CVE-2025-58181

Medium

Advisory

Published 19 Nov 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,790 indexed, latest versions
Container images: 2,352; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

Carried by container images the latest versions of 2,054 of 17,790 indexed charts deploy, on 2,352 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+146 more	0.45.0	2,352

OSV records: GHSA-j5w8-q4qc-rx2x
Also known as: GO-2025-4134

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

cassandra-webcassandra-web

0.1.0

1 of 1 See more

cassandra-web cassandra-web 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ipushc/cassandra-web :latest	fa3e0c66c289	golang.org/x/crypto@v0.7.0	0.45.0

Open the chart page →

1,301

castai-tetragoncastai

0.6.1

1 of 4 See more

castai-tetragon castai 0.6.1

1 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.45.0

Open the chart page →

4,143

castware-componentscastai

0.4.0

1 of 1 See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0

Open the chart page →

3,451

temporalcastai

0.54.2

10 of 14 See more

temporal castai 0.54.2

10 of the 14 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/crypto@v0.21.0	0.45.0
temporalio/admin-tools :1.26.2	37e2e33dbd7b	golang.org/x/crypto@v0.29.0	0.45.0
temporalio/server :1.26.2	1e2626efcbc1	golang.org/x/crypto@v0.14.0	0.45.0
temporalio/ui :2.33.0	5c586a3c8ec5	golang.org/x/crypto@v0.31.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/crypto@v0.23.0	0.45.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.45.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.45.0
quay.io/prometheus/prometheus :v2.53.0	075b1ba2c4eb	golang.org/x/crypto@v0.24.0	0.45.0
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/crypto@v0.21.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.45.0

Open the chart page →

16,232

catalyst-agentscatalyst-agents

0.1.31

6 of 18 See more

catalyst-agents catalyst-agents 0.1.31

6 of the 18 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	golang.org/x/crypto@v0.32.0	0.45.0
grafana/loki :3.0.0	757b5fadf816	golang.org/x/crypto@v0.21.0	0.45.0
grafana/loki-canary :3.0.0	28d7c00588aa	golang.org/x/crypto@v0.21.0	0.45.0
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/crypto@v0.22.0	0.45.0
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.45.0
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0

Open the chart page →

17,099

mongodb-operatorccowley

0.1.1

1 of 1 See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.3.0	107a7c73af59	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0

Open the chart page →

6,389

openldapccowley

2.0.4

1 of 3 See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0

Open the chart page →

6,219

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	golang.org/x/crypto@v0.24.0	0.45.0

Open the chart page →

1,271

cert-manager-webhook-abioncert-manager-webhook-abion

1.3.2

1 of 1 See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	golang.org/x/crypto@v0.42.0	0.45.0

Open the chart page →

1,094

cert-manager-webhook-bunnycert-manager-webhook-bunny

1.0.2

1 of 1 See more

cert-manager-webhook-bunny cert-manager-webhook-bunny 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	golang.org/x/crypto@v0.32.0	0.45.0

Open the chart page →

839

cert-manager-webhook-civocert-manager-webhook-civo

0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of 1 See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
okteto/civo-webhook :0.5.3	57cd51176538	golang.org/x/crypto@v0.13.0	0.45.0

Open the chart page →

1,278

cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapi

1.5.2

1 of 1 See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.45.0

Open the chart page →

2,352

cert-manager-webhook-namecheapcert-manager-webhook-namecheap

0.1.2

1 of 1 See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	golang.org/x/crypto@v0.6.0	0.45.0

Open the chart page →

1,759

cert-manager-webhook-regerycert-manager-webhook-regery

1.0.0

1 of 1 See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
darioackermann/cert-manager-webhook-regery :latest	0d450bc4acc4	golang.org/x/crypto@v0.24.0	0.45.0

Open the chart page →

889

cert-utils-operatorcert-utils-operator

1.3.12

2 of 2 See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

7,783

opencvecfi2017

0.1.2

1 of 7 See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/crypto@v0.27.0	0.45.0

