CVE-2025-58189

Medium

Advisory

Published 29 Oct 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,372; of 17,803 indexed, latest versions
Container images: 3,824; deployed by those charts
Fix available: 1 of 2; affected packages

ALPN negotiation error contains attacker controlled information in crypto/tls

Carried by container images the latest versions of 3,372 of 17,803 indexed charts deploy, on 3,824 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+163 more	1.24.8	3,824

OSV records: DEBIAN-CVE-2025-58189 GO-2025-4008
Also known as: BIT-golang-2025-58189

Charts affected

3,372 by stars

Chart

Latest

Affected images

Radar Score

iomeshkubesphere-stable

1.1.0

23 of 25 See more

iomesh kubesphere-stable 1.1.0

23 of the 25 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	stdlib@go1.20.3	1.24.8
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	stdlib@go1.20.3	1.24.8
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	stdlib@go1.16.7	1.24.8
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	stdlib@go1.17.3	1.24.8
iomesh/csi-provisioner :v3.0.0	f9508460b273	stdlib@go1.16.2	1.24.8
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	stdlib@go1.19	1.24.8
iomesh/deck :v0.1.0	a31e26b6ae22	stdlib@go1.21.10	1.24.8
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	stdlib@go1.21.10	1.24.8
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	stdlib@go1.13.1	1.24.8
iomesh/livenessprobe :v2.8.0	560f01510f99	stdlib@go1.18	1.24.8
iomesh/localpv-manager :v0.2.0	f13deacac3f4	stdlib@go1.20.3	1.24.8
iomesh/node-disk-exporter :1.8.0	f03148764f38	stdlib@go1.14.7	1.24.8
iomesh/node-disk-manager :1.8.0	002c4b92fd34	stdlib@go1.14.7	1.24.8
iomesh/node-disk-operator :1.8.0	f6c76380db34	stdlib@go1.14.7	1.24.8
iomesh/operator :v1.1.0	60081c9b2f52	stdlib@go1.21.4	1.24.8
iomesh/post-delete-hook :v1.1.0	eea5651f3270	stdlib@go1.21.4	1.24.8
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	stdlib@go1.19	1.24.8
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	stdlib@go1.19.7	1.24.8
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	stdlib@go1.20.3	1.24.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	stdlib@go1.20.3	1.24.8
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	stdlib@go1.20.3	1.24.8
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	stdlib@go1.20.3	1.24.8
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	stdlib@go1.20.3	1.24.8

Open the chart page →

49,027

IOMeshkubesphere-stable

1.2.0

23 of 25 See more

IOMesh kubesphere-stable 1.2.0

23 of the 25 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	stdlib@go1.21.5	1.24.8
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	stdlib@go1.21.5	1.24.8
iomesh/csi-driver :v2.8.0	1a151f602451	stdlib@go1.21.11	1.24.8
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	stdlib@go1.17.3	1.24.8
iomesh/csi-provisioner :v3.0.0	f9508460b273	stdlib@go1.16.2	1.24.8
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	stdlib@go1.19	1.24.8
iomesh/deck :v0.2.0	282d6c419ed3	stdlib@go1.22.6	1.24.8
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	stdlib@go1.22.6	1.24.8
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	stdlib@go1.13.1	1.24.8
iomesh/livenessprobe :v2.8.0	560f01510f99	stdlib@go1.18	1.24.8
iomesh/localpv-manager :v0.2.0	f13deacac3f4	stdlib@go1.20.3	1.24.8
iomesh/node-disk-exporter :1.8.0	f03148764f38	stdlib@go1.14.7	1.24.8
iomesh/node-disk-manager :1.8.0-2	292ad270082e	stdlib@go1.14.7	1.24.8
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	stdlib@go1.14.7	1.24.8
iomesh/operator :v1.2.0	ba4dd6be7e59	stdlib@go1.21.4	1.24.8
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	stdlib@go1.21.4	1.24.8
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	stdlib@go1.19	1.24.8
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	stdlib@go1.19.7	1.24.8
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	stdlib@go1.20.3	1.24.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	stdlib@go1.20.3	1.24.8
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	stdlib@go1.20.3	1.24.8
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	stdlib@go1.20.3	1.24.8
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	stdlib@go1.20.3	1.24.8

