CVE-2025-58181

Medium

Advisory

Published 19 Nov 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,050; of 17,797 indexed, latest versions
Container images: 2,348; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

Carried by container images the latest versions of 2,050 of 17,797 indexed charts deploy, on 2,348 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+146 more	0.45.0	2,348

OSV records: GHSA-j5w8-q4qc-rx2x
Also known as: GO-2025-4134

Charts affected

2,050 by stars

Chart

Latest

Affected images

Radar Score

cranekubesphere-stable

0.5.2

2 of 3 See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0
gocrane/craned :v0.5.1	a1400909118c	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.45.0

Open the chart page →

8,903

csi-qingcloudkubesphere-stable

1.4.0

3 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.45.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0

Open the chart page →

12,446

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/crypto@v0.1.0	0.45.0
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/crypto@v0.4.0	0.45.0

Open the chart page →

18,435

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/crypto@v0.7.0	0.45.0
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0

Open the chart page →

4,108

fpga-operatorkubesphere-stable

2.7.4

2 of 7 See more

fpga-operator kubesphere-stable 2.7.4

2 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/crypto@v0.16.0	0.45.0
inaccel/reef :latest	c967218739f3	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

5,771

iomeshkubesphere-stable

1.1.0

11 of 25 See more

iomesh kubesphere-stable 1.1.0

11 of the 25 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/crypto@v0.16.0	0.45.0
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/crypto@v0.16.0	0.45.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/crypto@v0.14.0	0.45.0
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

49,004

IOMeshkubesphere-stable

1.2.0

11 of 25 See more

IOMesh kubesphere-stable 1.2.0

11 of the 25 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/crypto@v0.16.0	0.45.0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/crypto@v0.16.0	0.45.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/crypto@v0.14.0	0.45.0
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

46,692

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.45.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0

Open the chart page →

14,457

csi-neonsankubesphere-test

1.3.0

3 of 6 See more

csi-neonsan kubesphere-test 1.3.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0

Open the chart page →

18,537

csi-qingcloudkubesphere-test

1.4.0

3 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.45.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.45.0

Open the chart page →

12,446

minio-gatewaykubesphere-test

0.1.0

1 of 1 See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

1,084

openelbkubesphere-test

0.2.4

1 of 2 See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0

Open the chart page →

4,336

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.45.0

Open the chart page →

2,791

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.45.0

Open the chart page →

2,220

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

4,458

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
mavrick1/kubestellar-b :latest	45ca0429a1d4	golang.org/x/crypto@v0.5.0	0.45.0

Open the chart page →

4,778

kubiya-runnerkubiya-helm-charts

0.9.4

6 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

6 of the 9 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	golang.org/x/crypto@v0.29.0	0.45.0
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	golang.org/x/crypto@v0.31.0	0.45.0
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/crypto@v0.26.0	0.45.0
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	golang.org/x/crypto@v0.40.0	0.45.0
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	golang.org/x/crypto@v0.37.0	0.45.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.45.0

Open the chart page →

20,435

lethe-stackkuoss

0.2.3

2 of 3 See more

lethe-stack kuoss 0.2.3

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/eventrouter :v0.4.13	00b48beff3ae	golang.org/x/crypto@v0.36.0	0.45.0
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	golang.org/x/crypto@v0.39.0	0.45.0

Open the chart page →

1,762

kusionkusionstack

0.14.1

1 of 3 See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	golang.org/x/crypto@v0.29.0	0.45.0

Open the chart page →

6,969

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

1,881

krakendkvalitetsit

0.0.3

1 of 1 See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/crypto@v0.35.0	0.45.0

Open the chart page →

1,249

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

16,561

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0

Open the chart page →

8,544

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.45.0

Open the chart page →

26,400

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

2,125

lambdapinglambdaping

1.0.4

1 of 1 See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
udhos/lambdaping :1.0.4	6bd2cf2ac732	golang.org/x/crypto@v0.31.0	0.45.0

Open the chart page →

1,337

cachelava

1.1.1

1 of 1 See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	golang.org/x/crypto@v0.21.0	0.45.0

Open the chart page →

1,385

kubernetes-dashboardlbenicio-community

7.14.9

3 of 5 See more

kubernetes-dashboard lbenicio-community 7.14.9

3 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
lbenicio/kubernetes-dashboard-api :1.14.9	51d3d30206c8	golang.org/x/crypto@v0.43.0	0.45.0
lbenicio/kubernetes-dashboard-auth :1.4.13	78c63efd9dcd	golang.org/x/crypto@v0.43.0	0.45.0
lbenicio/kubernetes-dashboard-web :1.7.14	2797937bc2a5	golang.org/x/crypto@v0.43.0	0.45.0

Open the chart page →

2,318

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

33,613

metallblectures-k8sinfra

0.10.2

2 of 2 See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.10.2	21164241c045	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0

