CVE-2025-58181

Medium

Advisory

Published 19 Nov 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,787 indexed, latest versions
Container images: 2,350; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

Carried by container images the latest versions of 2,054 of 17,787 indexed charts deploy, on 2,350 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+146 more	0.45.0	2,350

OSV records: GHSA-j5w8-q4qc-rx2x
Also known as: GO-2025-4134

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

kraken-cikraken-ci

1.7.36

1 of 10 See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

7,285

kubebadgeskubebadges

0.1.3

1 of 2 See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
neosu/kubebadges :v0.0.5	256530d8e5c6	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

1,799

pyroscopekubeblocks

0.2.92

1 of 1 See more

pyroscope kubeblocks 0.2.92

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
apecloud/pyroscope :0.37.2	dbca95a15bc1	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

1,620

skywalkingkubesphere-test

3.1.0

2 of 4 See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.45.0
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.45.0

Open the chart page →

18,044

kubeviouskubevious

1.2.2

1 of 7 See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubevious/ui :1.2.1	6233e84bdd59	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0

Open the chart page →

14,204

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

3 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/crypto@v0.13.0	0.45.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/crypto@v0.13.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/crypto@v0.13.0	0.45.0

Open the chart page →

11,630

prometheus-pingmesh-exporterkubservice-charts

1.1.1

1 of 1 See more

prometheus-pingmesh-exporter kubservice-charts 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/crypto@v0.28.0	0.45.0

Open the chart page →

848

karporkusionstack

0.7.6

2 of 3 See more

karpor kusionstack 0.7.6

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kusionstack/karpor :v0.6.4	b707d3bf0abd	golang.org/x/crypto@v0.16.0	0.45.0
quay.io/coreos/etcd :v3.5.11	842975891182	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

3,297

loftloft

0.0.0-ci.14

1 of 1 See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	golang.org/x/crypto@v0.12.0	0.45.0

Open the chart page →

3,677

vcluster-k8sloft

0.0.0-ci.3

3 of 4 See more

vcluster-k8s loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/crypto@v0.1.0	0.45.0
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

5,574

kubecostmesosphere-stable

0.37.5

6 of 9 See more

kubecost mesosphere-stable 0.37.5

6 of the 9 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.7	1a359d92f40e	golang.org/x/crypto@v0.4.0	0.45.0
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	golang.org/x/crypto@v0.15.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	golang.org/x/crypto@v0.14.0	0.45.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.45.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/crypto@v0.26.0	0.45.0
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/crypto@v0.24.0	0.45.0

Open the chart page →

17,755

rclonemglants

2.3.4

1 of 1 See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0

Open the chart page →

2,743

helm-ai-kernelmindburn-labs

0.8.5

1 of 2 See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
alpine/helmdigest-pinned	105741fa6621	golang.org/x/crypto@v0.25.0	0.45.0

Open the chart page →

2,160

move2kubemove2kube

0.3.15

1 of 1 See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.45.0

Open the chart page →

3,794

nebraskanebraska

3.0.0

1 of 2 See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/nebraska :4.0.0	5c9e99ff7167	golang.org/x/crypto@v0.42.0	0.45.0

Open the chart page →

4,066

keycloak-operatornewsaktuell

0.1.7

1 of 1 See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0

Open the chart page →

5,066

openclaw-with-brainopenclaw-with-brain

0.1.67

1 of 3 See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
alpine/git :2.47.2	062a01ad7a0e	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

5,224

oesopsmx

4.0.32

5 of 25 See more

oes opsmx 4.0.32

5 of the 25 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.45.0
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.45.0
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.45.0
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0

Open the chart page →

107,899

ipfs-clusterparadeum-team

0.0.19

2 of 2 See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.45.0
ipfs/ipfs-cluster :1.0.2	1511f6d57994	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0

Open the chart page →

3,757

permifypermify

0.5.0

1 of 1 See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	golang.org/x/crypto@v0.24.0	0.45.0

Open the chart page →

997

platzioplatz-io

0.6.5

1 of 2 See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
platzio/backend :v0.6.5	d5e5972f344b	golang.org/x/crypto@v0.39.0	0.45.0

