CVE-2025-58181

Medium

Advisory

Published 19 Nov 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,048; of 17,792 indexed, latest versions
Container images: 2,344; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

Carried by container images the latest versions of 2,048 of 17,792 indexed charts deploy, on 2,344 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+146 more	0.45.0	2,344

OSV records: GHSA-j5w8-q4qc-rx2x
Also known as: GO-2025-4134

Charts affected

2,048 by stars

Chart

Latest

Affected images

Radar Score

memo-componentmemo-component

1.0.0

1 of 3 See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0

Open the chart page →

7,519

dex-k8s-authenticatormesosphere

1.4.3

1 of 1 See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mesosphere/dex-k8s-authenticator :v1.4.1-d2iq	f3d9982cc2fd	golang.org/x/crypto@v0.11.0	0.45.0

Open the chart page →

1,019

flaggermesosphere

0.21.0

1 of 2 See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
weaveworks/flagger :0.19.0	a9c2e9df4227	golang.org/x/crypto@v0.0.0-20181025213731-e84da0312774	0.45.0

Open the chart page →

6,049

gatekeepermesosphere

0.6.11

1 of 2 See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

3,041

kafka-operatormesosphere

0.20.2

1 of 2 See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0

Open the chart page →

1,884

kubeaddons-catalogmesosphere

0.1.16

1 of 2 See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

12,052

kubefedmesosphere

0.5.2

1 of 1 See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mesosphere/kubefed :proxyurl	4fd8889195fe	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

3,151

kube-oidc-proxymesosphere

0.3.4

1 of 1 See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/jetstack/kube-oidc-proxy :v0.3.0	e045b26eb6df	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0

Open the chart page →

3,151

kudomesosphere

0.1.4

1 of 1 See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kudobuilder/controller :v0.9.0	69072d979708	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.45.0

Open the chart page →

5,690

local-path-provisionermesosphere

0.0.22

1 of 1 See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.45.0

Open the chart page →

2,317

nfs-server-provisionermesosphere

0.6.1

1 of 1 See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0

Open the chart page →

2,806

prometheus-operatormesosphere

12.11.13

3 of 8 See more

prometheus-operator mesosphere 12.11.13

3 of the 8 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.45.0

Open the chart page →

11,704

traefik2mesosphere

9.18.0

1 of 1 See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/traefik :2.4.8	eda951fd29a8	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.45.0

Open the chart page →

3,349

azuredisk-csi-drivermesosphere-stable

0.8.1

4 of 6 See more

azuredisk-csi-driver mesosphere-stable 0.8.1

4 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.45.0
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620	0.45.0

Open the chart page →

14,107

cert-manager-setupmesosphere-stable

0.2.10

3 of 5 See more

cert-manager-setup mesosphere-stable 0.2.10

3 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	golang.org/x/crypto@v0.5.0	0.45.0
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	golang.org/x/crypto@v0.5.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	golang.org/x/crypto@v0.5.0	0.45.0

Open the chart page →

7,201

dexmesosphere-stable

2.14.1

2 of 5 See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0
mesosphere/dex-controller :v0.16.1	1b2dd9c0b0fc	golang.org/x/crypto@v0.23.0	0.45.0

Open the chart page →

19,270

gatekeepermesosphere-stable

0.6.11

1 of 2 See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

3,041

istio-helm-cnimesosphere-stable

1.23.6

1 of 1 See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
istio/install-cni :1.23.6	ab34c4740f44	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

3,335

istio-helm-istiodmesosphere-stable

1.23.6

1 of 2 See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
istio/pilot :1.23.6	9c3d6a218181	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

4,656

kafka-operatormesosphere-stable

0.25.1

1 of 2 See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	golang.org/x/crypto@v0.7.0	0.45.0

Open the chart page →

1,242

knativemesosphere-stable

1.10.8

1 of 7 See more

knative mesosphere-stable 1.10.8

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

7,528

kommandermesosphere-stable

0.39.2

17 of 29 See more

kommander mesosphere-stable 0.39.2

17 of the 29 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.45.0
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.45.0
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.45.0
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.45.0
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.45.0
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0

Open the chart page →

68,417

kube-prometheus-stackmesosphere-stable

75.9.1

3 of 7 See more

kube-prometheus-stack mesosphere-stable 75.9.1

3 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :12.0.2	b5b59bfc7561	golang.org/x/crypto@v0.38.0	0.45.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/crypto@v0.36.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