Open the chart page →

5,406

prometheuslectures-k8sinfra

15.8.5

4 of 6 See more

prometheus lectures-k8sinfra 15.8.5

4 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.45.0

Open the chart page →

9,100

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71	0.45.0

Open the chart page →

3,198

jenkinsleechistest

2.7.1

1 of 2 See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

4,445

prometheusleechistest

11.6.0

3 of 6 See more

prometheus leechistest 11.6.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56	0.45.0
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.45.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.45.0

Open the chart page →

8,492

kube-benchlemontech

0.1.0

1 of 1 See more

kube-bench lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.9	c329d73fea58	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0

Open the chart page →

1,632

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0

Open the chart page →

4,280

adguard-homelib42

2.0.0

1 of 1 See more

adguard-home lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.65	d765078d2140	golang.org/x/crypto@v0.41.0	0.45.0

Open the chart page →

1,061

kltlifecycle-toolkit

0.2.6

2 of 4 See more

klt lifecycle-toolkit 0.2.6

2 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/metrics-operator :v0.8.2	acf22310e9dd	golang.org/x/crypto@v0.12.0	0.45.0
ghcr.io/keptn/scheduler :v0.8.2	0f7d277bb2b2	golang.org/x/crypto@v0.12.0	0.45.0

Open the chart page →

4,680

kube-iptables-tailerlifen

0.2.3

1 of 1 See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0

Open the chart page →

4,467

op-scim-bridgelifen

1.0.3

1 of 2 See more

op-scim-bridge lifen 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.45.0

Open the chart page →

2,777

op-scim-bridgelifen-charts

1.0.3

1 of 2 See more

op-scim-bridge lifen-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.45.0

Open the chart page →

2,777

lightsteplightstep-microsat

2.0.21

1 of 1 See more

lightstep lightstep-microsat 2.0.21

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
lightstep/microsatellite :2024-01-22_17-52-59Z	c800e05e1eff	golang.org/x/crypto@v0.18.0	0.45.0

Open the chart page →

1,127

linkerd-preview-vizlinkerd-buoyant

25.4.3

2 of 5 See more

linkerd-preview-viz linkerd-buoyant 25.4.3

2 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/crypto@v0.26.0	0.45.0
ghcr.io/buoyantio/web :preview-25.4.3	3ee1b62aa111	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

3,454

linkerd-dashboardlinkerd-dashboard

0.11.1

1 of 2 See more

linkerd-dashboard linkerd-dashboard 0.11.1

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/buoyantio/prometheus :v3.3.1	e2b8aa62b648	golang.org/x/crypto@v0.35.0	0.45.0

Open the chart page →

1,050

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	golang.org/x/crypto@v0.17.0	0.45.0

Open the chart page →

10,814

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	golang.org/x/crypto@v0.0.0-20210314154223-e6e6c4f2bb5b	0.45.0

Open the chart page →

2,136

livekit-serverlivekit-server

1.9.0

1 of 1 See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.9.0	3602a85840d5	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

1,560

llmarinerllmariner

1.53.1

12 of 21 See more

llmariner llmariner 1.53.1

12 of the 21 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner :1.16.0	d47f43484055	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/api-usage-server :1.16.0	8f9c32b866b0	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/database-creator :1.17.0	97065ced2942	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/job-manager-server :1.27.0	fe9de719f91e	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/rbac-server :1.19.1	df1adeb86679	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/session-manager-server :1.9.0	f24ecd37fbaa	golang.org/x/crypto@v0.36.0	0.45.0
public.ecr.aws/cloudnatix/llmariner/user-manager-server :1.27.1	628a14449241	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

12,158

llm-dllm-d

1.0.23

1 of 2 See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

2,540

home-assistantlmatfy

0.1.38

1 of 1 See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2026.7	5a531753cea9	golang.org/x/crypto@v0.26.0	0.45.0