Open the chart page →

15,490

clechaosnative

0.2.7

3 of 6 See more

cle chaosnative 0.2.7

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
chaosnative/cle-auth-server :2.7.0	72ee352bc333	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.45.0
chaosnative/cle-license-module :2.7.0	62cf6adc355e	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
chaosnative/cle-server :2.7.0	e7bcff4a20c0	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0

Open the chart page →

16,412

dv-podcharon

0.19.1

1 of 5 See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
obolnetwork/charon-dkg-sidecar :main	e263be0a7440	golang.org/x/crypto@v0.42.0	0.45.0

Open the chart page →

7,501

home-assistant-otbrcharts-derwitt-dev

2.1.3

1 of 1 See more

home-assistant-otbr charts-derwitt-dev 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/wittdennis/homeassistant-otbr :4.2.3	1b53b0b3488e	golang.org/x/crypto@v0.31.0	0.45.0

Open the chart page →

2,379

checkin-componentcheckin-component

0.1.0

1 of 4 See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
conduction/checkin-component-php :dev	3423845692c1	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0

Open the chart page →

8,417

pathling-serverchgl

0.10.11

1 of 3 See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	golang.org/x/crypto@v0.43.0	0.45.0

Open the chart page →

968

lokichoerodon

0.29.0

1 of 1 See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/loki :1.5.0	922b3f412fdd	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.45.0

Open the chart page →

2,876

promtailchoerodon

0.23.0

1 of 1 See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/promtail :1.5.0	46e88d390cd6	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.45.0

Open the chart page →

2,828

supersetchoerodon

1.0.0

1 of 3 See more

superset choerodon 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
apache/superset :dockerize	afe59523a6c8	golang.org/x/crypto@v0.9.0	0.45.0

Open the chart page →

1,439

argocd-metrics-serverchristianhuth

1.1.1

1 of 1 See more

argocd-metrics-server christianhuth 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-extension-metrics :v1.0.3	0d614816c4b7	golang.org/x/crypto@v0.9.0	0.45.0

Open the chart page →

1,031

cluster-api-visualizerchristianhuth

0.6.0

1 of 1 See more

cluster-api-visualizer christianhuth 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/jont828/cluster-api-visualizer :v1.5.0	678ba6833297	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

558

sloopchristianhuth

0.4.0

1 of 1 See more

sloop christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/salesforce/sloop :sha-2ce8bbe	119e24f24b1d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

2,290

arbitrumchronicle

0.3.4

1 of 1 See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.7.6-c0fe95e	9f779fa84b7b	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

7,034

basechronicle

0.0.8

1 of 1 See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	golang.org/x/crypto@v0.28.0	0.45.0

Open the chart page →

4,865

ethereumchronicle

0.3.1

1 of 1 See more

ethereum chronicle 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.16.5	32b878e4144a	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

1,351

ethereum-metrics-exporterchronicle

0.1.4

1 of 1 See more

ethereum-metrics-exporter chronicle 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
samcm/ethereum-metrics-exporter :0.29.2	91a2d9a015c1	golang.org/x/crypto@v0.41.0	0.45.0

Open the chart page →

684

goferchronicle

0.4.4

1 of 1 See more

gofer chronicle 0.4.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/chronicleprotocol/gofer :0.61	3915d2e41e04	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

721

mantlechronicle

0.1.3

1 of 1 See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mantlenetworkio/l2geth :v0.4.3	6bf383d14291	golang.org/x/crypto@v0.9.0	0.45.0

Open the chart page →

1,941

chubaofschubaofs

1.5.1

1 of 6 See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0

Open the chart page →

3,602

calico-cniclastix

3.28.1

3 of 3 See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.1	e486870cfde8	golang.org/x/crypto@v0.22.0	0.45.0
calico/kube-controllers :v3.28.1	eadb3a25109a	golang.org/x/crypto@v0.22.0	0.45.0
calico/node :v3.28.1	d8c644a8a3ee	golang.org/x/crypto@v0.22.0	0.45.0