10,227

opsportalmesosphere-stable

0.9.5

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0

Open the chart page →

7,027

cortexmetakube

0.6.0

1 of 2 See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0

Open the chart page →

4,115

istio-operatormetakube

1.12.0

1 of 1 See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
istio/operator :1.12.0	6cfce8a071b9	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0

Open the chart page →

8,950

wg-access-servermglants

0.4.7

1 of 1 See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.45.0

Open the chart page →

2,752

gogsmhio

0.9.2

1 of 2 See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gogs/gogs :0.12.1	420d53bb7277	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0

Open the chart page →

3,230

kube-agent-chartmiddleware-labs

0.1.2

1 of 1 See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

1,805

middleware-odigosmiddleware-labs

0.2.41

3 of 6 See more

middleware-odigos middleware-labs 0.2.41

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0

Open the chart page →

8,378

middleware-visionmiddleware-labs

0.2.65

3 of 6 See more

middleware-vision middleware-labs 0.2.65

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0

Open the chart page →

8,370

mw-autoinstrumentationmiddleware-labs

1.2.6

2 of 6 See more

mw-autoinstrumentation middleware-labs 1.2.6

2 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.132.0	5e331c925091	golang.org/x/crypto@v0.39.0	0.45.0
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

3,728

mw-kube-agentmiddleware-labs

0.1.2

1 of 1 See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/crypto@v0.12.0	0.45.0

Open the chart page →

1,601

sshportalmidokura-community

0.1.4

1 of 2 See more

sshportal midokura-community 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
moul/sshportal :v1.19.3	332b603727c3	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.45.0

Open the chart page →

2,338

argocd-extra-app-info-exportermikejoh

0.1.12

1 of 1 See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mikejoh/argocd-extra-app-info-exporter :0.2.0	5c5a3b734271	golang.org/x/crypto@v0.28.0	0.45.0

Open the chart page →

1,341

local-path-provisionermikejoh

0.0.29

1 of 1 See more

local-path-provisioner mikejoh 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	golang.org/x/crypto@v0.25.0	0.45.0

Open the chart page →

1,300

miniomilvus-helm

8.0.20

1 of 1 See more

minio milvus-helm 8.0.20

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-05-28T17-19-04Z	391d1d45fdbe	golang.org/x/crypto@v0.23.0	0.45.0

Open the chart page →

1,544

pulsarv2milvus-helm

2.7.8

2 of 4 See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.45.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0

Open the chart page →

15,873

minio-operatorminio-operator

4.3.7

1 of 2 See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.45.0

Open the chart page →

6,085

aws-api-gateway-operatormintel

0.1.2

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/crypto@v0.2.0	0.45.0

Open the chart page →

10,683

standard-application-stackmintel

11.5.0

1 See more

standard-application-stack mintel 11.5.0

1 container image this version deploys carries CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/crypto@v0.2.0	0.45.0

Open the chart page →

—

jupyterhubmizzoukube

0.0.1-set.by.chartpress

1 of 7 See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/crypto@v0.16.0	0.45.0

Open the chart page →

1,890

cert-manager-webhook-duckdnsmmontes

1.2.3

1 of 1 See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

2,854

cockroachdb-operatormmontes

0.1.0

1 of 1 See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-operator :v2.1.0	983312754620	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

7,782

mongodbmmontes

0.5.0

1 of 1 See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/mongo :4.4.13	05678ae4e5e1	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0

Open the chart page →

7,151

corednsmoikot

1.13.3

1 of 1 See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
coredns/coredns :1.7.0	73ca82b4ce82	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.45.0

Open the chart page →

2,554

pritunl-vpnmoinologics

0.0.1

1 of 1 See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
goofball222/pritunl :1.32.3602.80	7bf26032dfce	golang.org/x/crypto@v0.6.0	0.45.0

Open the chart page →

2,470

backendmojaloop

0.1.0

2 of 6 See more

backend mojaloop 0.1.0

2 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0

Open the chart page →

16,299

reporting-nifi-processor-svcmojaloop

0.0.2

1 of 3 See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/mongo :6.0.2	71a63fc2438e	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.45.0

Open the chart page →

6,224

eks-pod-identity-webhookmondu-ai

0.3.1

1 of 1 See more

eks-pod-identity-webhook mondu-ai 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/mondu-ai/eks-pod-identity-webhook :latest	c2ac3bad857d	golang.org/x/crypto@v0.44.0	0.45.0

