StackRadar

CVE-2025-64702

Medium

Advisory

Published 11 Dec 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
79
of 17,781 indexed, latest versions
Container images
71
deployed by those charts
Fix available
1 of 1
affected package

quic-go HTTP/3 QPACK Header Expansion DoS

Carried by container images the latest versions of 79 of 17,781 indexed charts deploy, on 71 images.

Affected packageAffected versionsFixed inImages
github.com/quic-go/quic-gogolangv0.32.0, v0.33.0, v0.37.5, v0.38.1+23 more0.57.071
OSV records
GHSA-g754-hx8w-x2g6
Also known as
GO-2025-4233

Charts affected

79 by stars
ChartLatestAffected imagesRadar Score
node-local-dnsdeliveryheroVerified publisher2.9.21 of 1See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
github.com/quic-go/quic-go@v0.55.0
0.57.0

Open the chart page →

1,685
volsyncbackube-helm-chartsVerified publisher0.16.01 of 1See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
quay.io/backube/volsync:0.16.00d03a6aad575
github.com/quic-go/quic-go@v0.52.0
0.57.0

Open the chart page →

1,346
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
netbirdio/relay:0.45.1872e3add0e1e
github.com/quic-go/quic-go@v0.48.2
0.57.0

Open the chart page →

8,390
adguard-homerm3lVerified publisher0.24.11 of 2See more

adguard-home rm3l 0.24.1

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.513a143e6c071c
github.com/quic-go/quic-go@v0.44.0
0.57.0

Open the chart page →

1,149
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
library/traefik:v2.11.00a5157f742d2
github.com/quic-go/quic-go@v0.40.1
0.57.0

Open the chart page →

17,245
gotifygotifyVerified publisher0.8.11 of 1See more

gotify gotify 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
gotify/server:2.9.1a3af47067ce6
github.com/quic-go/quic-go@v0.55.0
0.57.0

Open the chart page →

568
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/quic-go/quic-go@v0.40.0
0.57.0

Open the chart page →

17,263
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
github.com/quic-go/quic-go@v0.39.1
0.57.0

Open the chart page →

14,094
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/quic-go/quic-go@v0.40.0
0.57.0

Open the chart page →

1,884
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
github.com/quic-go/quic-go@v0.40.0
0.57.0

Open the chart page →

17,404
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/quic-go/quic-go@v0.40.0
0.57.0

Open the chart page →

3,451
bscdysnixVerified publisher0.6.591 of 4See more

bsc dysnix 0.6.59

1 of the 4 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
github.com/quic-go/quic-go@v0.49.1
0.57.0

Open the chart page →

2,012
kubevpnkubevpn-charts2.11.71 of 1See more

kubevpn kubevpn-charts 2.11.7

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/kubenetworks/kubevpn:v2.11.7cce8ff866f60
github.com/quic-go/quic-go@v0.50.1
0.57.0

Open the chart page →

1,596
kubebrowseravistoOfficialVerified publisher1.4.01 of 1See more

kubebrowser avisto 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/kubebrowser:0.10.0a354b8dc7e6a
github.com/quic-go/quic-go@v0.54.0
0.57.0

Open the chart page →

677
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
github.com/quic-go/quic-go@v0.48.2
0.57.0

Open the chart page →

13,357
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
github.com/quic-go/quic-go@v0.49.1
0.57.0

Open the chart page →

7,190
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
github.com/quic-go/quic-go@v0.49.1
0.57.0

Open the chart page →

5,059
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
github.com/quic-go/quic-go@v0.49.1
0.57.0

Open the chart page →

7,190
celestia-nodecelestia-node0.1.71 of 1See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
github.com/quic-go/quic-go@v0.45.2
0.57.0

Open the chart page →

1,799
spectrechronicleVerified publisher0.3.81 of 1See more

spectre chronicle 0.3.8

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/spectre:0.68.34e872bc016e8
github.com/quic-go/quic-go@v0.49.1
0.57.0

Open the chart page →

1,515
maintenancecodewithemadVerified publisher0.1.61 of 1See more

maintenance codewithemad 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
library/caddy:2.9-alpineb4e3952384eb
github.com/quic-go/quic-go@v0.48.2
0.57.0

Open the chart page →

1,469
adguard-homegabe565Verified publisher0.3.251 of 2See more

adguard-home gabe565 0.3.25

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.56c64a0b37f7b9
github.com/quic-go/quic-go@v0.48.2
0.57.0

Open the chart page →

964
gateboardgateboard1.12.51 of 1See more

gateboard gateboard 1.12.5

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
udhos/gateboard:1.12.53acc0e7599bf
github.com/quic-go/quic-go@v0.55.0
0.57.0

Open the chart page →

1,463
headscale-uiheadscale-uiVerified publisher0.2.91 of 1See more

headscale-ui headscale-ui 0.2.9

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
github.com/quic-go/quic-go@v0.54.0
0.57.0

Open the chart page →

1,476
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
github.com/quic-go/quic-go@v0.40.1-0.20240101045026-22b7f7744eb6
0.57.0

Open the chart page →

4,196
kubebrowsekubebrowse1.7.01 of 5See more

kubebrowse kubebrowse 1.7.0

1 of the 5 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
github.com/quic-go/quic-go@v0.54.0
0.57.0

Open the chart page →

4,141
mcpmcp-chartsVerified publisher0.0.231 of 7See more

mcp mcp-charts 0.0.23

1 of the 7 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
github.com/quic-go/quic-go@v0.55.0
0.57.0