Open the chart page →

46,717

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	stdlib@go1.13.10	1.24.8
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	stdlib@go1.15.6	1.24.8

Open the chart page →

86,937

aws-fsx-csi-driverkubesphere-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	stdlib@go1.16.8	1.24.8

Open the chart page →

1,595

ccm-qingcloudkubesphere-test

0.1.0

1 of 1 See more

ccm-qingcloud kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.24.8

Open the chart page →

1,540

cni-hostnickubesphere-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	stdlib@go1.16.3	1.24.8

Open the chart page →

2,444

csi-neonsankubesphere-test

1.3.0

6 of 6 See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	stdlib@go1.16	1.24.8
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	stdlib@go1.14.4	1.24.8
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	stdlib@go1.16	1.24.8
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	stdlib@go1.16	1.24.8
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	stdlib@go1.15	1.24.8
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	stdlib@go1.16.2	1.24.8

Open the chart page →

18,542

csi-qingcloudkubesphere-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	stdlib@go1.16	1.24.8
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	stdlib@go1.16	1.24.8
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	stdlib@go1.19.13	1.24.8
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	stdlib@go1.16	1.24.8
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	stdlib@go1.15	1.24.8
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	stdlib@go1.16.2	1.24.8

Open the chart page →

12,448

curvefs-csikubesphere-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	stdlib@go1.13.3	1.24.8

Open the chart page →

2,831

minio-gatewaykubesphere-test

0.1.0

1 of 1 See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	stdlib@go1.24.6	1.24.8

Open the chart page →

1,201

mongodbkubesphere-test

0.3.2

1 of 2 See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
mikefarah/yq :2.4.1	6fc625c402de	stdlib@go1.13.3	1.24.8

Open the chart page →

9,643

online-boutiquekubesphere-test

0.1.0

8 of 11 See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	stdlib@go1.15.6	1.24.8
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	stdlib@go1.15.10	1.24.8
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	stdlib@go1.15.6	1.24.8
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	stdlib@go1.15.10	1.24.8
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	stdlib@go1.15.6	1.24.8
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	stdlib@go1.15.10	1.24.8
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	stdlib@go1.15.6	1.24.8
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	stdlib@go1.15.6	1.24.8

Open the chart page →

26,080

openelbkubesphere-test

0.2.4

2 of 2 See more

openelb kubesphere-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	stdlib@go1.15.15	1.24.8
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	stdlib@go1.16.9	1.24.8

Open the chart page →

4,337

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	stdlib@go1.15.15	1.24.8

Open the chart page →

2,792

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	stdlib@go1.15	1.24.8

Open the chart page →

2,220

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	stdlib@go1.20.4	1.24.8

Open the chart page →

4,614

kubestellar-uikubestellarui

0.1.1

2 of 4 See more

kubestellar-ui kubestellarui 0.1.1

2 of the 4 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
library/redis :7.0-alpine	c9d92d840fd0	stdlib@go1.18.2	1.24.8
mavrick1/kubestellar-b :latest	45ca0429a1d4	stdlib@go1.20.3	1.24.8

Open the chart page →

5,068

kube-wordpress-mysqlkube-wordpress-mysql

0.1.0

1 of 2 See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.24.8

Open the chart page →

8,816

kube-workload-restarterkube-workload-restarter

0.0.4

1 of 1 See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	stdlib@go1.20.2	1.24.8

Open the chart page →

1,815

kubiya-runnerkubiya-helm-charts

0.9.4

8 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

8 of the 9 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	stdlib@go1.22.7	1.24.8
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.24.8
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	stdlib@go1.23.12	1.24.8
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	stdlib@go1.22.10	1.24.8
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	stdlib@go1.25.1	1.24.8
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	stdlib@go1.21.5	1.24.8
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	stdlib@go1.23.12	1.24.8
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	stdlib@go1.23.3	1.24.8

