CVE-2025-58181

Medium

Advisory

Published 19 Nov 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,787 indexed, latest versions
Container images: 2,350; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

Carried by container images the latest versions of 2,054 of 17,787 indexed charts deploy, on 2,350 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+146 more	0.45.0	2,350

OSV records: GHSA-j5w8-q4qc-rx2x
Also known as: GO-2025-4134

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

kraken-cikraken-ci

1.7.36

1 of 10 See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

7,285

kubebadgeskubebadges

0.1.3

1 of 2 See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
neosu/kubebadges :v0.0.5	256530d8e5c6	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

1,799

pyroscopekubeblocks

0.2.92

1 of 1 See more

pyroscope kubeblocks 0.2.92

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
apecloud/pyroscope :0.37.2	dbca95a15bc1	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

1,620

skywalkingkubesphere-test

3.1.0

2 of 4 See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.45.0
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.45.0

Open the chart page →

18,044

kubeviouskubevious

1.2.2

1 of 7 See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubevious/ui :1.2.1	6233e84bdd59	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0

Open the chart page →

14,204

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

3 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/crypto@v0.13.0	0.45.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/crypto@v0.13.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/crypto@v0.13.0	0.45.0

Open the chart page →

11,630

prometheus-pingmesh-exporterkubservice-charts

1.1.1

1 of 1 See more

prometheus-pingmesh-exporter kubservice-charts 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/crypto@v0.28.0	0.45.0

Open the chart page →

848

karporkusionstack

0.7.6

2 of 3 See more

karpor kusionstack 0.7.6

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kusionstack/karpor :v0.6.4	b707d3bf0abd	golang.org/x/crypto@v0.16.0	0.45.0
quay.io/coreos/etcd :v3.5.11	842975891182	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

3,297

loftloft

0.0.0-ci.14

1 of 1 See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	golang.org/x/crypto@v0.12.0	0.45.0

Open the chart page →

3,677

vcluster-k8sloft

0.0.0-ci.3

3 of 4 See more

vcluster-k8s loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/crypto@v0.1.0	0.45.0
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

5,574

kubecostmesosphere-stable

0.37.5

6 of 9 See more

kubecost mesosphere-stable 0.37.5

6 of the 9 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.7	1a359d92f40e	golang.org/x/crypto@v0.4.0	0.45.0
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	golang.org/x/crypto@v0.15.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	golang.org/x/crypto@v0.14.0	0.45.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.45.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/crypto@v0.26.0	0.45.0
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/crypto@v0.24.0	0.45.0

Open the chart page →

17,755

rclonemglants

2.3.4

1 of 1 See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0

Open the chart page →

2,743

helm-ai-kernelmindburn-labs

0.8.5

1 of 2 See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
alpine/helmdigest-pinned	105741fa6621	golang.org/x/crypto@v0.25.0	0.45.0

Open the chart page →

2,160

move2kubemove2kube

0.3.15

1 of 1 See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.45.0

Open the chart page →

3,794

nebraskanebraska

3.0.0

1 of 2 See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/nebraska :4.0.0	5c9e99ff7167	golang.org/x/crypto@v0.42.0	0.45.0

Open the chart page →

4,066

keycloak-operatornewsaktuell

0.1.7

1 of 1 See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0

Open the chart page →

5,066

openclaw-with-brainopenclaw-with-brain

0.1.67

1 of 3 See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
alpine/git :2.47.2	062a01ad7a0e	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

5,224

oesopsmx

4.0.32

5 of 25 See more

oes opsmx 4.0.32

5 of the 25 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.45.0
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.45.0
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.45.0
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0

Open the chart page →

107,899

ipfs-clusterparadeum-team

0.0.19

2 of 2 See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.45.0
ipfs/ipfs-cluster :1.0.2	1511f6d57994	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0

Open the chart page →

3,757

permifypermify

0.5.0

1 of 1 See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	golang.org/x/crypto@v0.24.0	0.45.0

Open the chart page →

997

platzioplatz-io

0.6.5

1 of 2 See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
platzio/backend :v0.6.5	d5e5972f344b	golang.org/x/crypto@v0.39.0	0.45.0

