CVE-2025-58181

Medium

Advisory

Published 19 Nov 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,054; of 17,790 indexed, latest versions
Container images: 2,352; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption

Carried by container images the latest versions of 2,054 of 17,790 indexed charts deploy, on 2,352 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+146 more	0.45.0	2,352

OSV records: GHSA-j5w8-q4qc-rx2x
Also known as: GO-2025-4134

Charts affected

2,054 by stars

Chart

Latest

Affected images

Radar Score

kraken-cikraken-ci

1.7.36

1 of 10 See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

7,303

kubebadgeskubebadges

0.1.3

1 of 2 See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
neosu/kubebadges :v0.0.5	256530d8e5c6	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

1,799

pyroscopekubeblocks

0.2.92

1 of 1 See more

pyroscope kubeblocks 0.2.92

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
apecloud/pyroscope :0.37.2	dbca95a15bc1	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

1,620

skywalkingkubesphere-test

3.1.0

2 of 4 See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.45.0
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.45.0

Open the chart page →

18,061

kubeviouskubevious

1.2.2

1 of 7 See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kubevious/ui :1.2.1	6233e84bdd59	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.45.0

Open the chart page →

14,212

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

3 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

3 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/crypto@v0.13.0	0.45.0
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/crypto@v0.13.0	0.45.0
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/crypto@v0.13.0	0.45.0

Open the chart page →

11,675

prometheus-pingmesh-exporterkubservice-charts

1.1.1

1 of 1 See more

prometheus-pingmesh-exporter kubservice-charts 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/crypto@v0.28.0	0.45.0

Open the chart page →

855

karporkusionstack

0.7.6

2 of 3 See more

karpor kusionstack 0.7.6

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
kusionstack/karpor :v0.6.4	b707d3bf0abd	golang.org/x/crypto@v0.16.0	0.45.0
quay.io/coreos/etcd :v3.5.11	842975891182	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

3,310

loftloft

0.0.0-ci.14

1 of 1 See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	golang.org/x/crypto@v0.12.0	0.45.0

Open the chart page →

3,686

vcluster-k8sloft

0.0.0-ci.3

3 of 4 See more

vcluster-k8s loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.45.0
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/crypto@v0.1.0	0.45.0
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

5,595

kubecostmesosphere-stable

0.37.5

6 of 9 See more

kubecost mesosphere-stable 0.37.5

6 of the 9 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.7	1a359d92f40e	golang.org/x/crypto@v0.4.0	0.45.0
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	golang.org/x/crypto@v0.15.0	0.45.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	golang.org/x/crypto@v0.14.0	0.45.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.45.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/crypto@v0.26.0	0.45.0
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/crypto@v0.24.0	0.45.0

Open the chart page →

17,799

rclonemglants

2.3.4

1 of 1 See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0

Open the chart page →

2,750

helm-ai-kernelmindburn-labs

0.8.5

1 of 2 See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
alpine/helmdigest-pinned	105741fa6621	golang.org/x/crypto@v0.25.0	0.45.0

Open the chart page →

2,175

move2kubemove2kube

0.3.15

1 of 1 See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.45.0

Open the chart page →

3,803

nebraskanebraska

3.0.0

1 of 2 See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/flatcar/nebraska :4.0.0	5c9e99ff7167	golang.org/x/crypto@v0.42.0	0.45.0

Open the chart page →

4,077

keycloak-operatornewsaktuell

0.1.7

1 of 1 See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0

Open the chart page →

5,066

openclaw-with-brainopenclaw-with-brain

0.1.67

1 of 3 See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
alpine/git :2.47.2	062a01ad7a0e	golang.org/x/crypto@v0.38.0	0.45.0

Open the chart page →

5,244

oesopsmx

4.0.32

5 of 25 See more

oes opsmx 4.0.32

5 of the 25 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.45.0
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.45.0
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.45.0
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.45.0

