StackRadar

CVE-2025-8556

Low

Advisory

Published 10 Jun 2025In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
147
of 17,781 indexed, latest versions
Container images
151
deployed by those charts
Fix available
1 of 1
affected package

CIRCL-Fourq: Missing and wrong validation can lead to incorrect results

Carried by container images the latest versions of 147 of 17,781 indexed charts deploy, on 151 images.

Affected packageAffected versionsFixed inImages
github.com/cloudflare/circlgolangv1.1.0, v1.2.1-0.20220809205628-0a9554f37a47, v1.3.2, v1.3.3+7 more1.6.1151
OSV records
GHSA-2x5j-vhc8-9cwm
Also known as
GO-2025-3754

Charts affected

147 by stars
ChartLatestAffected imagesRadar Score
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

23,894
actions-runner-controlleractions-runner-controller0.23.71 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

2,883
atlantisatlantis6.15.01 of 1See more

atlantis atlantis 6.15.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,891
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

3,475
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/cloudflare/circl@v1.6.0
1.6.1

Open the chart page →

2,221
botkubeinfracloudioVerified publisher1.14.01 of 1See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,097
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

16,251
ansible-semaphorecloudhippieVerified publisher15.2.101 of 1See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/cloudflare/circl@v1.4.0
1.6.1

Open the chart page →

1,235
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
gitea/gitea:1.22.376f516a1a8c2
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

23,228
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
github.com/cloudflare/circl@v1.4.0
1.6.1

Open the chart page →

4,531
coder-observabilitycoder-observabilityVerified publisher0.7.32 of 21See more

coder-observability coder-observability 0.7.3

2 of the 21 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/cloudflare/circl@v1.3.7
1.6.1
grafana/grafana:10.4.19a9043254ba16
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

24,700
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

3,793
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
github.com/cloudflare/circl@v1.3.2
1.6.1

Open the chart page →

1,942
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

10,315
uptraceuptrace2.0.21 of 2See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
uptrace/uptrace:2.0.234a02c3b2d12
github.com/cloudflare/circl@v1.6.0
1.6.1

Open the chart page →

1,619
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

2,898
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
github.com/cloudflare/circl@v1.3.6
1.6.1

Open the chart page →

2,042
argocd-source-trackercableship0.0.91 of 1See more

argocd-source-tracker cableship 0.0.9

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,483
chart-sentinelcableship0.0.121 of 1See more

chart-sentinel cableship 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,483
finops-stackcert-managerVerified publisher0.0.57 of 12See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
github.com/cloudflare/circl@v1.3.7
1.6.1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/cloudflare/circl@v1.3.7
1.6.1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/cloudflare/circl@v1.3.7
1.6.1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/cloudflare/circl@v1.3.7
1.6.1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/cloudflare/circl@v1.3.7
1.6.1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/cloudflare/circl@v1.3.7
1.6.1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

12,562
cluster-setupcluster-setup1.5.02 of 8See more

cluster-setup cluster-setup 1.5.0

2 of the 8 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
github.com/cloudflare/circl@v1.6.0
1.6.1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/cloudflare/circl@v1.6.0
1.6.1

Open the chart page →

10,037
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

52,635
dex-serverdex-server1.19.11 of 3See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
dexidp/dex:v2.39.1-distroless43655afd1a8f
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

2,238
dockyarddockyardVerified publisher0.4.01 of 1See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/cloudflare/circl@v1.3.8
1.6.1

Open the chart page →

1,542
github-actions-runner-operatorevryfs-ossVerified publisher2.8.11 of 1See more

github-actions-runner-operator evryfs-oss 2.8.1

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
quay.io/evryfs/github-actions-runner-operator:v0.11.16b084e0bd082
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

1,236
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

16,346
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

3,518
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

3,369
mesherykubesphere-stable0.5.03 of 13See more

meshery kubesphere-stable 0.5.0

3 of the 13 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
github.com/cloudflare/circl@v1.5.0
1.6.1
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/cloudflare/circl@v1.3.3
1.6.1
layer5/meshery-linkerd:stable-latestb99c73bac1f5
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

24,690
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.11 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

1 of the 5 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

7,087
transfer.shobeoneVerified publisher1.0.51 of 1See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
dutchcoders/transfer.sh:v1.6.1-noroot8db9ade72a0d
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

1,171
rclonercloneVerified publisher2.2.01 of 1See more

rclone rclone 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,672
cloudflare-tunnelrlex0.8.01 of 1See more

cloudflare-tunnel rlex 0.8.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2023.10.0c18744ae1767
github.com/cloudflare/circl@v1.2.1-0.20220809205628-0a9554f37a47
1.6.1

Open the chart page →

1,684
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
github.com/cloudflare/circl@v1.3.8
1.6.1

Open the chart page →

4,238
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

7,685
artifact-hubsoftonic1.19.04 of 8See more

artifact-hub softonic 1.19.0

4 of the 8 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/cloudflare/circl@v1.3.3
1.6.1
artifacthub/hub:v1.19.0111918d8c399
github.com/cloudflare/circl@v1.3.7
1.6.1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/cloudflare/circl@v1.3.7
1.6.1
artifacthub/tracker:v1.19.06596c8c4d955
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

14,491
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

4,460
vault-gcp-secretsvault-gcp-secrets1.19.51 of 1See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
github.com/cloudflare/circl@v1.6.0
1.6.1

Open the chart page →

2,289
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

28,131
capi-ops-managerappscodeVerified publisher2024.8.141 of 2See more

capi-ops-manager appscode 2024.8.14

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/appscode/capi-ops-manager:v0.0.57465f35b684c
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

3,416
kubedb-provider-awsappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-aws appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

2,527
kubeform-provider-awsappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

2,796
argocdargo-helm-charts1.0.02 of 3See more

argocd argo-helm-charts 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/cloudflare/circl@v1.3.9
1.6.1
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

7,300
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

4,923
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

13,459
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,800
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

6,036
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

3,244
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

2,770
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

16,198

Container images carrying it

151 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/cloudflare/circl@v1.3.3
1.6.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.