StackRadar

CVE-2025-68121

Critical

Advisory

Published 5 Feb 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
10.0
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,711
of 17,832 indexed, latest versions
Container images
4,180
deployed by those charts
Fix available
1 of 2
affected packages

Unexpected session resumption in crypto/tls

Carried by container images the latest versions of 3,711 of 17,832 indexed charts deploy, on 4,180 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+175 more1.24.134,180
OSV records
DEBIAN-CVE-2025-68121GO-2026-4337
Also known as
BIT-golang-2025-68121

Charts affected

3,711 by stars
ChartLatestAffected imagesRadar Score
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
stdlib@go1.17.10
1.24.13

Open the chart page →

2,321
kiaekiae0.1.66 of 9See more

kiae kiae 0.1.6

6 of the 9 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.24.13
grafana/promtail:2.6.1072527b12cdf
stdlib@go1.17.9
1.24.13
istio/pilot:1.15.2db08d6963975
stdlib@go1.19.2
1.24.13
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
stdlib@go1.19.2
1.24.13
ghcr.io/dexidp/dex:v2.35.313964b29d63e
stdlib@go1.19.2
1.24.13
ghcr.io/kiaedev/kiae:latestebd03028ff6a
stdlib@go1.18.9
1.24.13

Open the chart page →

19,303
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.24.13

Open the chart page →

1,519
process-exporterkir4hVerified publisher1.0.11 of 1See more

process-exporter kir4h 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ncabatoff/process-exporterdigest-pinned6f0549dc24e9
stdlib@go1.23.1
1.24.13

Open the chart page →

742
typebotiokitsune-itopsVerified publisher0.1.41 of 4See more

typebotio kitsune-itops 0.1.4

1 of the 4 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.24.13

Open the chart page →

639
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
stdlib@go1.22.10
1.24.13

Open the chart page →

12,464
kloudlite-platformkloudlite1.1.51 of 3See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
stdlib@go1.21.3
1.24.13

Open the chart page →

1,971
klustre-csi-pluginklustre-csi-plugin0.1.11 of 2See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
stdlib@go1.21.5
1.24.13

Open the chart page →

1,474
knative-servingknative-servingVerified publisher1.18.37 of 7See more

knative-serving knative-serving 1.18.3

7 of the 7 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned0d5f740b4224
stdlib@go1.24.6
1.24.13
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned697668be7893
stdlib@go1.24.6
1.24.13
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned031408ec516f
stdlib@go1.24.3
1.24.13
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned3502bb5aa60f
stdlib@go1.24.3
1.24.13
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned7405faeb7636
stdlib@go1.24.3
1.24.13
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
stdlib@go1.24.3
1.24.13
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned50831d9aaa69
stdlib@go1.24.3
1.24.13

Open the chart page →

3,778
kollektorkollektorVerified publisher1.0.51 of 1See more

kollektor kollektor 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
pannoi/kollektor:1.0.59559617788fc
stdlib@go1.20.14
1.24.13

Open the chart page →

717
ingress-nginxkomailo-helm-charts1.0.02 of 2See more

ingress-nginx komailo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
stdlib@go1.22.8
1.24.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
stdlib@go1.22.8
1.24.13

Open the chart page →

1,548
komiserkomiser-eks3.1.101 of 1See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
tailwarden/komiser:3.1.103f68c8ae7993
stdlib@go1.22.0
1.24.13

Open the chart page →

1,272
simple-oauth2-proxykostiantyn-matsebora-helm-chartsVerified publisher0.3.71 of 1See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.7.09ed7eaf72050
stdlib@go1.22.8
1.24.13

Open the chart page →

928
kovi-tile38kovi-charts0.1.11 of 1See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
tile38/tile38:1.33.4afb7e82f9485
stdlib@go1.23.2
1.24.13

Open the chart page →

1,209
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
stdlib@go1.13.15
1.24.13

Open the chart page →

3,186
krakenkraken0.2.01 of 7See more

kraken kraken 0.2.0

1 of the 7 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
library/redis:5.0fc5ecd863862
stdlib@go1.16.7
1.24.13

Open the chart page →

1,732
aggregation-layer-examplekrateo0.1.11 of 1See more

aggregation-layer-example krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/aggregation-layer-example:0.1.06a0ed8196346
stdlib@go1.19.5
1.24.13