Open the chart page →

3,071

capi-kamaji-vsphere-fullclastix

1.0.1

2 of 9 See more

capi-kamaji-vsphere-full clastix 1.0.1

2 of the 9 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	golang.org/x/crypto@v0.36.0	0.45.0
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	golang.org/x/crypto@v0.30.0	0.45.0

Open the chart page →

5,991

capsule-rancher-addonclastix

0.1.1

3 of 5 See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	golang.org/x/crypto@v0.5.0	0.45.0
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	golang.org/x/crypto@v0.5.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	golang.org/x/crypto@v0.5.0	0.45.0

Open the chart page →

7,126

kamajiclastix

0.0.0+latest

1 of 4 See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0

Open the chart page →

4,652

kamaji-etcdclastix

0.17.0

2 of 4 See more

kamaji-etcd clastix 0.17.0

2 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
cfssl/cfssl :latest	c9018c2ddf0b	golang.org/x/crypto@v0.19.0	0.45.0
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0

Open the chart page →

12,082

local-path-provisionerclastix

0.0.30

1 of 1 See more

local-path-provisioner clastix 0.0.30

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.30	9b9148811700	golang.org/x/crypto@v0.25.0	0.45.0

Open the chart page →

1,209

vcloud-csiclastix

1.6.0

1 of 5 See more

vcloud-csi clastix 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0

Open the chart page →

7,413

cloudflared-tunnelclouddrove

0.1.4

1 of 1 See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2025.8.0	eb5c9324efe3	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

1,768

kube-acp-stackcloudentity

2.28.0

2 of 7 See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	golang.org/x/crypto@v0.24.0	0.45.0
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

21,034

openbankingcloudentity

0.1.9

6 of 6 See more

openbanking cloudentity 0.1.9

6 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
cloudentity/openbanking-quickstart-bank :1.11.1	9402ec4b5016	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
cloudentity/openbanking-quickstart-configuration :1.11.1	8a1890eb8265	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
cloudentity/openbanking-quickstart-consent-admin-portal :1.11.1	ee83cdd45b7b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
cloudentity/openbanking-quickstart-consent-page :1.11.1	5728654cecb7	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
cloudentity/openbanking-quickstart-consent-self-service-portal :1.11.1	8ca94ae6acf4	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
cloudentity/openbanking-quickstart-financroo-tpp :1.11.1	c04eb10c77b7	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

18,040

cloudflare-ddns-updatecloudflare-ddns-update

0.1.2

1 of 1 See more

cloudflare-ddns-update cloudflare-ddns-update 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/dploeger/cloudflare-ddns-update :v0.1.0	ec06685b9ff4	golang.org/x/crypto@v0.23.0	0.45.0

Open the chart page →

1,338

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	golang.org/x/crypto@v0.11.0	0.45.0

Open the chart page →

25,513

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/crypto@v0.0.0-20220321153916-2c7772ba3064	0.45.0

Open the chart page →

6,704

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0

Open the chart page →

6,930

robot-shopcloud-native-toolkit

1.1.1

1 of 12 See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
robotshop/rs-mongodb :latest	119b545823cd	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0

Open the chart page →

29,602

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.45.0
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

