StackRadarChart IndexLive demo

CVE-2025-58063

High

Advisory

Published 9 Sept 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.1; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 63; of 17,781 indexed, latest versions
Container images: 53; deployed by those charts
Fix available: 1 of 1; affected package

CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion

Carried by container images the latest versions of 63 of 17,781 indexed charts deploy, on 53 images.

Affected package	Affected versions	Fixed in	Images
github.com/coredns/corednsgolang	v1.4.0, v1.6.6, v1.7.1-0.20200803163833-7d5f5b87a4fb+dirty, v1.8.0+9 more	1.12.4	53

OSV records: GHSA-93mf-426m-g6x9
Also known as: GO-2025-3942

Charts affected

63 by stars

Chart

Latest

Affected images

Radar Score

uptime-kumasarab97

1 of 1 See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.22.1	0b55bcb83a1c	github.com/coredns/coredns@v1.10.0	1.12.4

Open the chart page →

4,744

cloudflaredsectionme

1 of 1 See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	github.com/coredns/coredns@v1.8.7	1.12.4

Open the chart page →

2,407

miniosergiotocalini

1 of 1 See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/coredns/coredns@v1.10.1	1.12.4

Open the chart page →

4,203

mimirskyloud-helm-charts

1 of 5 See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/coredns/coredns@v1.11.1	1.12.4

Open the chart page →

10,651

spinnakerspinnaker

1 of 4 See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2020-01-03T19-12-21Z	f00aa6ef2b72	github.com/coredns/coredns@v1.4.0	1.12.4

Open the chart page →

6,836

servicexssl-hep

1 of 16 See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	github.com/coredns/coredns@v1.9.4	1.12.4

Open the chart page →

66,266

miniouninettsigma2

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	github.com/coredns/coredns@v1.9.4	1.12.4

Open the chart page →

4,960

consulwarjiang

1 of 2 See more

consul warjiang 1.3.0

1 of the 2 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.17.0	712fe02d2f84	github.com/coredns/coredns@v1.10.1	1.12.4

Open the chart page →

4,060

juicefs-csi-driverwenerme

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	github.com/coredns/coredns@v1.4.0	1.12.4

Open the chart page →

9,117

miniowenerme

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	github.com/coredns/coredns@v1.4.0	1.12.4

Open the chart page →

6,915

minio-standalonewenerme

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	github.com/coredns/coredns@v1.4.0	1.12.4

Open the chart page →

6,138

wexa-studiowexa-studio

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	github.com/coredns/coredns@v1.11.1	1.12.4

Open the chart page →

14,983

zahori-consulzahori

1 of 2 See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-58063.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	github.com/coredns/coredns@v1.6.6	1.12.4

Open the chart page →

5,033

Container images carrying it

53 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	github.com/coredns/coredns@v1.9.4	1.12.4	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	github.com/coredns/coredns@v1.10.0	1.12.4	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	github.com/coredns/coredns@v1.10.0	1.12.4	1