Open the chart page →

1,504
authnkrateo0.23.01 of 1See more

authn krateo 0.23.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/authn:0.23.0791c8f9d885a
stdlib@go1.24.2
1.24.13

Open the chart page →

678
autopilotkrateo1.0.01 of 2See more

autopilot krateo 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
library/postgres:16a3b7f434b2dc
stdlib@go1.24.6
1.24.13

Open the chart page →

1,268
azure-pricing-rest-dynamic-controller-pluginkrateo0.1.11 of 1See more

azure-pricing-rest-dynamic-controller-plugin krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/azure-pricing-rest-dynamic-controller-plugin:0.1.068bd2c3fbf57
stdlib@go1.23.6
1.24.13

Open the chart page →

445
backendkrateo0.15.31 of 1See more

backend krateo 0.15.3

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/backend:0.15.383743fcca3a7
stdlib@go1.23.3
1.24.13

Open the chart page →

903
bffkrateo0.8.81 of 1See more

bff krateo 0.8.8

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/bff:0.8.7799eeacbf9a0
stdlib@go1.23.3
1.24.13

Open the chart page →

483
capi-watcherkrateo0.1.01 of 1See more

capi-watcher krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/capi-watcher:0.1.0fa01a157d972
stdlib@go1.19.2
1.24.13

Open the chart page →

1,060
eventrouterkrateo0.6.51 of 1See more

eventrouter krateo 0.6.5

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventstack/eventrouter:0.6.030121418adfa
stdlib@go1.25.5
1.24.13

Open the chart page →

305
eventrouter-kafka-producerkrateo0.1.11 of 1See more

eventrouter-kafka-producer krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventrouter-kafka-producer:0.1.155b18c0dda37
stdlib@go1.19.2
1.24.13

Open the chart page →

1,623
eventssekrateo0.5.91 of 1See more

eventsse krateo 0.5.9

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventstack/eventsse:0.5.8b65eb9c88669
stdlib@go1.25.4
1.24.13

Open the chart page →

407
finops-composition-definition-parserkrateo0.1.41 of 1See more

finops-composition-definition-parser krateo 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-composition-definition-parser:0.1.2d9d82c32f418
stdlib@go1.24.2
1.24.13

Open the chart page →

941
finops-database-handler-uploaderkrateo0.2.11 of 1See more

finops-database-handler-uploader krateo 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-database-handler-uploader:0.2.131ee1096bc9c
stdlib@go1.25.4
1.24.13

Open the chart page →

322
finops-example-pricing-vm-azurekrateo0.2.141 of 1See more

finops-example-pricing-vm-azure krateo 0.2.14

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kubectl:1.32.0d69cd9c163db
stdlib@go1.23.3
1.24.13

Open the chart page →

1,216
finops-http-rest-queuekrateo0.1.01 of 1See more

finops-http-rest-queue krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-http-rest-queue:0.1.0eaa0801e29a7
stdlib@go1.22.1
1.24.13

Open the chart page →

770
finops-operator-scraperkrateo0.5.11 of 1See more

finops-operator-scraper krateo 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-operator-scraper:0.5.15523ff02e511
stdlib@go1.23.0
1.24.13

Open the chart page →

513
finops-operator-vm-managerkrateo0.1.21 of 2See more

finops-operator-vm-manager krateo 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-operator-vm-manager:0.1.215f804bdd1e8
stdlib@go1.21.12
1.24.13

Open the chart page →

586
frontend-providerkrateo0.3.01 of 1See more

frontend-provider krateo 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/frontend-provider:0.3.084c3219b00a2
stdlib@go1.21.6
1.24.13

Open the chart page →

948
git-providerkrateo0.13.01 of 1See more

git-provider krateo 0.13.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/git-provider:0.10.061deb827aa9f
stdlib@go1.25.0
1.24.13

Open the chart page →

747
installerkrateo2.7.12 of 2See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.24.13
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
stdlib@go1.25.5
1.24.13

Open the chart page →

3,277
installer-post-upgrade-2-5-1krateo1.0.11 of 1See more

installer-post-upgrade-2-5-1 krateo 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.24.13

