CVE-2025-58181

Medium

Advisory

Published 19 Nov 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,051; of 17,792 indexed, latest versions
Container images: 2,349; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

Carried by container images the latest versions of 2,051 of 17,792 indexed charts deploy, on 2,349 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+146 more	0.45.0	2,349

OSV records: GHSA-j5w8-q4qc-rx2x
Also known as: GO-2025-4134

Charts affected

2,051 by stars

Chart

Latest

Affected images

Radar Score

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0

Open the chart page →

8,582

cranekubesphere-stable

0.5.2

2 of 3 See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
gocrane/craned :v0.5.1	a1400909118c	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.45.0

Open the chart page →

8,903

csi-qingcloudkubesphere-stable

1.4.0

3 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.45.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0

Open the chart page →

12,446

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/crypto@v0.1.0	0.45.0
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/crypto@v0.4.0	0.45.0

Open the chart page →

18,435

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/crypto@v0.7.0	0.45.0
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0

Open the chart page →

4,108

fpga-operatorkubesphere-stable

2.7.4

2 of 7 See more

fpga-operator kubesphere-stable 2.7.4

2 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/crypto@v0.16.0	0.45.0
inaccel/reef :latest	c967218739f3	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

5,771

iomeshkubesphere-stable

1.1.0

11 of 25 See more

iomesh kubesphere-stable 1.1.0

11 of the 25 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/crypto@v0.16.0	0.45.0
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/crypto@v0.16.0	0.45.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/crypto@v0.14.0	0.45.0
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

49,004

IOMeshkubesphere-stable

1.2.0

11 of 25 See more

IOMesh kubesphere-stable 1.2.0

11 of the 25 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/crypto@v0.16.0	0.45.0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/crypto@v0.16.0	0.45.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/crypto@v0.14.0	0.45.0
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

46,692

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.45.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0

Open the chart page →

14,457

csi-neonsankubesphere-test

1.3.0

3 of 6 See more

csi-neonsan kubesphere-test 1.3.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0

Open the chart page →

18,537

csi-qingcloudkubesphere-test

1.4.0

3 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.45.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0

Open the chart page →

12,446

minio-gatewaykubesphere-test

0.1.0

1 of 1 See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

1,084

openelbkubesphere-test

0.2.4

1 of 2 See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0

Open the chart page →

4,336

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0

Open the chart page →

2,791

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0

Open the chart page →

2,220

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

4,458

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mavrick1/kubestellar-b :latest	45ca0429a1d4	golang.org/x/crypto@v0.5.0	0.45.0

Open the chart page →

4,778

kubiya-runnerkubiya-helm-charts

0.9.4

6 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

6 of the 9 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	golang.org/x/crypto@v0.29.0	0.45.0
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	golang.org/x/crypto@v0.31.0	0.45.0
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/crypto@v0.26.0	0.45.0
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	golang.org/x/crypto@v0.40.0	0.45.0
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	golang.org/x/crypto@v0.37.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.45.0

Open the chart page →

20,435

lethe-stackkuoss

0.2.3

2 of 3 See more

lethe-stack kuoss 0.2.3

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/eventrouter :v0.4.13	00b48beff3ae	golang.org/x/crypto@v0.36.0	0.45.0
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	golang.org/x/crypto@v0.39.0	0.45.0

Open the chart page →

1,762

kusionkusionstack

0.14.1

1 of 3 See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	golang.org/x/crypto@v0.29.0	0.45.0

Open the chart page →

6,969

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

1,881

krakendkvalitetsit

0.0.3

1 of 1 See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/crypto@v0.35.0	0.45.0

Open the chart page →

1,249

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

16,561

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0

Open the chart page →

8,544

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0

Open the chart page →

26,400

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

2,125

lambdapinglambdaping

1.0.4

1 of 1 See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
udhos/lambdaping :1.0.4	6bd2cf2ac732	golang.org/x/crypto@v0.31.0	0.45.0

Open the chart page →

1,337

cachelava

1.1.1

1 of 1 See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/crypto@v0.21.0	0.45.0

Open the chart page →

1,385

kubernetes-dashboardlbenicio-community

7.14.9

3 of 5 See more

kubernetes-dashboard lbenicio-community 7.14.9

3 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
lbenicio/kubernetes-dashboard-api :1.14.9	51d3d30206c8	golang.org/x/crypto@v0.43.0	0.45.0
lbenicio/kubernetes-dashboard-auth :1.4.13	78c63efd9dcd	golang.org/x/crypto@v0.43.0	0.45.0
lbenicio/kubernetes-dashboard-web :1.7.14	2797937bc2a5	golang.org/x/crypto@v0.43.0	0.45.0