18,374

Container images carrying it

2,352 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/botify-labs/airbyte_exporter :2.3.0	2105b1f33013	golang.org/x/crypto@v0.18.0	0.45.0	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	golang.org/x/crypto@v0.3.0	0.45.0	1
ghcr.io/browsersec/kubebrowse :sha-09dfa1f	b853e9e6372a	golang.org/x/crypto@v0.38.0	0.45.0	1
ghcr.io/browsersec/kubebrowse-frontend :chore-improve-back	bd6bea5e487c	golang.org/x/crypto@v0.40.0	0.45.0	1
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	golang.org/x/crypto@v0.35.0	0.45.0	1
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	golang.org/x/crypto@v0.37.0	0.45.0	1
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	golang.org/x/crypto@v0.0.0-20211215165025-cf75a172585e	0.45.0	1
ghcr.io/cableship/argocd-source-tracker :0.0.6	ff7dd45aa774	golang.org/x/crypto@v0.37.0	0.45.0	1
ghcr.io/cableship/chart-sentinel :0.1.0	a037f1042b28	golang.org/x/crypto@v0.37.0	0.45.0	1
ghcr.io/camptocamp/terraboard :v2.3.0	df53e2c8998c	golang.org/x/crypto@v0.14.0	0.45.0	1
ghcr.io/caninehq/canine :latest	a058034ca006	golang.org/x/crypto@v0.31.0	0.45.0	1
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	golang.org/x/crypto@v0.35.0	0.45.0	1
ghcr.io/celestiaorg/celestia-app :v6.1.0-rc0	a604aefa3fae	golang.org/x/crypto@v0.42.0	0.45.0	1
ghcr.io/celestiaorg/celestia-node :v0.16.0	41177982c584	golang.org/x/crypto@v0.25.0	0.45.0	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	golang.org/x/crypto@v0.17.0	0.45.0	1
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.0	fb609bc264d9	golang.org/x/crypto@v0.42.0	0.45.0	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	golang.org/x/crypto@v0.17.0	0.45.0	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.0	e7f9e8f1d565	golang.org/x/crypto@v0.42.0	0.45.0	1
ghcr.io/chaos-mesh/chaos-mesh :v2.8.0	091b906a0b13	golang.org/x/crypto@v0.42.0	0.45.0	1
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0	1
ghcr.io/chaos-mesh/chaos-mesh :v2.7.2	8bc853c7414c	golang.org/x/crypto@v0.17.0	0.45.0	1
ghcr.io/chronicleprotocol/challenger-go :0.1.2	c8d5a3c0e966	golang.org/x/crypto@v0.31.0	0.45.0	1
ghcr.io/chronicleprotocol/gofer :0.61	3915d2e41e04	golang.org/x/crypto@v0.38.0	0.45.0	1
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0	1
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
ghcr.io/cloudnative-pg/cloudnative-pg :1.17.1	4dd365800b62	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0	1
ghcr.io/cloudnative-pg/cloudnative-pg :1.21.1	9f707d91de1c	golang.org/x/crypto@v0.14.0	0.45.0	1
ghcr.io/cloudscript-technology/k8s-monitoring-app :v0.0.25	cab66a6b3574	golang.org/x/crypto@v0.36.0	0.45.0	1
ghcr.io/cloudtty/cloudshell :v0.8.9	00984ba0f0eb	golang.org/x/crypto@v0.43.0	0.45.0	1
ghcr.io/cloudtty/cloudshell-operator :v0.8.9	e43ad91f0684	golang.org/x/crypto@v0.31.0	0.45.0	1
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	golang.org/x/crypto@v0.40.0	0.45.0	1
ghcr.io/clusternet/clusternet-hub :v1.0.0	59f75504c5d4	golang.org/x/crypto@v0.40.0	0.45.0	1
ghcr.io/clusternet/clusternet-scheduler :v1.0.0	a6ae5aff81ce	golang.org/x/crypto@v0.40.0	0.45.0	1
ghcr.io/cmacrae/kove :v0.2.0	185bfaae750c	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
ghcr.io/cmacrae/kove :v0.1.0	db1244edefc8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0	1
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0	1
ghcr.io/conductionnl/adresservice-php :latest	c5075f0320cd	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0	1
ghcr.io/conductionnl/authorization-component-php :latest	94a749392fcf	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0	1
ghcr.io/conductionnl/berichtservice-php :latest	ee6a21e66ff0	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0	1
ghcr.io/conductionnl/brpservice-php :latest	c17f1ba17d36	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0	1
ghcr.io/conductionnl/contactcatalogus-php :latest	eeb625bd660c	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0	1
ghcr.io/conductionnl/digispoof-interface-php :latest	03aba499950f	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0	1
ghcr.io/conductionnl/eav-component-php :latest	24bbca4a52a8	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0	1