Open the chart page →

2,446

Container images carrying it

2,348 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	golang.org/x/crypto@v0.40.0	0.45.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.45.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.45.0	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.45.0	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	golang.org/x/crypto@v0.37.0	0.45.0	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	golang.org/x/crypto@v0.23.0	0.45.0	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	golang.org/x/crypto@v0.23.0	0.45.0	1
ghcr.io/strrl/wonder-mesh-net :v2026.629.0	625b140372fd	golang.org/x/crypto@v0.43.0	0.45.0	1
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.45.0	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.45.0	1
ghcr.io/substra/orchestrator-server :1.0.0	647e45284a80	golang.org/x/crypto@v0.21.0	0.45.0	1
ghcr.io/substratusai/lingo :v0.2.1	2c807cd41ed4	golang.org/x/crypto@v0.21.0	0.45.0	1
ghcr.io/synapsecns/sanguine/agents :6e3887fc2a05aff0d159453cedbfbe5024b910bf	81a9ebc899a4	golang.org/x/crypto@v0.6.0	0.45.0	1
ghcr.io/synapsecns/sanguine/cctp-relayer :b5a1dd5288f1a18eb05994e130d626fed45a56fc	2f1408c94168	golang.org/x/crypto@v0.7.0	0.45.0	1
ghcr.io/synapsecns/sanguine/explorer :latest	00131e3d1eaf	golang.org/x/crypto@v0.33.0	0.45.0	1
ghcr.io/synapsecns/sanguine/promexporter :4a9aad096c2bd1160e56e5472ddac77fa0cde2e9	416c1c5aeb86	golang.org/x/crypto@v0.9.0	0.45.0	1
ghcr.io/synapsecns/sanguine/screener-api :latest	b3de2050460a	golang.org/x/crypto@v0.33.0	0.45.0	1
ghcr.io/synapsecns/sanguine/scribe :6e3887fc2a05aff0d159453cedbfbe5024b910bf	5e0a3dfa9f96	golang.org/x/crypto@v0.6.0	0.45.0	1
ghcr.io/synapsecns/sanguine/scribe :latest	81edba952403	golang.org/x/crypto@v0.33.0	0.45.0	1
ghcr.io/synapsecns/sanguine/sinner :latest	3e98a98f6074	golang.org/x/crypto@v0.16.0	0.45.0	1
ghcr.io/tailscale/tailscale :v1.34.1	ce1862e6b3a5	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0	1
ghcr.io/tale/headplane :0.6.3	9476cc5adb12	golang.org/x/crypto@v0.41.0	0.45.0	1
ghcr.io/techwolf12/pocketbase :0.29.3	106099641679	golang.org/x/crypto@v0.41.0	0.45.0	1
ghcr.io/tikalk/resource-manager :latest	7f21d50e69cb	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0	1
ghcr.io/tjm/vault-gcp-secrets :v1.19.5	9f157fe035f1	golang.org/x/crypto@v0.38.0	0.45.0	1
ghcr.io/traefik/traefik-hub :v2.11.0	322f5f8cc105	golang.org/x/crypto@v0.14.0	0.45.0	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	golang.org/x/crypto@v0.26.0	0.45.0	1
ghcr.io/usememos/memos :0.24.0	4723d86e6797	golang.org/x/crypto@v0.32.0	0.45.0	1
ghcr.io/v6d-io/v6d/kube-rbac-proxy :v0.13.0	a2523c532c0c	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0	1
ghcr.io/voyagermesh/gateway :v1.6.2	23f4da194134	golang.org/x/crypto@v0.44.0	0.45.0	1
ghcr.io/voyagermesh/gateway-converter :v0.0.1	b92123805584	golang.org/x/crypto@v0.25.0	0.45.0	1
ghcr.io/vvanouytsel/jetspotter :1.48.1	ec0e17a94f61	golang.org/x/crypto@v0.37.0	0.45.0	1
ghcr.io/wachd/wachd :0.4.18	05b05c56da94	golang.org/x/crypto@v0.37.0	0.45.0	1
ghcr.io/warpstreamlabs/bento :1.8.1	21715979aefa	golang.org/x/crypto@v0.36.0	0.45.0	1
ghcr.io/wittdennis/homeassistant-otbr :4.2.5	282f840612d9	golang.org/x/crypto@v0.31.0	0.45.0	1
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	golang.org/x/crypto@v0.23.0	0.45.0	1
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	golang.org/x/crypto@v0.31.0	0.45.0	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	golang.org/x/crypto@v0.24.0	0.45.0	1
ghcr.io/wundergraph/cosmo/router :0.243.0	5afcab98d9d7	golang.org/x/crypto@v0.36.0	0.45.0	1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator :v1.0.8	31060be60bec	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	golang.org/x/crypto@v0.31.0	0.45.0	1
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	golang.org/x/crypto@v0.23.0	0.45.0	1
ghcr.io/zeiss/natz-operator/account-server :0.9.5	b380b5f17c3f	golang.org/x/crypto@v0.33.0	0.45.0	1
ghcr.io/zeiss/natz-operator/operator :0.9.5	187007974540	golang.org/x/crypto@v0.33.0	0.45.0	1
ghcr.io/zeiss/typhoon/controller :0.2.3	4fdf4edfda45	golang.org/x/crypto@v0.33.0	0.45.0	1
ghcr.io/zoriya/kyoo_transcoder :4.7.1	2dadea51a91e	golang.org/x/crypto@v0.31.0	0.45.0	1
mcr.microsoft.com/aks/kaito/gpu-provisioner :0.2.0	1204a7e948e9	golang.org/x/crypto@v0.18.0	0.45.0	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0	1
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
mcr.microsoft.com/oss/azure/aad-pod-identity/mic :v1.8.17	3004b93fcb74	golang.org/x/crypto@v0.6.0	0.45.0	1