Open the chart page →

20,515

lethe-stackkuoss

0.2.3

2 of 3 See more

lethe-stack kuoss 0.2.3

2 of the 3 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/eventrouter :v0.4.13	00b48beff3ae	stdlib@go1.23.12	1.24.8
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	stdlib@go1.23.12	1.24.8

Open the chart page →

1,762

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	stdlib@go1.20.14	1.24.8

Open the chart page →

3,481

kusionkusionstack

0.14.1

2 of 3 See more

kusion kusionstack 0.14.1

2 of the 3 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	stdlib@go1.22.10	1.24.8
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.24.8

Open the chart page →

59,153

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	stdlib@go1.19.13	1.24.8

Open the chart page →

1,881

sample-operatorkusionstack

0.1.2

1 of 1 See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
chaerr/kridge :demo-operator-v0.1.2	66833deec017	stdlib@go1.20.7	1.24.8

Open the chart page →

2,515

azure-key-vault-helperkvalitetsit

2.0.2

1 of 1 See more

azure-key-vault-helper kvalitetsit 2.0.2

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
kvalitetsit/go-loop :1.1.0	d07f449d75ed	stdlib@go1.25.1	1.24.8

Open the chart page →

307

dynatrace-operatorkvalitetsit

1.3.0

1 of 1 See more

dynatrace-operator kvalitetsit 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	stdlib@go1.22.5	1.24.8

Open the chart page →

1,320

krakendkvalitetsit

0.0.3

1 of 1 See more

krakend kvalitetsit 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
devopsfaith/krakend :latest	f8bdaa8a1a43	stdlib@go1.24.2	1.24.8

Open the chart page →

1,518

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	stdlib@go1.14.1	1.24.8

Open the chart page →

16,686

metadockvalitetsit

0.0.7

2 of 2 See more

metadoc kvalitetsit 0.0.7

2 of the 2 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-app :main	e89e351733ad	stdlib@go1.19.5	1.24.8
kvalitetsit/metadoc-web :main	f57e7553f5bd	stdlib@go1.16	1.24.8

Open the chart page →

4,033

nsp-prometheus-exporterkvalitetsit

1.0.19

1 of 2 See more

nsp-prometheus-exporter kvalitetsit 1.0.19

1 of the 2 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
kvalitetsit/nsp-prometheus-exporter :1.0.19	0b397ff954ec	stdlib@go1.15.3	1.24.8

Open the chart page →

2,064

stakitkvalitetsit

0.3.11

1 of 3 See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
kvalitetsit/stakit-frontend :0.2.5	fd5c4f60ef80	stdlib@go1.19.3	1.24.8

Open the chart page →

7,852

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	stdlib@go1.13.10	1.24.8

Open the chart page →

8,545

freescoutl4g

0.1.0

1 of 3 See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	stdlib@go1.22.2	1.24.8

Open the chart page →

5,337

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	stdlib@go1.14	1.24.8

Open the chart page →

26,513

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	stdlib@go1.24.3	1.24.8

Open the chart page →

2,279

lambdapinglambdaping

1.0.4

1 of 1 See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
udhos/lambdaping :1.0.4	6bd2cf2ac732	stdlib@go1.23.4	1.24.8

Open the chart page →

1,347

pageslatif-pages

1.0.0

1 of 3 See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.24.8

Open the chart page →

20,261

cachelava

1.1.1

1 of 1 See more

cache lava 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
ghcr.io/lavanet/lava/lavap :v2.5.0	89028adefcff	stdlib@go1.20.14	1.24.8

Open the chart page →

1,385

pageslavanya-pages

1.0.0

1 of 3 See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.24.8

Open the chart page →

20,261

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	stdlib@go1.20.5	1.24.8

Open the chart page →

33,731

metallblectures-k8sinfra

0.10.2

2 of 2 See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.10.2	21164241c045	stdlib@go1.16.5	1.24.8
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	stdlib@go1.16.5	1.24.8