Open the chart page →

2,867

plecopleco

0.24.0

1 of 1 See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

1,346

pomeriumpomerium

34.0.1

1 of 1 See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
pomerium/pomerium :v0.22.1	9c69b10a2126	golang.org/x/crypto@v0.8.0	0.45.0

Open the chart page →

1,942

prometheus-systemd-exporterprometheus-community

0.5.2

1 of 1 See more

prometheus-systemd-exporter prometheus-community 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/systemd-exporter :v0.7.0	78c03f875dfb	golang.org/x/crypto@v0.31.0	0.45.0

Open the chart page →

725

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.45.0
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.45.0

Open the chart page →

12,125

qgis-serverqgis-server

0.1.10

1 of 3 See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/crypto@v0.35.0	0.45.0

Open the chart page →

5,079

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0

Open the chart page →

2,730

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-07-23T15-54-02Z	d249d1fb6966	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

13,615

rqliterqlite

2.0.0

1 of 1 See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rqlite/rqlite :9.1.3	7b992a526eee	golang.org/x/crypto@v0.43.0	0.45.0

Open the chart page →

1,311

qbittorrent-vpnrtomik-helm-charts

0.0.2

1 of 2 See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
qmcgaw/gluetun :v3.40.0	2b42bfa04675	golang.org/x/crypto@v0.29.0	0.45.0

Open the chart page →

1,218

bentoself-hosters-by-night

0.9.1

1 of 1 See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/warpstreamlabs/bento :1.8.1	21715979aefa	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

1,046

corednssoftizy

0.2.0

1 of 1 See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
coredns/coredns :1.10.1	a0ead06651cf	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.45.0

Open the chart page →

1,663

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0

Open the chart page →

12,502

miniosolidcharts

0.5.0

1 of 1 See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/coollabsio/minio :RELEASE.2025-10-15T17-29-55Z	69b55a1c1c5d	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

1,055

sn-platformstreamnative

1.11.44

5 of 9 See more

sn-platform streamnative 1.11.44

5 of the 9 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	golang.org/x/crypto@v0.4.0	0.45.0
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.45.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.45.0
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.45.0
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/crypto@v0.7.0	0.45.0

Open the chart page →

15,525

pocketbasetechwolf12

0.29.3

1 of 1 See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/techwolf12/pocketbase :0.29.3	106099641679	golang.org/x/crypto@v0.41.0	0.45.0

Open the chart page →

1,447

feedbacksystemthm-mni-ii

0.47.1

4 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

4 of the 10 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	golang.org/x/crypto@v0.17.0	0.45.0
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.45.0
library/docker :20.10.21-dind	3153fa63f546	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

28,579

topaztopaz

0.2.5

1 of 1 See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/aserto-dev/topaz :0.32.59	4c708ecf7dc4	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

1,494

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	golang.org/x/crypto@v0.0.0-20200317142112-1b76d66859c6	0.45.0

Open the chart page →

4,136

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.45.0
library/traefik :v2.5	7d5a6ae66572	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0

Open the chart page →

9,257

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

10,355

uptraceuptrace

2.0.2

1 of 2 See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
uptrace/uptrace :2.0.2	34a02c3b2d12	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

1,620

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/crypto@v0.11.0	0.45.0

Open the chart page →

1,344

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0

Open the chart page →

2,245

wasmcloud-chartwasmcloud-chart

0.7.2

1 of 2 See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	golang.org/x/crypto@v0.16.0	0.45.0

Open the chart page →

3,178

argo-cdwenerme

10.9.1

1 of 3 See more

argo-cd wenerme 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

2,989

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.45.0

Open the chart page →

6,085

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0

Open the chart page →

10,033

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0

Open the chart page →

4,713

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/crypto@v0.0.0-20220507011949-2cf3adece122	0.45.0

