CVE-2025-58181

Medium

Advisory

Published 19 Nov 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,787 indexed, latest versions
Container images: 2,350; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

Carried by container images the latest versions of 2,054 of 17,787 indexed charts deploy, on 2,350 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+146 more	0.45.0	2,350

OSV records: GHSA-j5w8-q4qc-rx2x
Also known as: GO-2025-4134

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

cameramedia-streaming-mesh

0.2.5

1 of 3 See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.45.0

Open the chart page →

18,712

msmmedia-streaming-mesh

0.1.17

1 of 6 See more

msm media-streaming-mesh 0.1.17

1 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/crypto@v0.24.0	0.45.0

Open the chart page →

11,478

msm-rtspmedia-streaming-mesh

0.0.2

1 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.45.0

Open the chart page →

18,712

rtspmedia-streaming-mesh

0.0.14

1 of 2 See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.45.0

Open the chart page →

18,712

mediawiki-backupmediawiki-backup

0.2.1

1 of 1 See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0

Open the chart page →

1,919

memo-componentmemo-component

1.0.0

1 of 3 See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0

Open the chart page →

7,510

dex-k8s-authenticatormesosphere

1.4.3

1 of 1 See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mesosphere/dex-k8s-authenticator :v1.4.1-d2iq	f3d9982cc2fd	golang.org/x/crypto@v0.11.0	0.45.0

Open the chart page →

1,019

flaggermesosphere

0.21.0

1 of 2 See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
weaveworks/flagger :0.19.0	a9c2e9df4227	golang.org/x/crypto@v0.0.0-20181025213731-e84da0312774	0.45.0

Open the chart page →

6,048

gatekeepermesosphere

0.6.11

1 of 2 See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

3,034

kafka-operatormesosphere

0.20.2

1 of 2 See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0

Open the chart page →

1,884

kubeaddons-catalogmesosphere

0.1.16

1 of 2 See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

12,049

kubefedmesosphere

0.5.2

1 of 1 See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mesosphere/kubefed :proxyurl	4fd8889195fe	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

3,144

kube-oidc-proxymesosphere

0.3.4

1 of 1 See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/jetstack/kube-oidc-proxy :v0.3.0	e045b26eb6df	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0

Open the chart page →

3,144

kudomesosphere

0.1.4

1 of 1 See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kudobuilder/controller :v0.9.0	69072d979708	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.45.0

Open the chart page →

5,688

local-path-provisionermesosphere

0.0.22

1 of 1 See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.45.0

Open the chart page →

2,317

nfs-server-provisionermesosphere

0.6.1

1 of 1 See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0

Open the chart page →

2,806

prometheus-operatormesosphere

12.11.13

3 of 8 See more

prometheus-operator mesosphere 12.11.13

3 of the 8 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.45.0

Open the chart page →

11,690

traefik2mesosphere

9.18.0

1 of 1 See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/traefik :2.4.8	eda951fd29a8	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.45.0

Open the chart page →

3,341

azuredisk-csi-drivermesosphere-stable

0.8.1

4 of 6 See more

azuredisk-csi-driver mesosphere-stable 0.8.1

4 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.45.0
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620	0.45.0

Open the chart page →

14,067

cert-manager-setupmesosphere-stable

0.2.10

3 of 5 See more

cert-manager-setup mesosphere-stable 0.2.10

3 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	golang.org/x/crypto@v0.5.0	0.45.0
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	golang.org/x/crypto@v0.5.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	golang.org/x/crypto@v0.5.0	0.45.0

Open the chart page →

7,179

dexmesosphere-stable

2.14.1

2 of 5 See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0
mesosphere/dex-controller :v0.16.1	1b2dd9c0b0fc	golang.org/x/crypto@v0.23.0	0.45.0

Open the chart page →

18,583

gatekeepermesosphere-stable

0.6.11

1 of 2 See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

3,034

istio-helm-cnimesosphere-stable

1.23.6

1 of 1 See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
istio/install-cni :1.23.6	ab34c4740f44	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

3,322

istio-helm-istiodmesosphere-stable

1.23.6

1 of 2 See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
istio/pilot :1.23.6	9c3d6a218181	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

4,644

kafka-operatormesosphere-stable

0.25.1

1 of 2 See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	golang.org/x/crypto@v0.7.0	0.45.0

Open the chart page →

1,241

knativemesosphere-stable

1.10.8

1 of 7 See more

knative mesosphere-stable 1.10.8

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

7,479

kommandermesosphere-stable

0.39.2

17 of 29 See more

kommander mesosphere-stable 0.39.2

17 of the 29 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.45.0
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.45.0
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.45.0
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.45.0
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.45.0
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0

Open the chart page →

68,330

kube-prometheus-stackmesosphere-stable

75.9.1

3 of 7 See more

kube-prometheus-stack mesosphere-stable 75.9.1

3 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :12.0.2	b5b59bfc7561	golang.org/x/crypto@v0.38.0	0.45.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/crypto@v0.36.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

9,543

opsportalmesosphere-stable

0.9.5

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0

Open the chart page →

7,027

cortexmetakube

0.6.0

1 of 2 See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0

Open the chart page →

4,107

istio-operatormetakube

1.12.0

1 of 1 See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
istio/operator :1.12.0	6cfce8a071b9	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0

