CVE-2025-0167
LowAdvisory
Published 5 Feb 2025In the index since 5 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 3.4
- base score, highest
- EPSS
- 0.007
- 51st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 644
- of 17,787 indexed, latest versions
- Container images
- 643
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 644 of 17,787 indexed charts deploy, on 643 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+25 more | 7.81.0-1ubuntu1.23, 7.88.1-10+deb12u11, 8.5.0-2ubuntu10.8 | 422 |
| curlapk | 8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+15 more | 8.12.0-r0 | 221 |
- OSV records
- ALPINE-CVE-2025-0167CGA-3rm4-qmc7-26hxDEBIAN-CVE-2025-0167UBUNTU-CVE-2025-0167
- Also known as
- CGA-j39x-f5qx-6xh3, USN-8084-1
Charts affected
644 by stars
Container images carrying it
643 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| natsio/ | 1cc420186664 | curl | 8.12.0-r0 | 1 |
| natsio/ | e808e0644ce1 | curl | 8.12.0-r0 | 1 |
| netboxcommunity/ | 3d652dca5351 | curl | 7.81.0-1ubuntu1.23 | 1 |
| nginxinc/ | 8265b1df5a89 | curl | 8.12.0-r0 | 1 |
| nginxinc/ | 8f14986c54fa | curl | 8.12.0-r0 | 1 |
| nirmalnaveen/ | 8541a39162f3 | curl | 7.88.1-10+deb12u11 | 1 |
| nodered/ | e2632a7a35dd | curl | 8.12.0-r0 | 1 |
| obolnetwork/ | cb7e97d39d46 | curl | 8.5.0-2ubuntu10.8 | 1 |
| odavid/ | e7ab3bbc948e | curl | 8.12.0-r0 | 1 |
| offchainlabs/ | e95865866129 | curl | 7.88.1-10+deb12u11 | 1 |
| oled01/ | 6302fd2b5333 | curl | 7.81.0-1ubuntu1.23 | 1 |
| opea/ | 38c51b791efa | curl | 7.88.1-10+deb12u11 | 1 |
| opea/ | bdb9ec215872 | curl | 8.12.0-r0 | 1 |
| opea/ | 58f91683892d | curl | 7.88.1-10+deb12u11 | 1 |
| opea/ | 2bee4eb66f3e | curl | 7.88.1-10+deb12u11 | 1 |
| opea/ | e2436483b73d | curl | 7.88.1-10+deb12u11 | 1 |
| opea/ | 3ef121f34610 | curl | 7.88.1-10+deb12u11 | 1 |
| opea/ | 3eaa91849512 | curl | 7.88.1-10+deb12u11 | 1 |
| opea/ | 7f854e9bffaf | curl | 7.88.1-10+deb12u11 | 1 |
| opea/ | 249afad3d268 | curl | 7.88.1-10+deb12u11 | 1 |
| openbas/ | a277796d9724 | curl | 7.88.1-10+deb12u11 | 1 |
| openbas/ | d986d80b0a75 | curl | 8.5.0-2ubuntu10.8 | 1 |
| opencsghq/ | bdd2c58b9744 | curl | 7.88.1-10+deb12u11 | 1 |
| opencsghq/ | f6d7e7d6be5d | curl | 7.88.1-10+deb12u11 | 1 |
| opendatacube/ | 120457ffcd69 | curl | 8.5.0-2ubuntu10.8 | 1 |
| opendatacube/ | 80df355a660b | curl | 7.81.0-1ubuntu1.23 | 1 |
| openmined/ | 3a4144c0bb82 | curl | 8.12.0-r0 | 1 |
| openruntimes/ | 2228f186dcbb | curl | 8.12.0-r0 | 1 |
| openvino/ | 1e7cd1d70cc1 | curl | 8.5.0-2ubuntu10.8 | 1 |
| penpotapp/ | 47853d9bb9dd | curl | 7.81.0-1ubuntu1.23 | 1 |
| penpotapp/ | 5c835ffd87ab | curl | 7.81.0-1ubuntu1.23 | 1 |
| phntom/ | 53883b65d9b7 | curl | 8.12.0-r0 | 1 |
| phntom/ | 51cf9da4aa2e | curl | 7.81.0-1ubuntu1.23 | 1 |
| photoprism/ | 2954334adbda | curl | 7.81.0-1ubuntu1.23 | 1 |
| photoprism/ | fc6fd632ca74 | curl | 8.5.0-2ubuntu10.8 | 1 |
| phpipam/ | 54468713454e | curl | 8.12.0-r0 | 1 |
| phpipam/ | ace0efd24830 | curl | 8.12.0-r0 | 1 |
| pnnlmiscscripts/ | 2b3ae9b5ec25 | curl | 8.12.0-r0 | 1 |
| pnnlmiscscripts/ | 952d87cca3d2 | curl | 8.12.0-r0 | 1 |
| pnnlmiscscripts/ | a5ee1dea30e4 | curl | 8.12.0-r0 | 1 |
| pnnlmiscscripts/ | c19a40d7435d | curl | 8.12.0-r0 | 1 |
| pnnlmiscscripts/ | 2b91d6a46e06 | curl | 8.12.0-r0 | 1 |
| pnnlmiscscripts/ | 2c202c43c0aa | curl | 8.12.0-r0 | 1 |
| pnnlmiscscripts/ | 2c8dc938b2f9 | curl | 8.12.0-r0 | 1 |
| pnnlmiscscripts/ | 6e1a36d646a3 | curl | 8.12.0-r0 | 1 |
| pnnlmiscscripts/ | 9785e5b82334 | curl | 8.12.0-r0 | 1 |
| pnnlmiscscripts/ | fcd82530bc8b | curl | 8.12.0-r0 | 1 |
| postgis/ | 4738bee21eb6 | curl | 8.12.0-r0 | 1 |
| postgis/ | 5a1dbedac34e | curl | 8.12.0-r0 | 1 |
| praravind1801/ | f29d637b9ce1 | curl | 7.88.1-10+deb12u11 | 1 |