Open the chart page →

2,318

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

33,613

metallblectures-k8sinfra

0.10.2

2 of 2 See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.10.2	21164241c045	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0

Open the chart page →

5,406

prometheuslectures-k8sinfra

15.8.5

4 of 6 See more

prometheus lectures-k8sinfra 15.8.5

4 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.45.0

Open the chart page →

9,100

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71	0.45.0

Open the chart page →

3,198

jenkinsleechistest

2.7.1

1 of 2 See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

4,445

prometheusleechistest

11.6.0

3 of 6 See more

prometheus leechistest 11.6.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56	0.45.0
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.45.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.45.0

Open the chart page →

8,492

kube-benchlemontech

0.1.0

1 of 1 See more

kube-bench lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.9	c329d73fea58	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0

Open the chart page →

1,632

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0

Open the chart page →

4,280

adguard-homelib42

2.0.0

1 of 1 See more

adguard-home lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.65	d765078d2140	golang.org/x/crypto@v0.41.0	0.45.0

Open the chart page →

1,061

kltlifecycle-toolkit

0.2.6

2 of 4 See more

klt lifecycle-toolkit 0.2.6

2 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/metrics-operator :v0.8.2	acf22310e9dd	golang.org/x/crypto@v0.12.0	0.45.0
ghcr.io/keptn/scheduler :v0.8.2	0f7d277bb2b2	golang.org/x/crypto@v0.12.0	0.45.0

Open the chart page →

4,680

kube-iptables-tailerlifen

0.2.3

1 of 1 See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

4,467

op-scim-bridgelifen

1.0.3

1 of 2 See more

op-scim-bridge lifen 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.45.0

Open the chart page →

2,777

op-scim-bridgelifen-charts

1.0.3

1 of 2 See more

op-scim-bridge lifen-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.45.0

Open the chart page →

2,777

lightsteplightstep-microsat

2.0.21

1 of 1 See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
lightstep/microsatellite :2024-01-22_17-52-59Z	c800e05e1eff	golang.org/x/crypto@v0.18.0	0.45.0

Open the chart page →

1,127

linkerd-preview-vizlinkerd-buoyant

25.4.3

2 of 5 See more

linkerd-preview-viz linkerd-buoyant 25.4.3

2 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/crypto@v0.26.0	0.45.0
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

3,454

linkerd-dashboardlinkerd-dashboard

0.11.1

1 of 2 See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	golang.org/x/crypto@v0.35.0	0.45.0

Open the chart page →

1,050

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

10,814

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	golang.org/x/crypto@v0.0.0-20210314154223-e6e6c4f2bb5b	0.45.0

Open the chart page →

2,136

livekit-serverlivekit-server

1.9.0

1 of 1 See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.9.0	3602a85840d5	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

1,560

llmarinerllmariner

1.53.1

12 of 21 See more

llmariner llmariner 1.53.1

12 of the 21 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner :1.16.0	d47f43484055	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/api-usage-server :1.16.0	8f9c32b866b0	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/database-creator :1.17.0	97065ced2942	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/job-manager-server :1.27.0	fe9de719f91e	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/rbac-server :1.19.1	df1adeb86679	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/session-manager-server :1.9.0	f24ecd37fbaa	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/user-manager-server :1.27.1	628a14449241	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

