StackRadar

CVE-2025-58181

Medium

Advisory

Published 19 Nov 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,051
of 17,792 indexed, latest versions
Container images
2,349
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

Carried by container images the latest versions of 2,051 of 17,792 indexed charts deploy, on 2,349 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+146 more0.45.02,349
OSV records
GHSA-j5w8-q4qc-rx2x
Also known as
GO-2025-4134

Charts affected

2,051 by stars
ChartLatestAffected imagesRadar Score
jupyterhubd4nVerified publisher3.3.72 of 7See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.45.0
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
golang.org/x/crypto@v0.21.0
0.45.0

Open the chart page →

16,732
miniod4nVerified publisher5.2.12 of 2See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-04-29T09-56-05Zc574fac67f60
golang.org/x/crypto@v0.22.0
0.45.0
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
golang.org/x/crypto@v0.23.0
0.45.0

Open the chart page →

2,659
cloudflareddamounVerified publisher3.3.01 of 1See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.5.05d5f70a59d5e
golang.org/x/crypto@v0.23.0
0.45.0

Open the chart page →

1,313
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
golang.org/x/crypto@v0.22.0
0.45.0

Open the chart page →

1,028
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.45.0

Open the chart page →

6,190
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63
0.45.0

Open the chart page →

3,247
dapr-agentsdapr-agents-devVerified publisher0.1.54 of 31See more

dapr-agents dapr-agents-dev 0.1.5

4 of the 31 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
golang.org/x/crypto@v0.41.0
0.45.0
prom/memcached-exporter:v0.15.4b6763ecb3c47
golang.org/x/crypto@v0.42.0
0.45.0
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
golang.org/x/crypto@v0.42.0
0.45.0
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
golang.org/x/crypto@v0.42.0
0.45.0

Open the chart page →

22,370
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
golang.org/x/crypto@v0.36.0
0.45.0

Open the chart page →

2,002
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.45.0

Open the chart page →

2,985
mongodb-bi-connectordasmeta1.0.31 of 1See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.45.0

Open the chart page →

5,849
nfs-provisionerdasmeta1.0.31 of 1See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.45.0

Open the chart page →

2,806
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
golang.org/x/crypto@v0.1.0
0.45.0

Open the chart page →

1,933
datadog-operatordatadog-test0.1.21 of 1See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
datadog/operator:0.3.117f08a860090
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.45.0

Open the chart page →

3,979
agent-helmdatasaker0.1.84 of 6See more

agent-helm datasaker 0.1.8

4 of the 6 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
golang.org/x/crypto@v0.14.0
0.45.0
datasaker/dsk-kube-state-agent:latestd6d2eb48589d
golang.org/x/crypto@v0.14.0
0.45.0
datasaker/dsk-node-agent:latest1b95913b6729
golang.org/x/crypto@v0.14.0
0.45.0
datasaker/dsk-process-agent:latest2f38720a637d
golang.org/x/crypto@v0.13.0
0.45.0

Open the chart page →

7,606
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
0.45.0

Open the chart page →

7,495
eg-edge-stackdatawire0.0.12 of 7See more

eg-edge-stack datawire 0.0.1

2 of the 7 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
ambassador/aes-authsvc:v4.0.0-preview.12a4598b03a6a
golang.org/x/crypto@v0.10.0
0.45.0
ambassador/aes-wafsvc:v4.0.0-preview.15fc571509b8c
golang.org/x/crypto@v0.10.0
0.45.0

Open the chart page →

15,882
dbgatedbgateVerified publisher0.1.11 of 1See more

dbgate dbgate 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
nathanfirmo/dbgate:latest6b0487e6e987
golang.org/x/crypto@v0.32.0
0.45.0

Open the chart page →

630
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
golang.org/x/crypto@v0.23.0
0.45.0

Open the chart page →

4,547
symfony-appdefault-ghVerified publisher0.6.51 of 3See more

symfony-app default-gh 0.6.5

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
alpine/git:2.36.366b210a97bc0
golang.org/x/crypto@v0.0.0-20221005025214-4161e89ecf1b
0.45.0

Open the chart page →

5,123
garage-webuideimosfr-charts1.1.01 of 1See more

garage-webui deimosfr-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
khairul169/garage-webui:1.1.017c793551873
golang.org/x/crypto@v0.35.0
0.45.0

Open the chart page →

567
cortex-gatewaydeliveryheroVerified publisher0.1.91 of 1See more

cortex-gateway deliveryhero 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
goelankit/cortex-gateway:v1.1.00d9a82dcf026
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
0.45.0

Open the chart page →

2,241
k8s-cloudwatch-adapterdeliveryheroVerified publisher0.2.21 of 1See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.45.0

Open the chart page →

2,475
kubeteach-coredergeberl0.2.31 of 1See more

kubeteach-core dergeberl 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
ghcr.io/dergeberl/kubeteach:v0.2.3-alphacf4428a3c79e
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.45.0