Open the chart page →

2,867

plecopleco

0.24.0

1 of 1 See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

1,346

pomeriumpomerium

34.0.1

1 of 1 See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
pomerium/pomerium :v0.22.1	9c69b10a2126	golang.org/x/crypto@v0.8.0	0.45.0

Open the chart page →

1,942

prometheus-systemd-exporterprometheus-community

0.5.2

1 of 1 See more

prometheus-systemd-exporter prometheus-community 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/systemd-exporter :v0.7.0	78c03f875dfb	golang.org/x/crypto@v0.31.0	0.45.0

Open the chart page →

725

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.45.0
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.45.0

Open the chart page →

12,125

qgis-serverqgis-server

0.1.10

1 of 3 See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/crypto@v0.35.0	0.45.0

Open the chart page →

5,079

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0

Open the chart page →

2,730

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-07-23T15-54-02Z	d249d1fb6966	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

13,615

rqliterqlite

2.0.0

1 of 1 See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rqlite/rqlite :9.1.3	7b992a526eee	golang.org/x/crypto@v0.43.0	0.45.0

Open the chart page →

1,311

qbittorrent-vpnrtomik-helm-charts

0.0.2

1 of 2 See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
qmcgaw/gluetun :v3.40.0	2b42bfa04675	golang.org/x/crypto@v0.29.0	0.45.0

Open the chart page →

1,218

bentoself-hosters-by-night

0.9.1

1 of 1 See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/warpstreamlabs/bento :1.8.1	21715979aefa	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

1,046

corednssoftizy

0.2.0

1 of 1 See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
coredns/coredns :1.10.1	a0ead06651cf	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.45.0

Open the chart page →

1,663

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0

Open the chart page →

12,502

miniosolidcharts

0.5.0

1 of 1 See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/coollabsio/minio :RELEASE.2025-10-15T17-29-55Z	69b55a1c1c5d	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

1,055

sn-platformstreamnative

1.11.44

5 of 9 See more

sn-platform streamnative 1.11.44

5 of the 9 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	golang.org/x/crypto@v0.4.0	0.45.0
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.45.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.45.0
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.45.0
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/crypto@v0.7.0	0.45.0

Open the chart page →

15,525

pocketbasetechwolf12

0.29.3

1 of 1 See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/techwolf12/pocketbase :0.29.3	106099641679	golang.org/x/crypto@v0.41.0	0.45.0

Open the chart page →

1,447

feedbacksystemthm-mni-ii

0.47.1

4 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

4 of the 10 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	golang.org/x/crypto@v0.17.0	0.45.0
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.45.0
library/docker :20.10.21-dind	3153fa63f546	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

28,579

topaztopaz

0.2.5

1 of 1 See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/aserto-dev/topaz :0.32.59	4c708ecf7dc4	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

1,494

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	golang.org/x/crypto@v0.0.0-20200317142112-1b76d66859c6	0.45.0

Open the chart page →

4,136

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.45.0
library/traefik :v2.5	7d5a6ae66572	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0

Open the chart page →

9,257

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

10,355

uptraceuptrace

2.0.2

1 of 2 See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
uptrace/uptrace :2.0.2	34a02c3b2d12	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

1,620

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/crypto@v0.11.0	0.45.0

Open the chart page →

1,344

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0

Open the chart page →

2,245

wasmcloud-chartwasmcloud-chart

0.7.2

1 of 2 See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	golang.org/x/crypto@v0.16.0	0.45.0

Open the chart page →

3,178

argo-cdwenerme

10.9.1

1 of 3 See more

argo-cd wenerme 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

2,989

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.45.0

Open the chart page →

6,085

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0

Open the chart page →

10,033

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0

Open the chart page →

4,713

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/crypto@v0.0.0-20220507011949-2cf3adece122	0.45.0