12,158

llm-dllm-d

1.0.23

1 of 2 See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

2,540

Container images carrying it

2,349 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.45.0	1
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/crypto@v0.16.0	0.45.0	1
ghcr.io/epinio/epinio-ui :v1.7.1-0.0.1	d3de52dfb0b4	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.45.0	1
ghcr.io/erpc/erpc :0.0.49	f5654f745d4c	golang.org/x/crypto@v0.35.0	0.45.0	1
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/crypto@v0.17.0	0.45.0	1
ghcr.io/external-secrets/external-secrets :v0.3.11	56a1ea4490ba	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0	1
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	golang.org/x/crypto@v0.6.0	0.45.0	1
ghcr.io/ferama/rospo :v0.12.0	ab40c1745534	golang.org/x/crypto@v0.18.0	0.45.0	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.45.0	1
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
ghcr.io/ferretdb/ferretdb :2.7.0	5706414241eb	golang.org/x/crypto@v0.43.0	0.45.0	1
ghcr.io/fikaworks/grgate :v0.6.3	7104f60d8972	golang.org/x/crypto@v0.7.0	0.45.0	1
ghcr.io/flanksource/postgres :17.6-497383c	ebcf66281fc1	golang.org/x/crypto@v0.41.0	0.45.0	1
ghcr.io/flatcar/nebraska :4.0.0	5c9e99ff7167	golang.org/x/crypto@v0.42.0	0.45.0	1
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/crypto@v0.26.0	0.45.0	1
ghcr.io/fluxcd/flux-cli :v2.5.1	274a179fd402	golang.org/x/crypto@v0.33.0	0.45.0	1
ghcr.io/fluxcd/helm-controller :v1.2.0	62eaa9c9a929	golang.org/x/crypto@v0.32.0	0.45.0	1
ghcr.io/fluxcd/source-controller :v1.5.0	00cd9316a379	golang.org/x/crypto@v0.32.0	0.45.0	1
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.45.0	1
ghcr.io/formancehq/ledger :v1.9.2	03c1ddbda33b	golang.org/x/crypto@v0.4.0	0.45.0	1
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	golang.org/x/crypto@v0.40.0	0.45.0	1
ghcr.io/foxcpp/maddy :0.9.5	de42151adff6	golang.org/x/crypto@v0.32.0	0.45.0	1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver :1.9.0	324f9b7b689c	golang.org/x/crypto@v0.14.0	0.45.0	1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver :1.9.0	cdba39e3f3d0	golang.org/x/crypto@v0.14.0	0.45.0	1
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.45.0	1
ghcr.io/gabe565/ascii-movie :1.9.6	27f85bb98da3	golang.org/x/crypto@v0.33.0	0.45.0	1
ghcr.io/gabe565/castsponsorskip :0.8.1	5f7b4c6dd299	golang.org/x/crypto@v0.31.0	0.45.0	1
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	golang.org/x/crypto@v0.6.0	0.45.0	1
ghcr.io/gabe565/matrimony :latest	d39a9d7c3e1b	golang.org/x/crypto@v0.19.0	0.45.0	1
ghcr.io/gabe565/transsmute :latest	c8ac95a30c31	golang.org/x/crypto@v0.36.0	0.45.0	1
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	golang.org/x/crypto@v0.14.0	0.45.0	1
ghcr.io/georgmangold/console :v1.8.1	58f4f180aa6e	golang.org/x/crypto@v0.36.0	0.45.0	1
ghcr.io/gla-rad/mc-mms-edgerouter :latest	3620d5680775	golang.org/x/crypto@v0.41.0	0.45.0	1
ghcr.io/gla-rad/mc-mms-router :latest	032e977d9adf	golang.org/x/crypto@v0.42.0	0.45.0	1
ghcr.io/glauth/glauth :v2.5.2	09c782ca5984	golang.org/x/crypto@v0.18.0	0.45.0	1
ghcr.io/gochain/rpc-proxy/rpc-proxy :latest	ca01f5ab95f7	golang.org/x/crypto@v0.36.0	0.45.0	1
ghcr.io/gotify/server :2.6.1	04f4c4bb7cdd	golang.org/x/crypto@v0.29.0	0.45.0	1
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	golang.org/x/crypto@v0.39.0	0.45.0	1
ghcr.io/grafana/alloy-operator :1.7.0	2ce23f948e02	golang.org/x/crypto@v0.43.0	0.45.0	1
ghcr.io/grafana/grafana-operator :v5.18.0	0af2faec9d6f	golang.org/x/crypto@v0.36.0	0.45.0	1
ghcr.io/gurucomputing/headscale-ui :2026.03.17	015f5ba04bcb	golang.org/x/crypto@v0.40.0	0.45.0	1
ghcr.io/helm/chartmuseum :v0.16.0	71d1f1c0179e	golang.org/x/crypto@v0.9.0	0.45.0	1
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.45.0	1
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0	1
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	golang.org/x/crypto@v0.36.0	0.45.0	1
ghcr.io/helmfile/helmfile :v1.7.4	f20e612d5a98	golang.org/x/crypto@v0.24.0	0.45.0	1
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	golang.org/x/crypto@v0.26.0	0.45.0	1
ghcr.io/home-assistant/home-assistant :2026.9.0	372d991e5888	golang.org/x/crypto@v0.26.0	0.45.0	1
ghcr.io/home-assistant/home-assistant :2026.8.2	56690a89c79a	golang.org/x/crypto@v0.26.0	0.45.0	1
ghcr.io/home-assistant/home-assistant :2026.9.1 :latest	612d76760b54	golang.org/x/crypto@v0.26.0	0.45.0	1