CVE-2025-61728
MediumAdvisory
Published 28 Jan 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.007
- 53rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 3,835
- of 17,926 indexed, latest versions
- Container images
- 4,259
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Excessive CPU consumption when building archive index in archive/zip
Carried by container images the latest versions of 3,835 of 17,926 indexed charts deploy, on 4,259 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang-1.19deb | 1.19.8-2 | no fix listed | 1 |
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+174 more | 1.24.12 | 4,259 |
- OSV records
- DEBIAN-CVE-2025-61728GO-2026-4342
- Also known as
- BIT-golang-2025-61728
Charts affected
3,835 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| chart-bookhelm-deploy-book | 0.1.0 | 1 of 3See more | 9,390 |
| jasperreportshelm-dojo | 8.0.0-v1.3 | 1 of 2See more | 6,581 |
| helmfile-gitops-agenthelmfile-gitops-agentVerified publisher | 1.1.97 | 1 of 3See more | 2,149 |
| affinehelmforgeVerified publisher | 1.0.1 | 1 of 3See more | 3,990 |
| alfiohelmforgeVerified publisher | 1.2.12 | 1 of 3See more | 1,803 |
| appwritehelmforgeVerified publisher | 2.0.0 | 1 of 5See more | 5,101 |
| archiveboxhelmforgeVerified publisher | 1.1.12 | 1 of 1See more | 8,167 |
| automatischhelmforgeVerified publisher | 1.3.8 | 2 of 4See more | 5,428 |
| booklorehelmforgeVerified publisher | 2.0.1 | 1 of 3See more | 2,188 |
| castopodhelmforgeVerified publisher | 1.2.8 | 1 of 3See more | 9,862 |
| chiefonboardinghelmforgeVerified publisher | 1.1.15 | 1 of 3See more | 7,802 |
| ckanhelmforgeVerified publisher | 1.3.9 | 2 of 6See more | 9,715 |
| countlyhelmforgeVerified publisher | 1.2.7 | 2 of 3See more | 77,063 |
| dawarichhelmforgeVerified publisher | 1.0.2 | 2 of 4See more | 10,831 |
| discount-bandithelmforgeVerified publisher | 2.0.8 | 2 of 3See more | 31,713 |
| druidhelmforgeVerified publisher | 1.3.6 | 2 of 4See more | 8,556 |
| drupalhelmforgeVerified publisher | 1.2.14 | 1 of 2See more | 3,766 |
| entehelmforgeVerified publisher | 1.0.2 | 1 of 4See more | 4,182 |
| ghosthelmforgeVerified publisher | 1.2.8 | 2 of 3See more | 2,559 |
| gophishhelmforgeVerified publisher | 0.1.5 | 1 of 1See more | 2,814 |
| hermes-agenthelmforgeVerified publisher | 1.0.1 | 1 of 1See more | 5,711 |
| hoppscotchhelmforgeVerified publisher | 1.1.12 | 1 of 2See more | 1,673 |
| immichhelmforgeVerified publisher | 1.2.9 | 1 of 5See more | 11,491 |
| jenkinshelmforgeVerified publisher | 1.0.9 | 1 of 1See more | 2,643 |
| komgahelmforgeVerified publisher | 1.4.16 | 1 of 1See more | 35,230 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 2 of 3See more | 2,364 |
| medikeephelmforgeVerified publisher | 2.0.1 | 2 of 3See more | 5,786 |
| metabasehelmforgeVerified publisher | 1.2.30 | 1 of 3See more | 1,356 |
| middlewarehelmforgeVerified publisher | 1.2.7 | 2 of 4See more | 9,337 |
| minecrafthelmforgeVerified publisher | 1.5.4 | 1 of 1See more | 4,590 |
| mongodbhelmforgeVerified publisher | 1.8.2 | 1 of 1See more | 967 |
| moodlehelmforgeVerified publisher | 1.1.1 | 1 of 2See more | 6,212 |
| mysqlhelmforgeVerified publisher | 2.0.4 | 1 of 1See more | 393 |
| netboxhelmforgeVerified publisher | 2.0.2 | 1 of 4See more | 3,879 |
| nextcloudhelmforgeVerified publisher | 1.1.1 | 1 of 3See more | 6,119 |
| opencuthelmforgeVerified publisher | 1.1.10 | 1 of 5See more | 3,059 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 2,763 |
| pimcorehelmforgeVerified publisher | 2.0.2 | 1 of 6See more | 3,119 |
| reactive-resumehelmforgeVerified publisher | 1.0.0 | 1 of 4See more | 2,706 |
| ryothelmforgeVerified publisher | 1.0.0 | 2 of 2See more | 5,934 |
| strapihelmforgeVerified publisher | 2.3.14 | 1 of 3See more | 1,795 |
| supersethelmforgeVerified publisher | 1.3.7 | 1 of 5See more | 5,275 |
| twentyhelmforgeVerified publisher | 1.0.2 | 1 of 5See more | 2,061 |
| wallabaghelmforgeVerified publisher | 1.3.7 | 2 of 3See more | 2,464 |
| zookeeperhelmforgeVerified publisher | 1.0.2 | 1 of 1See more | 3,136 |
| openbashelm-openbasVerified publisher | 1.8.14 | 3 of 7See more | 26,508 |
| pageshelm-repo | 1.0.0 | 1 of 3See more | 20,573 |
| svacerhelm-svacer | 0.6.0 | 1 of 1See more | 6,488 |
| postgres-backup-localheywood8-helm-chartsVerified publisher | 0.1.13 | 1 of 1See more | 2,439 |
| kubefaashfoxy-helm-charts | 0.1.6 | 3 of 4See more | 6,177 |
Container images carrying it
4,259 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| registry.k8s.io/ | f9d65db8bda2 | stdlib | 1.24.12 | 1 |
| registry.k8s.io/ | ce5b5ccd5eb0 | stdlib | 1.24.12 | 1 |
| registry.k8s.io/ | 3ce0fdba4d8e | stdlib | 1.24.12 | 1 |
| registry.k8s.io/ | c7166a73a303 | stdlib | 1.24.12 | 1 |
| registry.k8s.io/ | 472fa35a89da | stdlib | 1.24.12 | 1 |
| registry.k8s.io/ | 95587f8777d7 | stdlib | 1.24.12 | 1 |
| registry.k8s.io/ | 98bab4eaf23c | stdlib | 1.24.12 | 1 |
| registry.k8s.io/ | ce6ca3c0e30b | stdlib | 1.24.12 | 1 |
| registry.k8s.io/ | d35884236461 | stdlib | 1.24.12 | 1 |