Open the chart page →

1,505
kubeteach-exerciseset1dergeberl0.2.31 of 2See more

kubeteach-exerciseset1 dergeberl 0.2.3

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
ghcr.io/dergeberl/kubeteach:v0.2.3-alphacf4428a3c79e
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.45.0

Open the chart page →

1,505
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
golang.org/x/crypto@v0.23.0
0.45.0

Open the chart page →

2,099
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.45.0
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.45.0

Open the chart page →

4,736
octolxddevplayer0Verified publisher0.1.11 of 1See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.45.0

Open the chart page →

2,525
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
golang.org/x/crypto@v0.24.0
0.45.0

Open the chart page →

9,703
argocddevtron1.8.12 of 3See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.45.0
quay.io/dexidp/dex:v2.25.07bcf286807b8
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.45.0

Open the chart page →

10,484
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.45.0

Open the chart page →

13,033
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
golang.org/x/crypto@v0.7.0
0.45.0

Open the chart page →

1,587
devtron-enterprisedevtron48.0.012 of 28See more

devtron-enterprise devtron 48.0.0

12 of the 28 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.45.0
quay.io/devtron/cost-sync:172ef62b-1159-39429edf210d763ca
golang.org/x/crypto@v0.38.0
0.45.0
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
golang.org/x/crypto@v0.14.0
0.45.0
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.45.0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
golang.org/x/crypto@v0.14.0
0.45.0
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f
0.45.0
quay.io/devtron/kubectl:latest2ad610626658
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.45.0
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
golang.org/x/crypto@v0.7.0
0.45.0
quay.io/devtron/nats:2.9.3-alpinef0cf3c3ab495
golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be
0.45.0
quay.io/devtron/nats-box:latest48cdd3054b20
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.45.0
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.45.0
quay.io/devtron/prometheus-nats-exporter:0.9.094044746cbce
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.45.0

Open the chart page →

68,765
devtron-in-clustercddevtron0.10.22 of 2See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.45.0
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
golang.org/x/crypto@v0.7.0
0.45.0

Open the chart page →

5,055
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.45.0

Open the chart page →

11,981
jcmhproxy-ingressdevtron0.14.61 of 1See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/jcmhproxy-ingress:v0.14.64286bcccda3e
golang.org/x/crypto@v0.18.0
0.45.0

Open the chart page →

1,379
kube-prometheus-stackdevtron19.3.02 of 6See more

kube-prometheus-stack devtron 19.3.0

2 of the 6 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.45.0
quay.io/prometheus/node-exporter:v1.2.2a990408ed288
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.45.0

Open the chart page →

8,659
securitydevtron0.2.21 of 1See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.45.0

Open the chart page →

2,442
zincdevtron0.1.21 of 1See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
public.ecr.aws/zinclabs/zinc:latestfefa9ee7256a
golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be
0.45.0

Open the chart page →

1,514
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
golang.org/x/crypto@v0.24.0
0.45.0

Open the chart page →

9,703
argocddevtron-labs1.8.12 of 3See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.45.0
quay.io/dexidp/dex:v2.25.07bcf286807b8
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.45.0

Open the chart page →

10,484
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.45.0

Open the chart page →

13,033
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
golang.org/x/crypto@v0.7.0
0.45.0

Open the chart page →

1,587
calicodevtron-labs0.1.13 of 4See more

calico devtron-labs 0.1.1

3 of the 4 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.45.0
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.45.0
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.45.0

Open the chart page →

10,094
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
0.45.0

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.012 of 28See more

devtron-enterprise devtron-labs 48.0.0

12 of the 28 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.45.0
quay.io/devtron/cost-sync:172ef62b-1159-39429edf210d763ca
golang.org/x/crypto@v0.38.0
0.45.0
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
golang.org/x/crypto@v0.14.0
0.45.0
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.45.0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
golang.org/x/crypto@v0.14.0
0.45.0
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f
0.45.0
quay.io/devtron/kubectl:latest2ad610626658
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.45.0
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
golang.org/x/crypto@v0.7.0
0.45.0
quay.io/devtron/nats:2.9.3-alpinef0cf3c3ab495
golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be
0.45.0
quay.io/devtron/nats-box:latest48cdd3054b20
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.45.0
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.45.0
quay.io/devtron/prometheus-nats-exporter:0.9.094044746cbce
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.45.0

Open the chart page →

68,765
devtron-in-clustercddevtron-labs0.10.22 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.45.0
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
golang.org/x/crypto@v0.7.0
0.45.0

