StackRadar

CVE-2024-25260

Medium

Advisory

Published 20 Feb 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
239
of 17,781 indexed, latest versions
Container images
250
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 239 of 17,781 indexed charts deploy, on 250 images.

Affected packageAffected versionsFixed inImages
elfutilsdeb0.188-2.1, 0.190-1.1build4, 0.190-1.1build4.1, 0.192-4+1 more0.190-1.1ubuntu0.1250
OSV records
DEBIAN-CVE-2024-25260UBUNTU-CVE-2024-25260
Also known as
USN-7369-1

Charts affected

239 by stars
ChartLatestAffected imagesRadar Score
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
elfutils@0.188-2.1
no fix listed

Open the chart page →

30,219
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
elfutils@0.192-4
no fix listed

Open the chart page →

9,534
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
elfutils@0.188-2.1
no fix listed

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
elfutils@0.188-2.1
no fix listed

Open the chart page →

16,620
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,105
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
elfutils@0.192-4
no fix listed

Open the chart page →

9,755
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
elfutils@0.188-2.1
no fix listed

Open the chart page →

13,510
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
elfutils@0.188-2.1
no fix listed

Open the chart page →

3,218
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
elfutils@0.192-4
no fix listed

Open the chart page →

3,001
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,565
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,888
servicexssl-hep1.8.510 of 16See more

servicex ssl-hep 1.8.5

10 of the 16 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
elfutils@0.192-4
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
elfutils@0.192-4
no fix listed

Open the chart page →

66,266
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
elfutils@0.188-2.1
no fix listed

Open the chart page →

20,223
steadybit-agentsteadybit3.1.1612 of 6See more

steadybit-agent steadybit 3.1.161

2 of the 6 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
elfutils@0.192-4
no fix listed
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
elfutils@0.192-4
no fix listed

Open the chart page →

4,277
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
elfutils@0.188-2.1
no fix listed

Open the chart page →

13,390
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
elfutils@0.192-4
no fix listed

Open the chart page →

3,389
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
elfutils@0.192-4
no fix listed

Open the chart page →

4,674
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,199
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,648
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
elfutils@0.188-2.1
no fix listed
opea/embedding-tei:1.05c9639de61c1
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed
opea/reranking-tei:1.0e48613afb191
elfutils@0.188-2.1
no fix listed
opea/retriever-redis:1.0eb746b263705
elfutils@0.188-2.1
no fix listed

Open the chart page →

39,090
codegentest-opea1.0.03 of 5See more

codegen test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
elfutils@0.188-2.1
no fix listed
opea/codegen-ui:1.02bee4eb66f3e
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,814
codetranstest-opea1.0.03 of 5See more

codetrans test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
elfutils@0.188-2.1
no fix listed
opea/codetrans-ui:1.03ef121f34610
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,385
docsumtest-opea1.0.03 of 5See more

docsum test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
elfutils@0.188-2.1
no fix listed
opea/docsum-ui:1.07f854e9bffaf
elfutils@0.188-2.1
no fix listed
opea/llm-docsum-tgi:1.002f9e8fa5d71
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
elfutils@0.188-2.1
no fix listed

Open the chart page →

9,616
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,350
jellyfinth-chartsVerified publisher0.1.01 of 1See more

jellyfin th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.77ae36aab93ef
elfutils@0.188-2.1
no fix listed

Open the chart page →

3,958
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
elfutils@0.188-2.1
no fix listed

Open the chart page →

10,086
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
elfutils@0.188-2.1
no fix listed

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
elfutils@0.188-2.1
no fix listed

Open the chart page →

14,358
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
elfutils@0.192-4
no fix listed

Open the chart page →

3,911
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,984
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
elfutils@0.188-2.1
no fix listed

Open the chart page →

9,117
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-25260.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1

Open the chart page →

2,097

Container images carrying it

250 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
elfutils@0.192-4
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
elfutils@0.192-4
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
elfutils@0.192-4
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
elfutils@0.192-4
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
elfutils@0.192-4
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
elfutils@0.192-4
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
elfutils@0.192-4
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
elfutils@0.192-4
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
elfutils@0.188-2.1
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
elfutils@0.188-2.1
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
elfutils@0.188-2.1
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
elfutils@0.188-2.1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
elfutils@0.188-2.1
no fix listed
1
theradius/loggia:0.463ba348546ec
elfutils@0.188-2.1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
elfutils@0.192-4
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
elfutils@0.188-2.1
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
elfutils@0.192-4
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
elfutils@0.188-2.1
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
elfutils@0.188-2.1
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
elfutils@0.188-2.1
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
elfutils@0.188-2.1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
elfutils@0.188-2.1
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
elfutils@0.192-4
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
elfutils@0.188-2.1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
elfutils@0.188-2.1
no fix listed
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
elfutils@0.190-1.1build4.1
0.190-1.1ubuntu0.1
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
elfutils@0.188-2.1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
elfutils@0.192-4
no fix listed
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
elfutils@0.192-4
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
elfutils@0.188-2.1
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
elfutils@0.188-2.1
no fix listed
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
elfutils@0.188-2.1
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
elfutils@0.188-2.1
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
elfutils@0.188-2.1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
elfutils@0.188-2.1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
elfutils@0.188-2.1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
elfutils@0.188-2.1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
elfutils@0.188-2.1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
elfutils@0.188-2.1
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
elfutils@0.192-4
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
elfutils@0.188-2.1
no fix listed
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
elfutils@0.192-4
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
elfutils@0.192-4
no fix listed
1
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
elfutils@0.192-4
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
elfutils@0.192-4
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
elfutils@0.188-2.1
no fix listed
1
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
elfutils@0.192-4
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
elfutils@0.188-2.1
no fix listed
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
elfutils@0.192-4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.