StackRadarChart IndexLive demo

CVE-2026-25518

Medium

Advisory

Published 2 Feb 2026In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.004; 30th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 13; deployed by those charts
Fix available: 1 of 1; affected package

cert-manager-controller DoS via Specially Crafted DNS Response

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 13 images.

Affected package	Affected versions	Fixed in	Images
github.com/cert-manager/cert-managergolang	v1.18.2, v1.19.0, v1.19.1, v1.19.2	1.18.5, 1.19.3	13

OSV records: GHSA-gx3x-vq4p-mhhv
Also known as: BIT-cert-manager-2026-25518, GO-2026-4399

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

arvancloud-webhookarvancloud-webhook

1 of 1 See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	github.com/cert-manager/cert-manager@v1.19.1	1.19.3

Open the chart page →

2,297

valkey-operatoralekc

1 of 1 See more

valkey-operator alekc 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/hyperspike/valkey-operator :v0.0.61	7d8c669f11a4	github.com/cert-manager/cert-manager@v1.19.0	1.19.3

Open the chart page →

333

accounts-uiappscode

1 of 1 See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

2,592

aceappscode

1 of 2 See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

2,894

ace-installerappscode

1 of 2 See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

3,225

ace-installer-certifiedappscode

1 of 2 See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

3,225

billingappscode

1 of 1 See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

2,592

cert-manager-csi-driver-cacertsappscode

1 of 3 See more

cert-manager-csi-driver-cacerts appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/csi-driver-cacerts :v0.5.0	b6bf1888f9d5	github.com/cert-manager/cert-manager@v1.19.2	1.19.3

Open the chart page →

3,417

cert-manager-webhook-aceappscode

1 of 1 See more

cert-manager-webhook-ace appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/cert-manager-webhook-ace :v0.0.2	dc6b5fdcec06	github.com/cert-manager/cert-manager@v1.19.2	1.19.3

Open the chart page →

1,308

inbox-agentappscode

1 of 2 See more

inbox-agent appscode 2026.6.2

1 of the 2 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/inbox-agent :v0.0.6	6b99ee9feece	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

2,114

marketplace-apiappscode

1 of 1 See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

2,592

opentelemetry-kube-stackappscode

1 of 3 See more

opentelemetry-kube-stack appscode 0.14.12

1 of the 3 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.144.0	79b81912f1fb	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

1,872

platform-apiappscode

1 of 3 See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

37,268

cert-manager-alidns-webhookcert-manager-alidns-webhook

1 of 1 See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	github.com/cert-manager/cert-manager@v1.19.2	1.19.3

Open the chart page →

1,320

cert-manager-webhook-abioncert-manager-webhook-abion

1 of 1 See more

cert-manager-webhook-abion cert-manager-webhook-abion 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

1,087

batchrunnerflanksource

1 of 1 See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
flanksource/batch-runner :v1.0.44	689687a7cf95	github.com/cert-manager/cert-manager@v1.19.1	1.19.3

Open the chart page →

5,292

mw-autoinstrumentationmiddleware-labs

1 of 6 See more

mw-autoinstrumentation middleware-labs 1.2.6

1 of the 6 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.132.0	5e331c925091	github.com/cert-manager/cert-manager@v1.18.2	1.18.5

Open the chart page →

3,713

voyager-gatewayopenshift

1 of 2 See more

voyager-gateway openshift 2026.1.15

1 of the 2 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.1.0	13fd0cccafe8	github.com/cert-manager/cert-manager@v1.19.2	1.19.3

Open the chart page →

2,567

acme-linoderotational

1 of 1 See more

acme-linode rotational 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-25518.

Container image	Digest	Package	Fixed in
rotationalio/linode-acme-webhook :1.0.0	cc7bb030a20f	github.com/cert-manager/cert-manager@v1.19.2	1.19.3

Open the chart page →

1,308

Container images carrying it

13 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	github.com/cert-manager/cert-manager@v1.18.2	1.18.5	7
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	github.com/cert-manager/cert-manager@v1.18.2	1.18.5	1
flanksource/batch-runner :v1.0.44	689687a7cf95	github.com/cert-manager/cert-manager@v1.19.1	1.19.3	1
rotationalio/linode-acme-webhook :1.0.0	cc7bb030a20f	github.com/cert-manager/cert-manager@v1.19.2	1.19.3	1
ghcr.io/appscode/cert-manager-webhook-ace :v0.0.2	dc6b5fdcec06	github.com/cert-manager/cert-manager@v1.19.2	1.19.3	1
ghcr.io/appscode/csi-driver-cacerts :v0.5.0	b6bf1888f9d5	github.com/cert-manager/cert-manager@v1.19.2	1.19.3	1
ghcr.io/appscode/inbox-agent :v0.0.6	6b99ee9feece	github.com/cert-manager/cert-manager@v1.18.2	1.18.5	1
ghcr.io/crazygit/cert-manager-alidns-webhook :0.1.4	976be6506eb6	github.com/cert-manager/cert-manager@v1.19.2	1.19.3	1
ghcr.io/hyperspike/valkey-operator :v0.0.61	7d8c669f11a4	github.com/cert-manager/cert-manager@v1.19.0	1.19.3	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.132.0	5e331c925091	github.com/cert-manager/cert-manager@v1.18.2	1.18.5	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.144.0	79b81912f1fb	github.com/cert-manager/cert-manager@v1.18.2	1.18.5	1
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	github.com/cert-manager/cert-manager@v1.19.1	1.19.3	1
ghcr.io/voyagermesh/crd-manager :v0.1.0	13fd0cccafe8	github.com/cert-manager/cert-manager@v1.19.2	1.19.3	1