CVE-2025-68121

Critical

Advisory

Published 5 Feb 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 10.0; base score, highest
EPSS: 0.008; 54th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,562; of 17,797 indexed, latest versions
Container images: 4,054; deployed by those charts
Fix available: 1 of 2; affected packages

Unexpected session resumption in crypto/tls

Carried by container images the latest versions of 3,562 of 17,797 indexed charts deploy, on 4,054 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+172 more	1.24.13	4,054

OSV records: DEBIAN-CVE-2025-68121 GO-2026-4337
Also known as: BIT-golang-2025-68121

Charts affected

3,562 by stars

Chart

Latest

Affected images

Radar Score

ygdrassil-monitoringygdrassil

0.4.0

7 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

7 of the 10 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.1	5781759b3d27	stdlib@go1.23.5	1.24.13
prom/alertmanager :v0.28.0	d5155cfac40a	stdlib@go1.23.4	1.24.13
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	stdlib@go1.23.4	1.24.13
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	stdlib@go1.22.5	1.24.13
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	stdlib@go1.23.4	1.24.13
quay.io/prometheus/pushgateway :v1.11.0	99392035ae99	stdlib@go1.23.4	1.24.13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	stdlib@go1.23.3	1.24.13

Open the chart page →

9,401

prometheusalertygqygq2

1.0.0

1 of 1 See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
feiyu563/prometheus-alert :v4.9.1	224cfa68cbd9	stdlib@go1.20.6	1.24.13

Open the chart page →

1,610

matrixdb-operatorymatrix

0.13.0

1 of 2 See more

matrixdb-operator ymatrix 0.13.0

1 of the 2 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
matrixdb/kubebuilder_kube-rbac-proxy :v0.12.0	ed3c7e6291e8	stdlib@go1.18.1	1.24.13

Open the chart page →

1,965

rawfile-csiymatrix

0.2.1

4 of 4 See more

rawfile-csi ymatrix 0.2.1

4 of the 4 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
matrixdb/custom-external-provisioner :4622a07d7-20220424	7e9ffe249a51	stdlib@go1.17.8	1.24.13
matrixdb/rawfile-csi :v0.2.1	95b2e38e913d	stdlib@go1.17.9	1.24.13
matrixdb/sig-storage_csi-node-driver-registrar :v2.2.0	ba763bb01ddc	stdlib@go1.16	1.24.13
matrixdb/sig-storage_livenessprobe :v2.3.0	7ab06fe3d8a7	stdlib@go1.16	1.24.13

Open the chart page →

8,000

nginx-vts-exporterymrs

0.1.2

1 of 1 See more

nginx-vts-exporter ymrs 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
sophos/nginx-vts-exporter :latest	f1073556b29b	stdlib@go1.13.6	1.24.13

Open the chart page →

1,337

version-checkerymrs

0.2.3

1 of 1 See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	stdlib@go1.15.2	1.24.13

Open the chart page →

3,024

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	stdlib@go1.20.4	1.24.13
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	stdlib@go1.20.4	1.24.13

Open the chart page →

5,047

zahori-moonzahori

1.0.1

3 of 3 See more

zahori-moon zahori 1.0.1

3 of the 3 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
quay.io/aerokube/moon :2.5.1	a8837b00ba1c	stdlib@go1.20.4	1.24.13
quay.io/aerokube/moon-conf :2.5.1	9ca307b30080	stdlib@go1.20.4	1.24.13
quay.io/aerokube/moon-ui :2.0.5	89990b146824	stdlib@go1.20.5	1.24.13

Open the chart page →

2,908

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	stdlib@go1.20.5	1.24.13

Open the chart page →

2,474

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	stdlib@go1.17.13	1.24.13

Open the chart page →

3,697

zookeeper-exporterzookeeper-exporter

0.1.0

1 of 1 See more

zookeeper-exporter zookeeper-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
dabealu/zookeeper-exporter :latest	86106fec315f	stdlib@go1.14.15	1.24.13

Open the chart page →

1,248

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-68121.

