StackRadar

CVE-2025-64702

Medium

Advisory

Published 11 Dec 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
79
of 17,781 indexed, latest versions
Container images
71
deployed by those charts
Fix available
1 of 1
affected package

quic-go HTTP/3 QPACK Header Expansion DoS

Carried by container images the latest versions of 79 of 17,781 indexed charts deploy, on 71 images.

Affected packageAffected versionsFixed inImages
github.com/quic-go/quic-gogolangv0.32.0, v0.33.0, v0.37.5, v0.38.1+23 more0.57.071
OSV records
GHSA-g754-hx8w-x2g6
Also known as
GO-2025-4233

Charts affected

79 by stars
ChartLatestAffected imagesRadar Score
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
github.com/quic-go/quic-go@v0.50.0
0.57.0

Open the chart page →

1,247
adguard-homehelm-chart-roeiVerified publisher0.107.591 of 2See more

adguard-home helm-chart-roei 0.107.59

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.595d5e3aef39a8
github.com/quic-go/quic-go@v0.49.0
0.57.0

Open the chart page →

761
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/quic-go/quic-go@v0.40.0
0.57.0

Open the chart page →

3,451
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
github.com/quic-go/quic-go@v0.54.0
0.57.0

Open the chart page →

29,817
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
github.com/quic-go/quic-go@v0.48.2
0.57.0

Open the chart page →

6,012
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
github.com/quic-go/quic-go@v0.40.0
0.57.0

Open the chart page →

3,614
adguard-homejacobcolvinVerified publisher0.4.01 of 2See more

adguard-home jacobcolvin 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.3843ec119419a9
github.com/quic-go/quic-go@v0.38.1
0.57.0

Open the chart page →

1,605
corednsjouveVerified publisher1.45.01 of 1See more

coredns jouve 1.45.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
github.com/quic-go/quic-go@v0.55.0
0.57.0

Open the chart page →

887
kpingkpingOfficialVerified publisher0.3.51 of 1See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
kayrosuno/kping:latestf3bd44b29b0d
github.com/quic-go/quic-go@v0.56.0
0.57.0

Open the chart page →

2,190
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
github.com/quic-go/quic-go@v0.40.1
0.57.0

Open the chart page →

1,308
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
github.com/quic-go/quic-go@v0.33.0
0.57.0

Open the chart page →

4,096
adguard-homelib42Verified publisher2.0.01 of 1See more

adguard-home lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.65d765078d2140
github.com/quic-go/quic-go@v0.53.0
0.57.0

Open the chart page →

1,060
otlp-gatewayloafoe0.0.21 of 2See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/quic-go/quic-go@v0.44.0
0.57.0

Open the chart page →

2,155
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/quic-go/quic-go@v0.38.1
0.57.0

Open the chart page →

2,101
eks-pod-identity-webhookmondu-aiVerified publisher0.3.11 of 1See more

eks-pod-identity-webhook mondu-ai 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/mondu-ai/eks-pod-identity-webhook:latestc2ac3bad857d
github.com/quic-go/quic-go@v0.54.0
0.57.0

Open the chart page →

474
gitlab-proxyopslevelVerified publisher0.0.81 of 1See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
library/caddy:2.660fb54d36b4b
github.com/quic-go/quic-go@v0.32.0
0.57.0

Open the chart page →

1,872
cloudflare-tunnelportefaix-hub0.4.01 of 1See more

cloudflare-tunnel portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.8.314d9c6b01b29
github.com/quic-go/quic-go@v0.45.0
0.57.0

Open the chart page →

1,306
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/quic-go/quic-go@v0.46.0
0.57.0

Open the chart page →

7,084
chainrss30.1.281 of 8See more

chain rss3 0.1.28

1 of the 8 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/quic-go/quic-go@v0.39.3
0.57.0

Open the chart page →

8,528
vsl-chainrss30.1.01 of 7See more

vsl-chain rss3 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
github.com/quic-go/quic-go@v0.39.3
0.57.0

