StackRadar

CVE-2025-8556

Low

Advisory

Published 10 Jun 2025In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
147
of 17,781 indexed, latest versions
Container images
151
deployed by those charts
Fix available
1 of 1
affected package

CIRCL-Fourq: Missing and wrong validation can lead to incorrect results

Carried by container images the latest versions of 147 of 17,781 indexed charts deploy, on 151 images.

Affected packageAffected versionsFixed inImages
github.com/cloudflare/circlgolangv1.1.0, v1.2.1-0.20220809205628-0a9554f37a47, v1.3.2, v1.3.3+7 more1.6.1151
OSV records
GHSA-2x5j-vhc8-9cwm
Also known as
GO-2025-3754

Charts affected

147 by stars
ChartLatestAffected imagesRadar Score
argocd-extra-app-info-exportermikejohVerified publisher0.1.121 of 1See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,334
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

7,309
giteamyaVerified publisher23.12.51 of 1See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
gitea/gitea:1.21.6ac73e0da341f
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

3,430
agent-control-cdnewrelic1.0.02 of 3See more

agent-control-cd newrelic 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
github.com/cloudflare/circl@v1.5.0
1.6.1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/cloudflare/circl@v1.5.0
1.6.1

Open the chart page →

5,034
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

2,966
vault-helm-chartnotesprojectchart0.1.01 of 1See more

vault-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
library/vault:1.13.3f98ac9dd97b0
github.com/cloudflare/circl@v1.1.0
1.6.1

Open the chart page →

2,246
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
github.com/cloudflare/circl@v1.4.0
1.6.1

Open the chart page →

17,070
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

4,127
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

8,599
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

5,137
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

5,411
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,326
planectlplanectlVerified publisher0.7.03 of 10See more

planectl planectl 0.7.0

3 of the 10 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
github.com/cloudflare/circl@v1.3.7
1.6.1
gitea/act_runner:0.2.11c57233403eff
github.com/cloudflare/circl@v1.3.9
1.6.1
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

25,934
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

9,355
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,667
radar-hydraradar-baseVerified publisher0.3.41 of 2See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
oryd/hydra:v2.3.0b94007e19a1f
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

2,177
backup-maker-controllerriotkit-org0.1.21 of 1See more

backup-maker-controller riotkit-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/riotkit-org/backup-maker-controller:v0.1.262370545ba3d
github.com/cloudflare/circl@v1.1.0
1.6.1

Open the chart page →

1,575
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

4,038
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/cloudflare/circl@v1.3.7
1.6.1
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

68,240
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

5,039
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

2,620
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/cloudflare/circl@v1.2.1-0.20220809205628-0a9554f37a47
1.6.1

Open the chart page →

4,744
gickupschichtelVerified publisher0.0.41 of 1See more

gickup schichtel 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.386b656f19b0c1
github.com/cloudflare/circl@v1.6.0
1.6.1

Open the chart page →

1,547
semaphoresemaphore-light1.0.01 of 1See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
semaphoreui/semaphore:latest3996804607eb
github.com/cloudflare/circl@v1.6.0
1.6.1

Open the chart page →

1,674
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

3,337
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

2,314
talos-backupsinextraVerified publisher0.1.21 of 1See more

talos-backup sinextra 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/siderolabs/talos-backup:v0.1.0-beta.203a71e140f1d
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

898
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

7,901
harborsoftonic1.13.01 of 8See more

harbor softonic 1.13.0

1 of the 8 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

7,672
rclonesoftonic2.1.01 of 1See more

rclone softonic 2.1.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,672
trivy-operatorsoftonic0.18.01 of 1See more

trivy-operator softonic 0.18.0

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

2,505
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

2,416
switchbladeswitchblade0.0.191 of 1See more

switchblade switchblade 0.0.19

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

1,360
agentssynapse0.1.303 of 9See more

agents synapse 0.1.30

3 of the 9 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
github.com/cloudflare/circl@v1.1.0
1.6.1
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/cloudflare/circl@v1.3.7
1.6.1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
github.com/cloudflare/circl@v1.1.0
1.6.1

Open the chart page →

7,244
cctpsynapse0.3.01 of 4See more

cctp synapse 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
github.com/cloudflare/circl@v1.1.0
1.6.1

Open the chart page →

1,815
explorersynapse0.2.162 of 6See more

explorer synapse 0.2.16

2 of the 6 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/cloudflare/circl@v1.3.7
1.6.1
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

8,518
omnirpcsynapse0.2.921 of 2See more

omnirpc synapse 0.2.92

1 of the 2 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,121
promexportersynapse0.1.11 of 1See more

promexporter synapse 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
github.com/cloudflare/circl@v1.1.0
1.6.1

Open the chart page →

1,704
screenersynapse0.2.51 of 4See more

screener synapse 0.2.5

1 of the 4 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

1,091
scribesynapse0.2.162 of 7See more

scribe synapse 0.2.16

2 of the 7 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/cloudflare/circl@v1.3.7
1.6.1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

2,680
sinnersynapse0.1.01 of 6See more

sinner synapse 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

1,955
teredixteredix0.0.21 of 1See more

teredix teredix 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
ghcr.io/shaharia-lab/teredix:0.0.2ec727be4417a
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

1,077
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
github.com/cloudflare/circl@v1.3.9
1.6.1

Open the chart page →

10,006
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

2,477
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

45,239
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/cloudflare/circl@v1.3.3
1.6.1

Open the chart page →

14,983
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-8556.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
github.com/cloudflare/circl@v1.3.7
1.6.1

Open the chart page →

9,381

Container images carrying it

151 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/cloudflare/circl@v1.3.3
1.6.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.