Container image	Digest	Package	Fixed in
library/postgres :18.4-alpine3.24	9a8afca54e78	stdlib@go1.24.6	1.24.13

Open the chart page →

7,936

Container images carrying it

4,054 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.24.13	2
coredns/coredns :1.13.1	9b9128672209	stdlib@go1.25.2	1.24.13	2
crate/crate_adapter :latest	b8d89fa5d19b	stdlib@go1.16.3	1.24.13	2
cs3org/revad :v1.19.0	3b57a34a7dfd	stdlib@go1.17.3	1.24.13	2
cs3org/revad :v1.24.0	e80a4d67b352	stdlib@go1.20.4	1.24.13	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	stdlib@go1.19.13	1.24.13	2
danielfm/aws-limits-exporter :0.6.0	7152b84e57cb	stdlib@go1.17.2	1.24.13	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	stdlib@go1.24.0	1.24.13	2
datawire/aes :1.14.4	8588eafe6862	stdlib@go1.15	1.24.13	2
devopsfaith/krakend :latest	f8bdaa8a1a43	stdlib@go1.24.2	1.24.13	2
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	stdlib@go1.16.2	1.24.13	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	stdlib@go1.16.15	1.24.13	2
dtzar/helm-kubectl :3.14.4	55429449408e	stdlib@go1.21.8	1.24.13	2
eqalpha/keydb :latest	6537505c4235	stdlib@go1.16.7	1.24.13	2
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	stdlib@go1.16.7	1.24.13	2
falcosecurity/falco-driver-loader :0.33.1	1fe583eee4af	stdlib@go1.18.6	1.24.13	2
falcosecurity/falco-no-driver :0.33.1	0d427b8d5fc6	stdlib@go1.18.6	1.24.13	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	stdlib@go1.18.3	1.24.13	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	stdlib@go1.21.8	1.24.13	2
free5gc/ausf :v3.4.3	687ff4daf5da	stdlib@go1.21.8	1.24.13	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	stdlib@go1.21.8	1.24.13	2
free5gc/nrf :v3.4.3	99e46b860efb	stdlib@go1.21.8	1.24.13	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	stdlib@go1.21.8	1.24.13	2
free5gc/pcf :v3.4.3	f712e8ecd927	stdlib@go1.21.8	1.24.13	2
free5gc/smf :v3.4.3	60e38baa4b10	stdlib@go1.21.8	1.24.13	2
free5gc/udm :v3.4.3	2f68df062a50	stdlib@go1.21.8	1.24.13	2
free5gc/udr :v3.4.3	c0783bcdcbdc	stdlib@go1.21.8	1.24.13	2
free5gc/upf :v3.4.3	b6b362a39fdd	stdlib@go1.21.8	1.24.13	2
free5gc/webui :v3.4.3	9adeb18492cb	stdlib@go1.21.8	1.24.13	2
freikin/dawarich :1.14.5	11826c67e4b1	stdlib@go1.24.4	1.24.13	2
friendsofgo/killgrave :0.4.1	39cfbecca342	stdlib@go1.16.3	1.24.13	2
garugaru/aws-cloudwatch-exporter :latest	541852cafda5	stdlib@go1.16.15	1.24.13	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	stdlib@go1.18	1.24.13	2
gotson/komga :1.26.3	6c2a967bbe9a	stdlib@go1.17.8	1.24.13	2
governify/dashboard :latest	e83a17ba5038	stdlib@go1.17	1.24.13	2
grafana/agent-operator :v0.25.1	a136c6208aa3	stdlib@go1.18	1.24.13	2
grafana/alloy :v1.8.1	7790f6f7fbd8	stdlib@go1.24.1	1.24.13	2
grafana/alloy :v1.12.2	f94b1c82957a	stdlib@go1.25.5	1.24.13	2
grafana/grafana :9.2.4	057896e23443	stdlib@go1.19.3	1.24.13	2
grafana/grafana :11.1.0	079600c9517b	stdlib@go1.22.4	1.24.13	2
grafana/grafana :12.3.1	2175aaa91c96	stdlib@go1.25.5	1.24.13	2
grafana/grafana :8.5.0	42d3e6bc1865	stdlib@go1.17.9	1.24.13	2
grafana/grafana :7.3.5	511bc20bfcd1	stdlib@go1.15.5	1.24.13	2
grafana/grafana :11.1.4	886b56d5534e	stdlib@go1.22.4	1.24.13	2
grafana/grafana :11.4.0	d8ea37798ccc	stdlib@go1.23.1	1.24.13	2
grafana/loki :1.5.0	922b3f412fdd	stdlib@go1.13.11	1.24.13	2
grafana/loki :3.1.0	d947e68a84d9	stdlib@go1.22.2	1.24.13	2
grafana/loki :2.5.0	f9ef133793af	stdlib@go1.17.8	1.24.13	2
grafana/promtail :1.5.0	46e88d390cd6	stdlib@go1.13.11	1.24.13	2
grafana/tempo :2.5.0	f0200a9bff6d	stdlib@go1.21.3	1.24.13	2