Open the chart page →

2,543
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.24.13

Open the chart page →

2,543
installer-pre-upgrade-2-5-0krateo1.0.11 of 1See more

installer-pre-upgrade-2-5-0 krateo 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.24.13

Open the chart page →

2,543
installer-pre-upgrade-2-5-1krateo1.0.11 of 1See more

installer-pre-upgrade-2-5-1 krateo 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.24.13

Open the chart page →

2,543
installer-pre-upgrade-2-6-0krateo1.0.01See more

installer-pre-upgrade-2-6-0 krateo 1.0.0

1 container image this version deploys carries CVE-2025-68121.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.24.13

Open the chart page →

—
installer-pre-upgrade-testkrateo2.4.51See more

installer-pre-upgrade-test krateo 2.4.5

1 container image this version deploys carries CVE-2025-68121.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.24.13

Open the chart page →

—
installer-testkrateo2.4.52See more

installer-test krateo 2.4.5

2 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.24.13
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
stdlib@go1.25.5
1.24.13

Open the chart page →

—
kserve-controllerkrateo1.0.01 of 1See more

kserve-controller krateo 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kserve-controller:1.0.05683c5ae670e
stdlib@go1.25.6
1.24.13

Open the chart page →

267
sweeperkrateo0.2.11 of 2See more

sweeper krateo 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/eventstack/sweeper:0.1.05d5e24119ff1
stdlib@go1.25.3
1.24.13

Open the chart page →

1,506
kubeflowkromanow94-kubeflow0.5.116 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

16 of the 30 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
kubeflow/model-registry:v0.2.95783f6db428f
stdlib@go1.21.13
1.24.13
kubeflow/training-operator:v1-04f9f13dabb76dbda29
stdlib@go1.22.7
1.24.13
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
stdlib@go1.22.5
1.24.13
kubeflowkatib/katib-db-manager:v0.17.0916a7695b0dd
stdlib@go1.22.5
1.24.13
kubeflowkatib/katib-ui:v0.17.07a41c508deb1
stdlib@go1.22.5
1.24.13
kubeflownotebookswg/kfam:v1.9.22060a2ede788
stdlib@go1.17.13
1.24.13
kubeflownotebookswg/notebook-controller:v1.9.20f14bd28fdd5
stdlib@go1.17.13
1.24.13
kubeflownotebookswg/poddefaults-webhook:v1.9.2bde88d98ad74
stdlib@go1.21.13
1.24.13
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
stdlib@go1.17.13
1.24.13
kubeflownotebookswg/pvcviewer-controller:v1.9.29815e9b1728f
stdlib@go1.22.2
1.24.13
kubeflownotebookswg/tensorboard-controller:v1.9.26536a9f61193
stdlib@go1.17.13
1.24.13
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
stdlib@go1.21.7
1.24.13
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
stdlib@go1.21.7
1.24.13
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
stdlib@go1.21.7
1.24.13
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
stdlib@go1.21.7
1.24.13
gcr.io/ml-pipeline/viewer-crd-controller:2.3.08cf8213d69e4
stdlib@go1.21.7
1.24.13

Open the chart page →

71,041
kron-aapm-sidecarkron-aapm-sidecar1.1.01 of 1See more

kron-aapm-sidecar kron-aapm-sidecar 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
krontechnology/aapm-sidecar-injector:1.1.0e078d54c1711
stdlib@go1.17.10
1.24.13

Open the chart page →

2,112
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
stdlib@go1.23.1
1.24.13

Open the chart page →

4,564
lndkronkltdVerified publisher0.3.93 of 4See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
stdlib@go1.17.1
1.24.13
thesisrobot/loop:v0.11.1-beta89ae07e787ca
stdlib@go1.13.12
1.24.13
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
stdlib@go1.14.12
1.24.13

Open the chart page →

8,476
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
stdlib@go1.20.13
1.24.13

Open the chart page →

9,742
world-dbkronkltdVerified publisher0.1.01 of 1See more

world-db kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-68121.

Container imageDigestPackageFixed in
ghusta/postgres-world-db:latest879d0919fdcc
stdlib@go1.24.6
1.24.13

Open the chart page →

1,731

Container images carrying it

4,180 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2025-68121.

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.