Open the chart page →

4,041

Container images carrying it

2,350 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
temporalio/server :1.26.2	1e2626efcbc1	golang.org/x/crypto@v0.14.0	0.45.0	1
temporalio/server :1.25.0	8a5798191dea	golang.org/x/crypto@v0.25.0	0.45.0	1
temporalio/server :1.29.1	c1e3326b2ce1	golang.org/x/crypto@v0.38.0	0.45.0	1
temporalio/server :1.22.0	ddeebf8bad8f	golang.org/x/crypto@v0.12.0	0.45.0	1
temporalio/server :1.15.1	e26758f5a1bf	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0	1
temporalio/ui :2.44.0	0b36e00aad30	golang.org/x/crypto@v0.38.0	0.45.0	1
temporalio/ui :2.30.2	5c2a3645d09c	golang.org/x/crypto@v0.14.0	0.45.0	1
temporalio/ui :2.33.0	5c586a3c8ec5	golang.org/x/crypto@v0.31.0	0.45.0	1
temporalio/ui :2.39.0	b768f87f18b5	golang.org/x/crypto@v0.32.0	0.45.0	1
testinprod/op-erigon :latest	0a125bd77a2d	golang.org/x/crypto@v0.31.0	0.45.0	1
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0	1
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.45.0	1
thecampagnards/trafficlight-api :main	7dca9d973837	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.45.0	1
thelande/openmeteo_exporter :v1.0.7	7e9072ace15f	golang.org/x/crypto@v0.39.0	0.45.0	1
thesisrobot/lnd :v0.16.4-beta-c	287129953689	golang.org/x/crypto@v0.7.0	0.45.0	1
thesisrobot/lnd :v0.14.1-beta	d94c8dbf6dac	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0	1
thetorproject/snowflake-proxy :v2.11.0	1ddc5069d354	golang.org/x/crypto@v0.33.0	0.45.0	1
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/crypto@v0.1.0	0.45.0	1
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0	1
thomseddon/traefik-forward-auth :latest	b364aa6a4117	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0	1
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0	1
tile38/tile38 :1.33.4	afb7e82f9485	golang.org/x/crypto@v0.21.0	0.45.0	1
timescale/timescaledb :latest-pg16	289d55704b1b	golang.org/x/crypto@v0.32.0	0.45.0	1
timescale/timescaledb :2.30.0-pg17	3113d12b7839	golang.org/x/crypto@v0.32.0	0.45.0	1
timescale/timescaledb :latest-pg12	645fd9e92d76	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.45.0	1
timescale/timescaledb :latest-pg17	bc8527e62f70	golang.org/x/crypto@v0.32.0	0.45.0	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.45.0	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.45.0	1
timescale/timescaledb-ha :pg16	d7db8f1085a3	golang.org/x/crypto@v0.22.0	0.45.0	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	golang.org/x/crypto@v0.24.0	0.45.0	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7	0.45.0	1
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7	0.45.0	1
timonwong/prometheus-webhook-dingtalk :v1.4.0	a0fcc028bd8d	golang.org/x/crypto@v0.0.0-20191205180655-e7c4368fe9dd	0.45.0	1
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/crypto@v0.0.0-20200109152110-61a87790db17	0.45.0	1
tobiasehlert/teslamateapi :1.20.2	cf09259ad0ea	golang.org/x/crypto@v0.36.0	0.45.0	1
tobirachel/node-project3 :v1	7d9f37154994	golang.org/x/crypto@v0.0.0-20211108221036-ceb1ce70b4fa	0.45.0	1
toucansoftware/spa-reloader :latest	c187b1fba501	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0	1
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0	1
traggo/server :0.2.3	f1ced637510e	golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f	0.45.0	1
treeverse/lakefs :0.69.0	478f37a6cffc	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0	1
tundeficky/nodejs-app :v1.0.0	3cf9a9ce54e8	golang.org/x/crypto@v0.0.0-20211108221036-ceb1ce70b4fa	0.45.0	1
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0	1
tusproject/tusd :v1.13.0	f8088058b80f	golang.org/x/crypto@v0.12.0	0.45.0	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.45.0	1
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
ubercadence/server :0.23.2	2ac5491d13bb	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
udhos/forward :1.1.3	12e120d39fdb	golang.org/x/crypto@v0.9.0	0.45.0	1
udhos/gateboard :1.12.5	3acc0e7599bf	golang.org/x/crypto@v0.43.0	0.45.0	1
udhos/lambdaping :1.0.4	6bd2cf2ac732	golang.org/x/crypto@v0.31.0	0.45.0	1
udhos/mongoping :1.3.1	03b08b63f524	golang.org/x/crypto@v0.38.0	0.45.0	1