Open the chart page →

6,044
vsl-rpcrss30.3.41 of 4See more

vsl-rpc rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/quic-go/quic-go@v0.39.3
0.57.0

Open the chart page →

4,610
vsl-sequencerrss30.3.41 of 4See more

vsl-sequencer rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/quic-go/quic-go@v0.39.3
0.57.0

Open the chart page →

4,610
ipfsstakewise2.2.01 of 2See more

ipfs stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/quic-go/quic-go@v0.49.0
0.57.0

Open the chart page →

1,239
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
github.com/quic-go/quic-go@v0.46.0
0.57.0

Open the chart page →

6,779
v3-backendstakewise3.6.01 of 5See more

v3-backend stakewise 3.6.0

1 of the 5 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/quic-go/quic-go@v0.49.0
0.57.0

Open the chart page →

1,239
syncthingsvtech-public-helm-charts1.0.01 of 2See more

syncthing svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
svtechnmaa/svtech_syncthing:v1.0.41a75d88031fe
github.com/quic-go/quic-go@v0.40.1
0.57.0

Open the chart page →

2,336
tfy-cloudflaredtruefoundryVerified publisher0.5.01 of 2See more

tfy-cloudflared truefoundry 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
github.com/quic-go/quic-go@v0.32.0
0.57.0

Open the chart page →

2,015
proxyv2flyVerified publisher0.0.61 of 1See more

proxy v2fly 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
v2fly/v2fly-core:latestd06727b221fe
github.com/quic-go/quic-go@v0.55.0
0.57.0

Open the chart page →

1,426
corednsvks-helm-chartsVerified publisher1.45.01 of 1See more

coredns vks-helm-charts 1.45.0

1 of the 1 container images this version deploys carry CVE-2025-64702.

Container imageDigestPackageFixed in
coredns/coredns:1.13.19b9128672209
github.com/quic-go/quic-go@v0.55.0
0.57.0

Open the chart page →

887

Container images carrying it

71 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
v2fly/v2fly-core:latestd06727b221fe
github.com/quic-go/quic-go@v0.55.0
0.57.0
1
ghcr.io/avistotelecom/kubebrowser:0.10.0a354b8dc7e6a
github.com/quic-go/quic-go@v0.54.0
0.57.0
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
github.com/quic-go/quic-go@v0.46.0
0.57.0
1
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
github.com/quic-go/quic-go@v0.49.1
0.57.0
1
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
github.com/quic-go/quic-go@v0.54.0
0.57.0
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
github.com/quic-go/quic-go@v0.45.2
0.57.0
1
ghcr.io/chronicleprotocol/spectre:0.68.34e872bc016e8
github.com/quic-go/quic-go@v0.49.1
0.57.0
1
ghcr.io/chronicleprotocol/spire:0.68.379df4fb20322
github.com/quic-go/quic-go@v0.49.1
0.57.0
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
github.com/quic-go/quic-go@v0.55.0
0.57.0
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
github.com/quic-go/quic-go@v0.54.0
0.57.0
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
github.com/quic-go/quic-go@v0.48.2
0.57.0
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/quic-go/quic-go@v0.46.0
0.57.0
1
ghcr.io/kubenetworks/kubevpn:v2.11.7cce8ff866f60
github.com/quic-go/quic-go@v0.50.1
0.57.0
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/quic-go/quic-go@v0.44.0
0.57.0
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/quic-go/quic-go@v0.38.1
0.57.0
1
ghcr.io/mondu-ai/eks-pod-identity-webhook:latestc2ac3bad857d
github.com/quic-go/quic-go@v0.54.0
0.57.0
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/quic-go/quic-go@v0.39.0
0.57.0
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
github.com/quic-go/quic-go@v0.32.0
0.57.0
1
quay.io/backube/volsync:0.16.00d03a6aad575
github.com/quic-go/quic-go@v0.52.0
0.57.0
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/quic-go/quic-go@v0.37.5
0.57.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
github.com/quic-go/quic-go@v0.55.0
0.57.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.