Open the chart page →

474

Container images carrying it

2,344 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	golang.org/x/crypto@v0.7.0	0.45.0	1
lishimeng/tabby :v1.0.4	8145c3dc83c8	golang.org/x/crypto@v0.7.0	0.45.0	1
lishimeng/tree :v0.2.8	9b2f8be6c7d3	golang.org/x/crypto@v0.7.0	0.45.0	1
lishimeng/zoo :v0.4.0	e0b8d2d8ca28	golang.org/x/crypto@v0.13.0	0.45.0	1
litestream/litestream :0.3	c5a1e1b01916	golang.org/x/crypto@v0.12.0	0.45.0	1
livekit/ingress :v1.2.2	1ab01641b366	golang.org/x/crypto@v0.17.0	0.45.0	1
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	golang.org/x/crypto@v0.0.0-20210314154223-e6e6c4f2bb5b	0.45.0	1
livekit/livekit-server :v1.9.0	3602a85840d5	golang.org/x/crypto@v0.38.0	0.45.0	1
livekit/livekit-server :v1.0.0	8391fd1b834f	golang.org/x/crypto@v0.0.0-20220516162934-403b01795ae8	0.45.0	1
loeken/home-assistant :2026.5.1	4ce6abc553b3	golang.org/x/crypto@v0.26.0	0.45.0	1
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0	1
loftsh/jspolicy :0.2.2	25deb9bd2683	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0	1
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
logiqai/flash :v3.10.2	65b996bc7bdc	golang.org/x/crypto@v0.18.0	0.45.0	1
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0	1
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0	1
longhornio/longhorn-manager :v1.10.0	5b0bc1b88f0c	golang.org/x/crypto@v0.42.0	0.45.0	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.45.0	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
louislam/uptime-kuma :2.2.1-slim	059b49d64739	golang.org/x/crypto@v0.38.0	0.45.0	1
louislam/uptime-kuma :1.22.1	0b55bcb83a1c	golang.org/x/crypto@v0.8.0	0.45.0	1
louislam/uptime-kuma :1	3d632903e6af	golang.org/x/crypto@v0.38.0	0.45.0	1
louislam/uptime-kuma :2.0.2	4c364ef96aad	golang.org/x/crypto@v0.38.0	0.45.0	1
louislam/uptime-kuma :1.23.13	96510915e6be	golang.org/x/crypto@v0.16.0	0.45.0	1
louislam/uptime-kuma :2.0.2-slim-rootless	9865163f92c1	golang.org/x/crypto@v0.38.0	0.45.0	1
louislam/uptime-kuma :1.17.1	a4eab252e5a2	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0	1
louislam/uptime-kuma :1.18.5	a84767d7934f	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0	1
louislam/uptime-kuma :1.23.12	bc6f244ecf27	golang.org/x/crypto@v0.16.0	0.45.0	1
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0	1
macropower/twitch_predictions_recorder :v0.2	1e9c4fb89787	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0	1
mantlenetworkio/l2geth :v0.4.3	6bf383d14291	golang.org/x/crypto@v0.9.0	0.45.0	1
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	golang.org/x/crypto@v0.4.0	0.45.0	1
masipcat/wireguard-go :latest	696206e5954d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
masipcat/wireguard-go :0.0.20230223	769f7bb64694	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
matrixdb/custom-external-provisioner :4622a07d7-20220424	7e9ffe249a51	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0	1
matrixdb/kubebuilder_kube-rbac-proxy :v0.12.0	ed3c7e6291e8	golang.org/x/crypto@v0.0.0-20211115234514-b4de73f9ece8	0.45.0	1
matrixdb/rawfile-csi :v0.2.1	95b2e38e913d	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0	1
mattermost/calls-offloader :v0.9.0	b440b282599e	golang.org/x/crypto@v0.16.0	0.45.0	1
mattermost/focalboard :0.9.0	31078df7a3c8	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.45.0	1
mattermost/focalboard :0.6.7	f2f987dada52	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.45.0	1
mattermost/mattermost-app-chaosengine :c153e43	6268954edd67	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.45.0	1
mattermost/mattermost-push-proxy :6.3.0	45c53061c74e	golang.org/x/crypto@v0.22.0	0.45.0	1
mavrick1/kubestellar-b :latest	45ca0429a1d4	golang.org/x/crypto@v0.5.0	0.45.0	1
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0	1
mesosphere/dex-controller :v0.16.1	1b2dd9c0b0fc	golang.org/x/crypto@v0.23.0	0.45.0	1
mesosphere/dex-k8s-authenticator :v1.4.1-d2iq	f3d9982cc2fd	golang.org/x/crypto@v0.11.0	0.45.0	1
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1