Open the chart page →

5,055
devtron-operatordevtron-labs0.23.36 of 11See more

devtron-operator devtron-labs 0.23.3

6 of the 11 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.45.0
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
golang.org/x/crypto@v0.14.0
0.45.0
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.45.0
quay.io/devtron/kubectl:latest2ad610626658
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.45.0
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
golang.org/x/crypto@v0.7.0
0.45.0
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.45.0

Open the chart page →

33,219
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.45.0

Open the chart page →

11,981
jcmhproxy-ingressdevtron-labs0.14.61 of 1See more

jcmhproxy-ingress devtron-labs 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
quay.io/devtron/jcmhproxy-ingress:v0.14.64286bcccda3e
golang.org/x/crypto@v0.18.0
0.45.0

Open the chart page →

1,379
kube-prometheus-stackdevtron-labs19.3.02 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

2 of the 6 container images this version deploys carry CVE-2025-58181.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.45.0
quay.io/prometheus/node-exporter:v1.2.2a990408ed288
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.45.0

Open the chart page →

8,659

Container images carrying it

2,349 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/backube/scribe:0.2.0cdefc81c6b2e
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.45.0
1
quay.io/backube/volsync:0.16.00d03a6aad575
golang.org/x/crypto@v0.38.0
0.45.0
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
golang.org/x/crypto@v0.0.0-20220507011949-2cf3adece122
0.45.0
1
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
golang.org/x/crypto@v0.6.0
0.45.0
1
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
golang.org/x/crypto@v0.14.0
0.45.0
1
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
golang.org/x/crypto@v0.14.0
0.45.0
1
quay.io/brancz/kube-rbac-proxy:v0.16.02c8f8c357ff8
golang.org/x/crypto@v0.19.0
0.45.0
1
quay.io/brancz/kube-rbac-proxy:v0.18.0754ab2a723c8
golang.org/x/crypto@v0.24.0
0.45.0
1
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.45.0
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
golang.org/x/crypto@v0.17.0
0.45.0
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
golang.org/x/crypto@v0.40.0
0.45.0
1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
golang.org/x/crypto@v0.17.0
0.45.0
1
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
golang.org/x/crypto@v0.40.0
0.45.0
1
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.45.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.45.0
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
golang.org/x/crypto@v0.11.0
0.45.0
1
quay.io/coreos/etcd:v3.5.11842975891182
golang.org/x/crypto@v0.14.0
0.45.0
1
quay.io/coreos/etcd:v3.5.16d967d98a12dc
golang.org/x/crypto@v0.21.0
0.45.0
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.45.0
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.45.0
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.45.0
1
quay.io/evryfs/github-actions-runner-operator:v0.11.16b084e0bd082
golang.org/x/crypto@v0.11.0
0.45.0
1
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
golang.org/x/crypto@v0.31.0
0.45.0
1
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
golang.org/x/crypto@v0.1.0
0.45.0
1
quay.io/fiware/ishare-auth-provider:0.4.3158108f70f95
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.45.0
1
quay.io/fiware/vcverifier:6.21.251ed1e979094
golang.org/x/crypto@v0.37.0
0.45.0
1
quay.io/fiware/vcverifier:2.0.1cd36290dc849
golang.org/x/crypto@v0.7.0
0.45.0
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
0.45.0
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
0.45.0
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
0.45.0
1
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
golang.org/x/crypto@v0.5.0
0.45.0
1
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
golang.org/x/crypto@v0.5.0
0.45.0
1
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
golang.org/x/crypto@v0.5.0
0.45.0
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
golang.org/x/crypto@v0.10.0
0.45.0
1
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.45.0
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
golang.org/x/crypto@v0.10.0
0.45.0
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
golang.org/x/crypto@v0.42.0
0.45.0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
golang.org/x/crypto@v0.0.0-20220321153916-2c7772ba3064
0.45.0
1
quay.io/influxdb/chronograf:1.9.4bb0a980bc2bf
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.45.0
1
quay.io/influxdb/chronograf:1.9.3c2ed16080689
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.45.0
1
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.45.0
1
quay.io/jetstack/cert-manager-cainjector:v1.16.13c49185718cf
golang.org/x/crypto@v0.27.0
0.45.0
1
quay.io/jetstack/cert-manager-cainjector:v1.18.2af59e01ad975
golang.org/x/crypto@v0.38.0
0.45.0
1
quay.io/jetstack/cert-manager-cainjector:v1.10.1b5657161d2c2
golang.org/x/crypto@v0.0.0-20220924013350-4ba4fb4dd9e7
0.45.0
1
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.45.0
1
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.45.0
1
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
golang.org/x/crypto@v0.0.0-20220924013350-4ba4fb4dd9e7
0.45.0
1
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
golang.org/x/crypto@v0.6.0
0.45.0
1
quay.io/jetstack/cert-manager-controller:v1.18.281316365dc0b
golang.org/x/crypto@v0.38.0
0.45.0
1
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
golang.org/x/crypto@v0.22.0
0.45.0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.