Open the chart page →

108,315

ipfs-clusterparadeum-team

0.0.19

2 of 2 See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.45.0
ipfs/ipfs-cluster :1.0.2	1511f6d57994	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0

Open the chart page →

3,769

permifypermify

0.5.0

1 of 1 See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	golang.org/x/crypto@v0.24.0	0.45.0

Open the chart page →

1,003

platzioplatz-io

0.6.5

1 of 2 See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
platzio/backend :v0.6.5	d5e5972f344b	golang.org/x/crypto@v0.39.0	0.45.0

Open the chart page →

2,877

plecopleco

0.24.0

1 of 1 See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

1,353

pomeriumpomerium

34.0.1

1 of 1 See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
pomerium/pomerium :v0.22.1	9c69b10a2126	golang.org/x/crypto@v0.8.0	0.45.0

Open the chart page →

1,948

prometheus-systemd-exporterprometheus-community

0.5.2

1 of 1 See more

prometheus-systemd-exporter prometheus-community 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/systemd-exporter :v0.7.0	78c03f875dfb	golang.org/x/crypto@v0.31.0	0.45.0

Open the chart page →

725

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.45.0
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.45.0

Open the chart page →

12,132

qgis-serverqgis-server

0.1.10

1 of 3 See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/crypto@v0.35.0	0.45.0

Open the chart page →

5,465

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.45.0

Open the chart page →

2,731

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-07-23T15-54-02Z	d249d1fb6966	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

13,647

rqliterqlite

2.0.0

1 of 1 See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
rqlite/rqlite :9.1.3	7b992a526eee	golang.org/x/crypto@v0.43.0	0.45.0

Open the chart page →

1,318

qbittorrent-vpnrtomik-helm-charts

0.0.2

1 of 2 See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
qmcgaw/gluetun :v3.40.0	2b42bfa04675	golang.org/x/crypto@v0.29.0	0.45.0

Open the chart page →

1,218

bentoself-hosters-by-night

0.9.1

1 of 1 See more

bento self-hosters-by-night 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/warpstreamlabs/bento :1.8.1	21715979aefa	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

1,053

corednssoftizy

0.2.0

1 of 1 See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
coredns/coredns :1.10.1	a0ead06651cf	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.45.0

Open the chart page →

1,670

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.45.0

Open the chart page →

12,537

miniosolidcharts

0.5.0

1 of 1 See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/coollabsio/minio :RELEASE.2025-10-15T17-29-55Z	69b55a1c1c5d	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

1,070

sn-platformstreamnative

1.11.44

5 of 9 See more

sn-platform streamnative 1.11.44

5 of the 9 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	golang.org/x/crypto@v0.4.0	0.45.0
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.45.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.45.0
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.45.0
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/crypto@v0.7.0	0.45.0

Open the chart page →

15,564

pocketbasetechwolf12

0.29.3

1 of 1 See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/techwolf12/pocketbase :0.29.3	106099641679	golang.org/x/crypto@v0.41.0	0.45.0

Open the chart page →

1,448

feedbacksystemthm-mni-ii

0.47.1

4 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

4 of the 10 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	golang.org/x/crypto@v0.17.0	0.45.0
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.45.0
library/docker :20.10.21-dind	3153fa63f546	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/crypto@v0.1.0	0.45.0

Open the chart page →

28,634

topaztopaz

0.2.5

1 of 1 See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/aserto-dev/topaz :0.32.59	4c708ecf7dc4	golang.org/x/crypto@v0.37.0	0.45.0

Open the chart page →

1,503

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	golang.org/x/crypto@v0.0.0-20200317142112-1b76d66859c6	0.45.0

Open the chart page →

4,145

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.45.0
library/traefik :v2.5	7d5a6ae66572	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.45.0
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0

Open the chart page →

9,271

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.45.0
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/crypto@v0.14.0	0.45.0

