CVE-2025-61725

High

Advisory

Published 29 Oct 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,455; of 17,813 indexed, latest versions
Container images: 3,904; deployed by those charts
Fix available: 1 of 2; affected packages

Excessive CPU consumption in ParseAddress in net/mail

Carried by container images the latest versions of 3,455 of 17,813 indexed charts deploy, on 3,904 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+164 more	1.24.8	3,904

OSV records: DEBIAN-CVE-2025-61725 GO-2025-4006
Also known as: BIT-golang-2025-61725

Charts affected

3,455 by stars

Chart

Latest

Affected images

Radar Score

quarksquarks

7.0.1+0.g5396b11

4 of 5 See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	stdlib@go1.14.7	1.24.8
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	stdlib@go1.13.15	1.24.8
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	stdlib@go1.14.7	1.24.8
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	stdlib@go1.14.7	1.24.8

Open the chart page →

18,206

quarks-statefulsetquarks

0.0.1304-g4b4f2ac5

1 of 1 See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	stdlib@go1.14.7	1.24.8

Open the chart page →

4,012

qubivaqubiva

0.3.2

1 of 3 See more

4,545

ingress-controllerqumine

0.8.500

1 of 1 See more

ingress-controller qumine 0.8.500

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
qumine/ingress-controller :v0.8.5	f2c8a2148381	stdlib@go1.19	1.24.8

Open the chart page →

1,533

cupsr2dlan-helm-charts

0.1.0

1 of 1 See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
anujdatar/cups :25.07.01	685df04a643b	stdlib@go1.19.8	1.24.8

Open the chart page →

7,966

rabbitpingrabbitping

1.3.0

1 of 1 See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
udhos/rabbitping :1.3.0	474c467bbf42	stdlib@go1.24.3	1.24.8

Open the chart page →

1,149

rada-platformrada-platform

0.1.0

2 of 7 See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	stdlib@go1.22.7	1.24.8
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	stdlib@go1.20.6	1.24.8

Open the chart page →

21,419

cloudnative-pgradar-base

0.23.2

1 of 1 See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	stdlib@go1.24.0	1.24.8

Open the chart page →

856

hydraradar-base

0.48.0

1 of 1 See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.2.0	2c93beb5e5f2	stdlib@go1.21.5	1.24.8

Open the chart page →

1,541

kratosradar-base

0.43.1

1 of 1 See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.1.0	8f15006a080d	stdlib@go1.21.5	1.24.8

Open the chart page →

1,793

kubecostradar-base

1.0.0

3 of 7 See more

kubecost radar-base 1.0.0

3 of the 7 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
grafana/grafana :11.4.0	d8ea37798ccc	stdlib@go1.23.1	1.24.8
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	stdlib@go1.23.4	1.24.8
quay.io/prometheus/prometheus :v3.2.0	5888c188cf09	stdlib@go1.23.6	1.24.8

Open the chart page →

9,634

nifikopradar-base

1.14.1

1 of 1 See more

nifikop radar-base 1.14.1

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	stdlib@go1.24.4	1.24.8

Open the chart page →

512

radar-grafanaradar-base

0.1.4

1 of 2 See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
grafana/grafana :11.6.0	62d2b9d20a19	stdlib@go1.23.7	1.24.8

Open the chart page →

1,839

radar-hydraradar-base

0.3.4

1 of 2 See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
oryd/hydra :v2.3.0	b94007e19a1f	stdlib@go1.23.4	1.24.8

Open the chart page →

2,198

radar-kratosradar-base

0.1.5

1 of 1 See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	stdlib@go1.23.2	1.24.8

Open the chart page →

1,579

radar-nifiradar-base

3.1.0

1 of 1 See more

radar-nifi radar-base 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/konpyutaika/docker-images/nifikop :v1.14.1-release	6bb00c592a82	stdlib@go1.24.4	1.24.8

Open the chart page →

512

radar-redisradar-base

1.3.0

1 of 1 See more

radar-redis radar-base 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	stdlib@go1.23.12	1.24.8