Open the chart page →

4,041

Container images carrying it

2,350 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
keptncontrib/prometheus-service :0.6.0	29969dd547de	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.45.0	1
keptn/distributor :0.8.3	6bc3df9e0d6a	golang.org/x/crypto@v0.0.0-20210314154223-e6e6c4f2bb5b	0.45.0	1
keptn/distributor :0.8.4	72e17527a4f9	golang.org/x/crypto@v0.0.0-20210314154223-e6e6c4f2bb5b	0.45.0	1
keptnsandbox/job-executor-service :0.1.3	6e6d323dd7ae	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.45.0	1
kfirfer/gcloud-mysql :1.0.3	c257c1e0e8b9	golang.org/x/crypto@v0.14.0	0.45.0	1
kfserving/kfserving-controller :v0.6.1	63d79d04c2e3	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.45.0	1
khairul169/garage-webui :1.1.0	17c793551873	golang.org/x/crypto@v0.35.0	0.45.0	1
kiosksh/kiosk :0.2.11	501725ba2025	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.45.0	1
kong/gateway-operator :1.6	03510967482b	golang.org/x/crypto@v0.37.0	0.45.0	1
kubebb/cert-manager-cainjector :v1.8.0	f83cd256229b	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.45.0	1
kubebb/cert-manager-controller :v1.8.0	20509de4b399	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.45.0	1
kubebb/core :v0.1.6	2b9e7f451d6b	golang.org/x/crypto@v0.12.0	0.45.0	1
kubebb/core :latest	e366c34a9b8d	golang.org/x/crypto@v0.17.0	0.45.0	1
kubebb/iam-controller :v0.2.0-20240128	8ffbfa2d67e9	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.45.0	1
kubebb/iam-provider :v0.2.0-20240128	0ba03fcee3a7	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.45.0	1
kubebb/kube-oidc-proxy-ce :v0.3.0-20221008	58d5efec568b	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0	1
kubebb/mesh-operator :v5.7.0	163ebbfc7a82	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0	1
kubebb/oidc-server :v0.2.0	2b5894ef1e2f	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.45.0	1
kubebuilder/kube-rbac-proxy :v0.16.0	3c4f708c6204	golang.org/x/crypto@v0.19.0	0.45.0	1
kubedb/kubedb-enterprise :v0.11.0	5829bcedcb0d	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0	1
kubedb/kubedb-ui-server :v0.0.1_linux_amd64	7d27865514ee	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0	1
kubedb/operator :v0.24.0	1a06ff0bda52	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0	1
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/crypto@v0.7.0	0.45.0	1
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0	1
kubeflowkatib/katib-controller :v0.12.0	12a28c8a0b41	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
kubeflowkatib/katib-controller :v0.17.0	72f14e03b9e1	golang.org/x/crypto@v0.21.0	0.45.0	1
kubeflowkatib/katib-ui :v0.12.0	129f0aaba976	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
kubeflownotebookswg/kfam :v1.9.2	2060a2ede788	golang.org/x/crypto@v0.14.0	0.45.0	1
kubeflownotebookswg/kfam :v1.6.1	f226fb44db57	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0	1
kubeflownotebookswg/notebook-controller :v1.9.2	0f14bd28fdd5	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0	1
kubeflownotebookswg/notebook-controller :v1.6.1	85e2e685abd6	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0	1
kubeflownotebookswg/profile-controller :v1.6.1	9f01767a460f	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0	1
kubeflownotebookswg/profile-controller :v1.9.2	f05a5538ae7e	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0	1
kubeflownotebookswg/tensorboard-controller :v1.9.2	6536a9f61193	golang.org/x/crypto@v0.14.0	0.45.0	1
kubeflownotebookswg/tensorboard-controller :v1.6.1	82ffdd2da285	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0	1
kubeflow/training-operator :v1-e1434f6	ff847e2b6af0	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0	1
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0	1
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.45.0	1
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0	1
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
kubemod/kubemod :v0.19.1	1f8154f7e80c	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0	1
kubemod/kubemod :v0.13.0	cadca39288ad	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0	1
kubemod/kubemod-crt :v1.3.0	028347c9fa77	golang.org/x/crypto@v0.0.0-20210506145944-38f3c27a63bf	0.45.0	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0	1
kubernetesui/dashboard :v2.6.1	290bebc3cd96	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0	1
kubernetesui/dashboard :v2.7.0	2e500d29e9d5	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0	1
kubernetesui/dashboard-api :1.7.0	60595892c2cf	golang.org/x/crypto@v0.23.0	0.45.0	1
kubernetesui/dashboard-api :1.14.0	96a702cfd339	golang.org/x/crypto@v0.38.0	0.45.0	1
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	golang.org/x/crypto@v0.21.0	0.45.0	1
kubernetesui/dashboard-auth :1.4.0	53e9917898bf	golang.org/x/crypto@v0.36.0	0.45.0	1