Open the chart page →

5,406

prometheuslectures-k8sinfra

15.8.5

5 of 6 See more

prometheus lectures-k8sinfra 15.8.5

5 of the 6 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.24.8
prom/pushgateway :v1.4.2	a684e7c830a4	stdlib@go1.16.9	1.24.8
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	stdlib@go1.16.7	1.24.8
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	stdlib@go1.17.3	1.24.8
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	stdlib@go1.18.4	1.24.8

Open the chart page →

9,111

grafanaleechistest

5.3.0

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	stdlib@go1.14.3	1.24.8

Open the chart page →

3,199

prometheusleechistest

11.6.0

4 of 6 See more

prometheus leechistest 11.6.0

4 of the 6 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	stdlib@go1.13.5	1.24.8
prom/prometheus :v2.19.0	bfad037f95e5	stdlib@go1.14.4	1.24.8
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.24.8
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	stdlib@go1.14.4	1.24.8

Open the chart page →

8,492

kube-benchlemontech

0.1.0

1 of 1 See more

kube-bench lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.9	c329d73fea58	stdlib@go1.19	1.24.8

Open the chart page →

1,633

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	stdlib@go1.19	1.24.8

Open the chart page →

4,281

adguard-homelib42

2.0.0

1 of 1 See more

adguard-home lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.65	d765078d2140	stdlib@go1.24.6	1.24.8

Open the chart page →

1,205

libredb-studiolibredb-studio-oci

0.1.64

1 of 1 See more

libredb-studio libredb-studio-oci 0.1.64

1 of the 1 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
ghcr.io/libredb/libredb-studio :0.16.0	fa925884368a	stdlib@go1.24.4	1.24.8

Open the chart page →

1,182

librenmslibrenms

10.1.1

2 of 5 See more

librenms librenms 10.1.1

2 of the 5 container images this version deploys carry CVE-2025-58189.

Container image	Digest	Package	Fixed in
library/mysql :9.7.2	257388edf9c8	stdlib@go1.24.6	1.24.8
librenms/librenms :26.8.2	8194a4a9ff49	stdlib@go1.24.6	1.24.8