Open the chart page →

412

redis-operatorradar-base

0.22.2

1 of 1 See more

redis-operator radar-base 0.22.2

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
quay.io/opstree/redis-operator :v0.22.2	464ac61a6eb4	stdlib@go1.23.12	1.24.8

Open the chart page →

412

pagesranjinigogga

1.0.0

1 of 3 See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.24.8

Open the chart page →

20,285

raven_profilerraven-profiler

0.1.62

1 of 1 See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	stdlib@go1.21.5	1.24.8

Open the chart page →

1,301

saleorrc-helm-charts

0.1.1

1 of 5 See more

saleor rc-helm-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.22.0	ca6b73330616	stdlib@go1.15.8	1.24.8

Open the chart page →

3,746

pagesrebecca-pages

1.0.0

1 of 3 See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.24.8

Open the chart page →

20,285

recipe-apprecipe-app

0.1.0

1 of 2 See more

recipe-app recipe-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
anamskenneth/recipe_frontend :2025-06-07	9ecf04f42cc3	stdlib@go1.20.12	1.24.8

Open the chart page →

3,574

helm-redchefredchef

0.1.0

1 of 3 See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
sharanalwar/redchef-frontend :latest	5e82950b16b7	stdlib@go1.23.7	1.24.8

Open the chart page →

4,985

ansible-automation-platformredhat-cop

0.0.9

1 of 1 See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	stdlib@go1.15.14	1.24.8

Open the chart page →

15,304

argocd-operatorredhat-cop

1.2.2

1 of 1 See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	stdlib@go1.15.14	1.24.8

Open the chart page →

15,304

ploigosredhat-cop

0.0.9

1 of 2 See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.6	6722d5041b47	stdlib@go1.15.14	1.24.8

Open the chart page →

11,451

sonatype-nexusredhat-cop

1.1.13

1 of 2 See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	stdlib@go1.21.3	1.24.8

Open the chart page →

16,393

stackrox-chartredhat-cop

0.0.10

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	stdlib@go1.16	1.24.8

Open the chart page →

29,590

redisredis-arm

17.8.0

1 of 1 See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	stdlib@go1.19.4	1.24.8

Open the chart page →

1,908

registry-credsregistry-creds

0.2.3

1 of 1 See more

registry-creds registry-creds 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/alexellis/registry-creds :0.3.2-rc1	f5c72501e559	stdlib@go1.19.5	1.24.8

Open the chart page →

1,043

regorego

0.1.3

1 of 1 See more

2,974

relfinder-reformedrelfinderreformed

2.0.0

1 of 2 See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	stdlib@go1.21.9	1.24.8

Open the chart page →

6,374

reporting-chartreporting-application

0.1.0

1 of 1 See more

reporting-chart reporting-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ibarreche/cloud-reporting-ci :latest	1f45af91da6a	stdlib@go1.16.15	1.24.8

Open the chart page →

1,585

reportportalreportportal

5.7.2

2 of 8 See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
reportportal/migrations :5.7.0	da5d8e1395fe	stdlib@go1.13.6	1.24.8
reportportal/service-index :5.0.11	2b27a2d7a87d	stdlib@go1.17.1	1.24.8

Open the chart page →

25,722

resource-manager-operatorresource-manager-operator

0.1.0

1 of 1 See more

resource-manager-operator resource-manager-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/tikalk/resource-manager :latest	7f21d50e69cb	stdlib@go1.19	1.24.8

Open the chart page →

1,624

redminerestic-pvc-backup

0.2.6

1 of 1 See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
library/redmine :6.1.3-trixie	f474a901faec	stdlib@go1.24.6	1.24.8

Open the chart page →

4,407

retromretsamedoc

2026.2.5

1 of 1 See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/jmberesford/retrom-service :retrom-v0.7.14	4d763d58f11d	stdlib@go1.20.12	1.24.8

