

3,527

gatewaykubegems

0.3.2

2 of 2 See more

gateway kubegems 0.3.2

2 of the 2 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

3,507

giteakubegems

5.0.8

1 of 2 See more

gitea kubegems 5.0.8

1 of the 2 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
gitea/gitea :1.16.8	b0bdf102b485	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0

Open the chart page →

3,402

juicefs-csi-driverkubegems

0.19.2

2 of 6 See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.23.0	3e4daf9626d5	golang.org/x/crypto@v0.14.0	0.45.0
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

4,866

knative-servingkubegems

1.0.1

1 of 8 See more

knative-serving kubegems 1.0.1

1 of the 8 container images this version deploys carry CVE-2025-47914.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	bac158dfb0c7	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0

Open the chart page →

10,476

Container images carrying it

2,388 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/opstree/mongodb-operator :v0.3.0	879b9bead838	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0	1
quay.io/projectquay/clair :4.7.2	8d38ffa8fad7	golang.org/x/crypto@v0.12.0	0.45.0	1
quay.io/prometheus/alertmanager :v0.24.0	088464f949de	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0	1
quay.io/prometheuscommunity/elasticsearch-exporter :v1.8.0	073dd360de2c	golang.org/x/crypto@v0.21.0	0.45.0	1
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	golang.org/x/crypto@v0.33.0	0.45.0	1
quay.io/prometheuscommunity/systemd-exporter :v0.7.0	78c03f875dfb	golang.org/x/crypto@v0.31.0	0.45.0	1
quay.io/prometheusmsteams/prometheus-msteams :v1.5.3	a9f4d31ab811	golang.org/x/crypto@v0.6.0	0.45.0	1
quay.io/prometheus/node-exporter :v1.7.0	4cb2b9019f17	golang.org/x/crypto@v0.14.0	0.45.0	1
quay.io/prometheus/node-exporter :v1.8.0	8a57af80a4c7	golang.org/x/crypto@v0.21.0	0.45.0	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.73.2	706cde441321	golang.org/x/crypto@v0.21.0	0.45.0	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.83.0	78aec597d87a	golang.org/x/crypto@v0.38.0	0.45.0	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	golang.org/x/crypto@v0.14.0	0.45.0	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.70.0	e20576b76ffd	golang.org/x/crypto@v0.16.0	0.45.0	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.1	e2dc5623bcdd	golang.org/x/crypto@v0.28.0	0.45.0	1
quay.io/prometheus-operator/prometheus-config-reloader :v0.85.0	ebb560bcb6bd	golang.org/x/crypto@v0.41.0	0.45.0	1
quay.io/prometheus-operator/prometheus-operator :v0.73.2	04f2b98d71ef	golang.org/x/crypto@v0.21.0	0.45.0	1
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	golang.org/x/crypto@v0.23.0	0.45.0	1
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/crypto@v0.28.0	0.45.0	1
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0	1
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.45.0	1
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	golang.org/x/crypto@v0.32.0	0.45.0	1
quay.io/prometheus/prometheus :v3.5.0	63805ebb8d2b	golang.org/x/crypto@v0.39.0	0.45.0	1
quay.io/prometheus/prometheus :v3.2.1	6927e0919a14	golang.org/x/crypto@v0.32.0	0.45.0	1
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.45.0	1
quay.io/prometheus/prometheus :v3.4.1	9abc6cf6aea7	golang.org/x/crypto@v0.37.0	0.45.0	1
quay.io/prometheus/prometheus :v2.34.0	b37103e03399	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.45.0	1
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	golang.org/x/crypto@v0.24.0	0.45.0	1
quay.io/prometheus/pushgateway :v1.11.1	03738d278e08	golang.org/x/crypto@v0.35.0	0.45.0	1
quay.io/prometheus/pushgateway :v1.6.0	5111de00e969	golang.org/x/crypto@v0.8.0	0.45.0	1
quay.io/prometheus/statsd-exporter :v0.27.2	9ed70604d941	golang.org/x/crypto@v0.26.0	0.45.0	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.45.0	1
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.45.0	1
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
quay.io/seamware/did-helper :0.6.0	799c5f566952	golang.org/x/crypto@v0.37.0	0.45.0	1
quay.io/sergeyshevch/s3manager :feature_refactoring	ff59fcdf44eb	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
quay.io/skopeo/stable :v1.13	4853591bd1d2	golang.org/x/crypto@v0.10.0	0.45.0	1
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
quay.io/superq/draytek-exporter :v0.2.0	3b577bdceaae	golang.org/x/crypto@v0.43.0	0.45.0	1
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	golang.org/x/crypto@v0.8.0	0.45.0	1
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	golang.org/x/crypto@v0.39.0	0.45.0	1
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/crypto@v0.24.0	0.45.0	1
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
quay.io/tigera/operator :v1.15.1	c6591da87aa8	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.45.0	1
quay.io/uswitch/kiam :v4.0	be3a5846922d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1