Open the chart page →

8,940

wg-access-servermglants

0.4.7

1 of 1 See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.45.0

Open the chart page →

2,745

gogsmhio

0.9.2

1 of 2 See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gogs/gogs :0.12.1	420d53bb7277	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0

Open the chart page →

3,230

kube-agent-chartmiddleware-labs

0.1.2

1 of 1 See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

1,799

middleware-odigosmiddleware-labs

0.2.41

3 of 6 See more

middleware-odigos middleware-labs 0.2.41

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0

Open the chart page →

8,370

middleware-visionmiddleware-labs

0.2.65

3 of 6 See more

middleware-vision middleware-labs 0.2.65

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0

Open the chart page →

8,361

mw-autoinstrumentationmiddleware-labs

1.2.6

2 of 6 See more

mw-autoinstrumentation middleware-labs 1.2.6

2 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.132.0	5e331c925091	golang.org/x/crypto@v0.39.0	0.45.0
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

3,714

mw-kube-agentmiddleware-labs

0.1.2

1 of 1 See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/crypto@v0.12.0	0.45.0

Open the chart page →

1,594

sshportalmidokura-community

0.1.4

1 of 2 See more

sshportal midokura-community 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
moul/sshportal :v1.19.3	332b603727c3	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.45.0

Open the chart page →

2,338

argocd-extra-app-info-exportermikejoh

0.1.12

1 of 1 See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mikejoh/argocd-extra-app-info-exporter :0.2.0	5c5a3b734271	golang.org/x/crypto@v0.28.0	0.45.0

Open the chart page →

1,334

local-path-provisionermikejoh

0.0.29

1 of 1 See more

local-path-provisioner mikejoh 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	golang.org/x/crypto@v0.25.0	0.45.0

Open the chart page →

1,300

miniomilvus-helm

8.0.20

1 of 1 See more

minio milvus-helm 8.0.20

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-05-28T17-19-04Z	391d1d45fdbe	golang.org/x/crypto@v0.23.0	0.45.0

Open the chart page →

1,537

pulsarv2milvus-helm

2.7.8

2 of 4 See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.45.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0

Open the chart page →

15,855

minio-operatorminio-operator

4.3.7

1 of 2 See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.45.0

Open the chart page →

6,085

aws-api-gateway-operatormintel

0.1.2

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/crypto@v0.2.0	0.45.0

Open the chart page →

10,639

standard-application-stackmintel

11.4.1

1 of 12 See more

standard-application-stack mintel 11.4.1

1 of the 12 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/crypto@v0.2.0	0.45.0

Open the chart page →

10,515

jupyterhubmizzoukube

0.0.1-set.by.chartpress

1 of 7 See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/crypto@v0.16.0	0.45.0

Open the chart page →

1,883

cert-manager-webhook-duckdnsmmontes

1.2.3

1 of 1 See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

2,847

cockroachdb-operatormmontes

0.1.0

1 of 1 See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-operator :v2.1.0	983312754620	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

7,775

mongodbmmontes

0.5.0

1 of 1 See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/mongo :4.4.13	05678ae4e5e1	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0

Open the chart page →

7,148

Container images carrying it

2,350 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0	3
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.45.0	3
quay.io/devtron/cost-sync :172ef62b-1159-39429	edf210d763ca	golang.org/x/crypto@v0.38.0	0.45.0	3
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.45.0	3
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.45.0	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.45.0	3
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.45.0	3
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.45.0	3
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.45.0	3
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0	3
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.45.0	3
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0	3
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0	0.45.0	3
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/crypto@v0.8.0	0.45.0	3
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0	3
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/crypto@v0.8.0	0.45.0	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0	3
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/crypto@v0.23.0	0.45.0	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/crypto@v0.1.0	0.45.0	3
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/crypto@v0.26.0	0.45.0	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.45.0	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/crypto@v0.7.0	0.45.0	3
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/crypto@v0.26.0	0.45.0	3
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/crypto@v0.21.0	0.45.0	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0	3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/crypto@v0.40.0	0.45.0	3
registry.k8s.io/sig-storage/csi-snapshotter :v8.4.0	c7e0a3718832	golang.org/x/crypto@v0.37.0	0.45.0	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.45.0	3
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.45.0	2
alpine/git :2.47.2	062a01ad7a0e	golang.org/x/crypto@v0.38.0	0.45.0	2
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/crypto@v0.44.0	0.45.0	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/crypto@v0.9.0	0.45.0	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/crypto@v0.17.0	0.45.0	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.45.0	2
bitnamilegacy/etcd :latest	99b408c15272	golang.org/x/crypto@v0.36.0	0.45.0	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.45.0	2
bitnamisecure/git	72ae5bd9715f	golang.org/x/crypto@v0.36.0	0.45.0	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.45.0	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	golang.org/x/crypto@v0.19.0	0.45.0	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0	2
coredns/coredns :1.13.1	9b9128672209	golang.org/x/crypto@v0.42.0	0.45.0	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.45.0	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/crypto@v0.5.0	0.45.0	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.45.0	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/crypto@v0.32.0	0.45.0	2