Open the chart page →

7,247

spoolmanretsamedoc

26.9.0

1 of 1 See more

spoolman retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/donkie/spoolman :0.26.1	cf9b41e17b93	stdlib@go1.19.8	1.24.8

Open the chart page →

1,853

review-componentreview-component

1.0.0

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	stdlib@go1.13.10	1.24.8

Open the chart page →

7,503

claude-relayrevolution1

0.1.37

1 of 4 See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/wei-shaw/claude-relay-service :v1.1.292	398c34934453	stdlib@go1.20.12	1.24.8

Open the chart page →

4,822

istio-fortiorgnu

1.0.3

1 of 1 See more

istio-fortio rgnu 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
fortio/fortio :latest_release	fc8221136fe2	stdlib@go1.23.9	1.24.8

Open the chart page →

547

whoamirgnu

1.0.0

1 of 1 See more

whoami rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.6.0	d38496bf0900	stdlib@go1.15.2	1.24.8

Open the chart page →

1,230

security-sample-chartrimusz

0.2.1

1 of 3 See more

security-sample-chart rimusz 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
rimusz/security-sample-app :0.2.0	b9a178ca76ef	stdlib@go1.14.4	1.24.8

Open the chart page →

1,348

backup-maker-controllerriotkit-org

0.1.2

1 of 1 See more

backup-maker-controller riotkit-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/riotkit-org/backup-maker-controller :v0.1.2	62370545ba3d	stdlib@go1.19.4	1.24.8

Open the chart page →

1,576

haproxy-loadbalanced-redisrivals-space

0.1.2

1 of 3 See more

haproxy-loadbalanced-redis rivals-space 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
haproxytech/haproxy-alpine :2.6.6	14e4afa90dfd	stdlib@go1.19.3	1.24.8

Open the chart page →

1,425

rancher-vsphere-cpirke2-charts

1.16.200

1 of 1 See more

rancher-vsphere-cpi rke2-charts 1.16.200

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
rancher/mirrored-cloud-provider-vsphere :v1.31.1	febfd0517838	stdlib@go1.22.8	1.24.8

Open the chart page →

919

rke2-calicorke2-charts

3.18.1-101

1 of 1 See more

rke2-calico rke2-charts 3.18.1-101

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.15.1	c6591da87aa8	stdlib@go1.15.2	1.24.8

Open the chart page →

2,251

kubernetes-diff-loggerrlex

0.1.2

1 of 1 See more

kubernetes-diff-logger rlex 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
grafana/kubernetes-diff-logger :0.0.5	98f6d1cd1e25	stdlib@go1.16.5	1.24.8

Open the chart page →

2,455

runtimeclass-controllerrlex

0.1.0

1 of 1 See more

runtimeclass-controller rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61725.

Container image	Digest	Package	Fixed in
ghcr.io/jlclx/runtimeclass-controller :latest	b3a87f92a963	stdlib@go1.17.13	1.24.8