Open the chart page →

10,373

uptraceuptrace

2.0.2

1 of 2 See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
uptrace/uptrace :2.0.2	34a02c3b2d12	golang.org/x/crypto@v0.40.0	0.45.0

Open the chart page →

1,627

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/crypto@v0.11.0	0.45.0

Open the chart page →

1,350

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0

Open the chart page →

2,245

wasmcloud-chartwasmcloud-chart

0.7.2

1 of 2 See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	golang.org/x/crypto@v0.16.0	0.45.0

Open the chart page →

3,478

argo-cdwenerme

10.9.1

1 of 3 See more

argo-cd wenerme 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	golang.org/x/crypto@v0.36.0	0.45.0

Open the chart page →

3,003

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.45.0

Open the chart page →

6,085

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.45.0
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.45.0

Open the chart page →

10,047

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0

Open the chart page →

4,713

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2025-58181.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/crypto@v0.0.0-20220507011949-2cf3adece122	0.45.0

Open the chart page →

4,049

Container images carrying it

2,352 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/rimusz/hostpath-provisioner :v0.2.5	87f0398ec7ff	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
quay.io/seamware/did-helper :0.6.0	799c5f566952	golang.org/x/crypto@v0.37.0	0.45.0	1
quay.io/skopeo/stable :v1.13	4853591bd1d2	golang.org/x/crypto@v0.10.0	0.45.0	1
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
quay.io/superq/draytek-exporter :v0.2.0	3b577bdceaae	golang.org/x/crypto@v0.43.0	0.45.0	1
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	golang.org/x/crypto@v0.8.0	0.45.0	1
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	golang.org/x/crypto@v0.39.0	0.45.0	1
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.45.0	1
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/crypto@v0.24.0	0.45.0	1
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
quay.io/tigera/operator :v1.15.1	c6591da87aa8	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.45.0	1
quay.io/uswitch/kiam :v4.0	be3a5846922d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.45.0	1
quay.io/youniqx/heist :v1.1.209	c43b3a9d98ae	golang.org/x/crypto@v0.26.0	0.45.0	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.45.0	1
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	golang.org/x/crypto@v0.13.0	0.45.0	1
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	golang.org/x/crypto@v0.0.0-20180808211826-de0752318171	0.45.0	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend :1.0.31	c7afac3446d6	golang.org/x/crypto@v0.36.0	0.45.0	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	golang.org/x/crypto@v0.36.0	0.45.0	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5	0.45.0	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.45.0	1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	golang.org/x/crypto@v0.12.0	0.45.0	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.45.0	1
registry.gitlab.com/xrow-public/ci-tools/tools :main	9b9d1ed86b6a	golang.org/x/crypto@v0.39.0	0.45.0	1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	golang.org/x/crypto@v0.39.0	0.45.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	golang.org/x/crypto@v0.36.0	0.45.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.34.0	7b172f42533c	golang.org/x/crypto@v0.36.0	0.45.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/crypto@v0.11.0	0.45.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	golang.org/x/crypto@v0.30.0	0.45.0	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/crypto@v0.43.0	0.45.0	1
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
registry.k8s.io/etcd :3.6.4-0	e36c08168342	golang.org/x/crypto@v0.36.0	0.45.0	1
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/crypto@v0.19.0	0.45.0	1
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	golang.org/x/crypto@v0.14.0	0.45.0	1
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/crypto@v0.16.0	0.45.0	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	golang.org/x/crypto@v0.21.0	0.45.0	1
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.45.0	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.45.0	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.45.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	golang.org/x/crypto@v0.18.0	0.45.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/crypto@v0.18.0	0.45.0	1
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	golang.org/x/crypto@v0.23.0	0.45.0	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	golang.org/x/crypto@v0.25.0	0.45.0	1
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.11.1	e6a43c83ab16	golang.org/x/crypto@v0.1.0	0.45.0	1
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	golang.org/x/crypto@v0.38.0	0.45.0	1
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	golang.org/x/crypto@v0.37.0	0.45.0	1