Open the chart page →

6,929
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
github.com/quic-go/quic-go@v0.55.0
0.57.0

Open the chart page →

11,103
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ipfs/kubo:v0.24.0e3de33bd746b
github.com/quic-go/quic-go@v0.39.3
0.57.0

Open the chart page →

4,661
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/quic-go/quic-go@v0.39.0
0.57.0

Open the chart page →

3,165
v2ray-proxyv2ray-proxy0.2.41 of 1See more

v2ray-proxy v2ray-proxy 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
pinclr/v2ray-proxy:latestf37f250b7091
github.com/quic-go/quic-go@v0.33.0
0.57.0

Open the chart page →

1,954
celestia-localastria9.0.01 of 2See more

celestia-local astria 9.0.0

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/quic-go/quic-go@v0.54.0
0.57.0

Open the chart page →

3,281
celestia-nodeastria0.7.11 of 1See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/quic-go/quic-go@v0.54.0
0.57.0

Open the chart page →

1,502
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
github.com/quic-go/quic-go@v0.49.1
0.57.0

Open the chart page →

7,190
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
github.com/quic-go/quic-go@v0.49.1
0.57.0

Open the chart page →

5,059
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/quic-go/quic-go@v0.40.0
0.57.0

Open the chart page →

10,145
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:maine263be0a7440
github.com/quic-go/quic-go@v0.50.1
0.57.0

Open the chart page →

7,405
netbird-reverse-proxychristianhuthVerified publisher0.1.01 of 1See more

netbird-reverse-proxy christianhuth 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
netbirdio/reverse-proxy:0.72.43104d5ca3a76
github.com/quic-go/quic-go@v0.55.0
0.57.0

Open the chart page →

912
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
github.com/quic-go/quic-go@v0.46.0
0.57.0

Open the chart page →

4,810
spirechronicleVerified publisher0.3.61 of 1See more

spire chronicle 0.3.6

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/spire:0.68.379df4fb20322
github.com/quic-go/quic-go@v0.49.1
0.57.0

Open the chart page →

1,515
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/quic-go/quic-go@v0.33.0
0.57.0

Open the chart page →

3,672
cloudflareddamounVerified publisher3.3.01 of 1See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.5.05d5f70a59d5e
github.com/quic-go/quic-go@v0.42.0
0.57.0

Open the chart page →

1,306
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
github.com/quic-go/quic-go@v0.48.2
0.57.0

Open the chart page →

1,994
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/quic-go/quic-go@v0.40.1-0.20240101045026-22b7f7744eb6
0.57.0

Open the chart page →

4,217
corednsdoubanVerified publisher1.39.21 of 1See more

coredns douban 1.39.2

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
coredns/coredns:1.12.040384aa1f5ea
github.com/quic-go/quic-go@v0.48.1
0.57.0

Open the chart page →

1,132
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
iotaledger/hornet:2.001206f1ba89c
github.com/quic-go/quic-go@v0.38.1
0.57.0

Open the chart page →

13,391
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/quic-go/quic-go@v0.37.5
0.57.0

Open the chart page →

2,237
armiarmaethereum-helm-chartsVerified publisher0.1.21 of 2See more

armiarma ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ethpandaops/armiarma:master1a9c3264f0a9
github.com/quic-go/quic-go@v0.42.0
0.57.0

Open the chart page →

1,155
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
github.com/quic-go/quic-go@v0.51.0
0.57.0

Open the chart page →

1,703
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
github.com/quic-go/quic-go@v0.42.0
0.57.0

Open the chart page →

3,456

Container images carrying it

71 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
v2fly/v2fly-core:latestd06727b221fe
github.com/quic-go/quic-go@v0.55.0
0.57.0
1
ghcr.io/avistotelecom/kubebrowser:0.10.0a354b8dc7e6a
github.com/quic-go/quic-go@v0.54.0
0.57.0
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
github.com/quic-go/quic-go@v0.46.0
0.57.0
1
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
github.com/quic-go/quic-go@v0.49.1
0.57.0
1
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
github.com/quic-go/quic-go@v0.54.0
0.57.0
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
github.com/quic-go/quic-go@v0.45.2
0.57.0
1
ghcr.io/chronicleprotocol/spectre:0.68.34e872bc016e8
github.com/quic-go/quic-go@v0.49.1
0.57.0
1
ghcr.io/chronicleprotocol/spire:0.68.379df4fb20322
github.com/quic-go/quic-go@v0.49.1
0.57.0
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
github.com/quic-go/quic-go@v0.55.0
0.57.0
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
github.com/quic-go/quic-go@v0.54.0
0.57.0
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
github.com/quic-go/quic-go@v0.48.2
0.57.0
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/quic-go/quic-go@v0.46.0
0.57.0
1
ghcr.io/kubenetworks/kubevpn:v2.11.7cce8ff866f60
github.com/quic-go/quic-go@v0.50.1
0.57.0
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/quic-go/quic-go@v0.44.0
0.57.0
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/quic-go/quic-go@v0.38.1
0.57.0
1
ghcr.io/mondu-ai/eks-pod-identity-webhook:latestc2ac3bad857d
github.com/quic-go/quic-go@v0.54.0
0.57.0
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/quic-go/quic-go@v0.39.0
0.57.0
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
github.com/quic-go/quic-go@v0.32.0
0.57.0
1
quay.io/backube/volsync:0.16.00d03a6aad575
github.com/quic-go/quic-go@v0.52.0
0.57.0
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/quic-go/quic-go@v0.37.5
0.57.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
github.com/quic-go/quic-go@v0.55.0
0.57.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.