Open the chart page →

2,190

Container images carrying it

3,904 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/docker :24.0.2-dind	1d148deae16a	stdlib@go1.20.4	1.24.8	1
library/docker :28.5.2-dind	2a232a42256f	stdlib@go1.24.7	1.24.8	1
library/docker :20.10.21-dind	3153fa63f546	stdlib@go1.18.7	1.24.8	1
library/docker :27-cli	851f91d24121	stdlib@go1.23.5	1.24.8	1
library/docker :27-dind	aa3df78ecf32	stdlib@go1.22.11	1.24.8	1
library/docker :23.0.6-dind	afa5d5134900	stdlib@go1.19.9	1.24.8	1
library/docker :23.0.1-dind	d9a0fd8bdd15	stdlib@go1.19.5	1.24.8	1
library/docker :26.1-dind	dd43b430341a	stdlib@go1.21.11	1.24.8	1
library/ghost :6.37.0	1ef2e532ca4d	stdlib@go1.23.12	1.24.8	1
library/ghost :6.25.1	2654b1e90413	stdlib@go1.24.6	1.24.8	1
library/ghost :6.41.1	29773d6be407	stdlib@go1.24.6	1.24.8	1
library/ghost :6.39.0-alpine	77196da4b0df	stdlib@go1.24.6	1.24.8	1
library/ghost :5.79.0	83f7bf209844	stdlib@go1.18.2	1.24.8	1
library/ghost :6.22.0-alpine3.23	ac533a6988ee	stdlib@go1.24.6	1.24.8	1
library/ghost :6.63.0	e05bc1169fb2	stdlib@go1.24.6	1.24.8	1
library/influxdb :2.8	571eb4514977	stdlib@go1.22.4	1.24.8	1
library/influxdb :2.7.4-alpine	a10d46445d68	stdlib@go1.21.3	1.24.8	1
library/influxdb :2.0.8	ba10ac9ba17a	stdlib@go1.16.5	1.24.8	1
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	stdlib@go1.18.3	1.24.8	1
library/kapacitor :1.6.3	7232f6388a4d	stdlib@go1.17.2	1.24.8	1
library/logstash :7.17.8	17a4f64e9cf5	stdlib@go1.19.3	1.24.8	1
library/logstash :9.1.2	33eae14f0867	stdlib@go1.23.12	1.24.8	1
library/mariadb :10.7.3	07e06f2e7ae9	stdlib@go1.16.7	1.24.8	1
library/mariadb :10.11.2	1c33370a599c	stdlib@go1.16.7	1.24.8	1
library/mariadb :10.4	22edfe1c7834	stdlib@go1.18.2	1.24.8	1
library/mariadb :11	2439dcd7d140	stdlib@go1.24.6	1.24.8	1
library/mariadb :10.8.2-focal	490f01279be1	stdlib@go1.16.7	1.24.8	1
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.24.8	1
library/mariadb :12.3.2	628f228f0fd5	stdlib@go1.24.6	1.24.8	1
library/mariadb :11.8.4	6b848cb24fbb	stdlib@go1.24.6	1.24.8	1
library/mariadb :12.3.3	805c8e104bd5	stdlib@go1.24.6	1.24.8	1
library/mariadb :10.6.21	8a16204dc96c	stdlib@go1.18.2	1.24.8	1
library/mariadb :10.7	9a48ac9f196f	stdlib@go1.16.7	1.24.8	1
library/mariadb :12.3.2	a02fe89cb597	stdlib@go1.24.6	1.24.8	1
library/mariadb :12.3.3	ab1c3dd38194	stdlib@go1.24.6	1.24.8	1
library/mariadb :12.2.2	b1cb255a9939	stdlib@go1.24.6	1.24.8	1
library/mariadb :10.10.2	bfc25a68e113	stdlib@go1.16.7	1.24.8	1
library/mariadb :10.6.15	e22328f4d714	stdlib@go1.16.7	1.24.8	1
library/mariadb :10.9.4	fbb8456ebdb1	stdlib@go1.16.7	1.24.8	1
library/mariadb :11.7.2	fcc7fcd7114a	stdlib@go1.18.2	1.24.8	1
library/mongo :7.0.14	0032d2ca20db	stdlib@go1.21.12	1.24.8	1
library/mongo :8.0	02a0cc7939f5	stdlib@go1.24.6	1.24.8	1
library/mongo :4.4.13	05678ae4e5e1	stdlib@go1.16.7	1.24.8	1
library/mongo :5.0.32-focal	3b6c281e1c08	stdlib@go1.24.0	1.24.8	1
library/mongo :4.4-bionic	3d0e6df9fd5b	stdlib@go1.16.3	1.24.8	1
library/mongo :7.0-jammy :7-jammy	406a4fdca9fc	stdlib@go1.24.6	1.24.8	1
library/mongo :5.0.14-focal	50cae5081ab4	stdlib@go1.17.10	1.24.8	1
library/mongo :6.0.12	646902910d6a	stdlib@go1.18.2	1.24.8	1
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.24.8	1
library/mongo :noble	6ede2806c78e	stdlib@go1.24.6	1.24.8	1