Open the chart page →

3,169

Container images carrying it

3,824 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
hashicorp/vault-k8s :0.14.0	aff47b5ba39c	stdlib@go1.17.2	1.24.8	1
hashicorp/waypoint :0.11.3	97d521a27498	stdlib@go1.19.4	1.24.8	1
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	stdlib@go1.15.6	1.24.8	1
headscale/headscale :0.25.1	a7a8ae9616bb	stdlib@go1.23.4	1.24.8	1
headscale/headscale :0.27.1	cd37b3001857	stdlib@go1.25.1	1.24.8	1
helga09/my_sql_shoes :v1.1.1	a03657d97897	stdlib@go1.18.2	1.24.8	1
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	stdlib@go1.20.5	1.24.8	1
hetznercloud/hcloud-cloud-controller-manager :v1.13.0	ed5ee5f83973	stdlib@go1.19	1.24.8	1
hetznercloud/hcloud-csi-driver :1.6.0	1475d525f9a4	stdlib@go1.17	1.24.8	1
hetznercloud/hcloud-csi-driver :1.5.1	41dce5b33644	stdlib@go1.15.3	1.24.8	1
hetznercloud/hcloud-csi-driver :v2.3.2	b7ed90d5fab2	stdlib@go1.19.7	1.24.8	1
hhaluk/mocktail :2.0.3	350d19360038	stdlib@go1.17.7	1.24.8	1
hhyo/archery :v1.9.1	1aa41843419e	stdlib@go1.15.6	1.24.8	1
hibiken/asynqmon :latest	ac80bcffd2f9	stdlib@go1.18.10	1.24.8	1
hipages/php-fpm_exporter :2.2.0	9b5be9d3d955	stdlib@go1.17.10	1.24.8	1
hiversh/antigravity :0.1.45-microvm	0e36d98402bc	stdlib@go1.19.8	1.24.8	1
hiversh/browser :0.1.45-microvm	b5048c6342ce	stdlib@go1.19.8	1.24.8	1
hiversh/claude :0.1.45-microvm	2fbf9f264498	stdlib@go1.19.8	1.24.8	1
hiversh/codex :0.1.45-microvm	4f43130f51e5	stdlib@go1.19.8	1.24.8	1
hiversh/controller :0.1.45	b0b85f8942c7	stdlib@go1.19.8	1.24.8	1
hiversh/copilot :0.1.45-microvm	50c07b84f298	stdlib@go1.19.8	1.24.8	1
hiversh/node :0.1.45-alpine-microvm	836a37641941	stdlib@go1.19.8	1.24.8	1
hiversh/openclaw :0.1.45-microvm	958b7ebb4eb4	stdlib@go1.19.8	1.24.8	1
hiversh/python :0.1.45-3.13-alpine-microvm	63a5ae179a9f	stdlib@go1.19.8	1.24.8	1
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	stdlib@go1.17.10	1.24.8	1
holiman/nodemonitor :latest	5cd609761065	stdlib@go1.20.3	1.24.8	1
homeassistant/home-assistant :2023.10.3	021e2afc6e57	stdlib@go1.17.1	1.24.8	1
homeassistant/home-assistant :2026.7	5a531753cea9	stdlib@go1.23.3	1.24.8	1
homeassistant/home-assistant :2023.12.4	8d000332b09b	stdlib@go1.17.1	1.24.8	1
honeycombio/honeycomb-kubernetes-agent :2.7.4	48c38d0870f2	stdlib@go1.24.3	1.24.8	1
honglab/slack-emoji-maker :v0.0.1	ca075a926fe1	stdlib@go1.20.7	1.24.8	1
hoppscotch/hoppscotch :2024.11.0	538fe6ded4b6	stdlib@go1.21.10	1.24.8	1
huacnlee/gobackup :v3.1.1	560be93229a5	stdlib@go1.20.12	1.24.8	1
huangchengwu6904/hi-app :cac-1691047806	1b932f8221a9	stdlib@go1.20.4	1.24.8	1
huseyinbabal/demory :0.0.0-rc.20	ae8eb4053c60	stdlib@go1.17.2	1.24.8	1
huzafach/aws-cli-k8 :1.0.0	6e271d43ea48	stdlib@go1.22.4	1.24.8	1
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	stdlib@go1.15.7	1.24.8	1
hyperledger/fabric-ca :1.5.0	f270dfeee91d	stdlib@go1.15.7	1.24.8	1
hyperledger/fabric-orderer :2.2.1	37294e05209b	stdlib@go1.14.4	1.24.8	1
hyperledger/fabric-peer :2.2.1	bf4995c86af6	stdlib@go1.14.4	1.24.8	1
hyperledgerk8s/bc-explorer :v20230504	1f1a06b61f18	stdlib@go1.20.2	1.24.8	1
hyperledgerk8s/bc-saas :v0.0.1-20230524	d8bc31176257	stdlib@go1.20.2	1.24.8	1
hyperledgerk8s/fabric-operator :7776e71	29a8af8be270	stdlib@go1.18.4	1.24.8	1
hyperledgerk8s/minio-mc :RELEASE.2023-01-28T20-29-38Z	729b3d128487	stdlib@go1.19.4	1.24.8	1
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	stdlib@go1.19.4	1.24.8	1
hyperledgerk8s/tektoncd-operator :v0.64.0	d0a3a35a138d	stdlib@go1.18.7	1.24.8	1
hyperledgerk8s/tekton-operator-webhook :v0.64.0	2237cb80f52b	stdlib@go1.18.7	1.24.8	1
iamdorsah/bastillion :v0.1	db83a0254d81	stdlib@go1.17.13	1.24.8	1
ianw/quickchart :v1.7.1	dc49dd460c37	stdlib@go1.13.1	1.24.8	1
ibarreche/cloud-reporting-ci :latest	1f45af91da6a	stdlib@go1.16.15	1.24.8	1