StackRadar

CVE-2025-0426

Medium

Advisory

Published 13 Feb 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
224
of 17,787 indexed, latest versions
Container images
198
deployed by those charts
Fix available
1 of 1
affected package

Node Denial of Service via kubelet Checkpoint API

Carried by container images the latest versions of 224 of 17,787 indexed charts deploy, on 198 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+100 more1.29.14, 1.30.10, 1.31.6198
OSV records
GHSA-jgfp-53c3-624w
Also known as
GO-2025-3465

Charts affected

224 by stars
ChartLatestAffected imagesRadar Score
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
k8s.io/kubernetes@v1.24.2
1.29.14

Open the chart page →

5,041
devtron-logs-dumpromholdings0.1.01 of 1See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
k8s.io/kubernetes@v1.27.2
1.29.14

Open the chart page →

4,969
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
k8s.io/kubernetes@v1.25.2
1.29.14

Open the chart page →

31,447
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
k8s.io/kubernetes@v1.31.0
1.31.6

Open the chart page →

2,556
hermitcrabseal-ioVerified publisher0.1.41 of 2See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
k8s.io/kubernetes@v1.25.5
1.29.14

Open the chart page →

4,883
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
leonardomulticloud/webhook:v1.0.0d119918900e8
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
1.29.14

Open the chart page →

5,499
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
k8s.io/kubernetes@v1.24.14
1.29.14

Open the chart page →

2,316
kyvernosoftonic3.5.21 of 7See more

kyverno softonic 3.5.2

1 of the 7 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.32.73c5268158974
k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88
1.29.14

Open the chart page →

1,021
gloo-meshsolo-gloo-mesh1.1.21 of 1See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
1.29.14

Open the chart page →

3,259
spire-identity-exchangespiffeVerified publisher0.2.21 of 3See more

spire-identity-exchange spiffe 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.31.099b37df34bc4
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.29.14

Open the chart page →

1,429
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
k8s.io/kubernetes@v1.30.1
1.30.10

Open the chart page →

2,415
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
1.29.14

Open the chart page →

16,508
nfs-provisionersupporttools0.11.01 of 1See more

nfs-provisioner supporttools 0.11.0

1 of the 1 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
openebs/provisioner-nfs:0.11.04f41dd782761
k8s.io/kubernetes@v1.17.3
1.29.14

Open the chart page →

2,673
tfy-inferentia-operatortruefoundryVerified publisher0.2.81 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba
1.29.14

Open the chart page →

2,904
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6
1.29.14

Open the chart page →

8,370
vineyard-operatorvineyardVerified publisher0.24.21 of 2See more

vineyard-operator vineyard 0.24.2

1 of the 2 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
k8s.io/kubernetes@v1.19.3
1.29.14

Open the chart page →

4,533
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.29.14

Open the chart page →

1,124
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
k8s.io/kubernetes@v1.30.3
1.30.10

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
k8s.io/kubernetes@v1.18.19
1.29.14

Open the chart page →

15,287
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
1.29.14

Open the chart page →

2,745
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
1.29.14

Open the chart page →

10,286
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
1.29.14

Open the chart page →

11,785
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
1.29.14

Open the chart page →

12,607
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-0426.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
1.29.14

Open the chart page →

13,197

Container images carrying it

198 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
clastix/kubectl:v1.3122918a06c253
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.29.14
6
quay.io/devtron/kubectl:latest2ad610626658
k8s.io/kubernetes@v1.25.2
1.29.14
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
k8s.io/kubernetes@v1.29.2
1.29.14
5
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.29.14
5
argoproj/argocd:v1.8.1830e86cacefd
k8s.io/kubernetes@v1.19.2
1.29.14
3
groundnuty/k8s-wait-for:v2.0c14d7271e401
k8s.io/kubernetes@v1.25.4
1.29.14
3
kubegems/kubegems:v1.24.10a730bcf9322a
k8s.io/kubernetes@v1.23.1
1.29.14
3
quay.io/devtron/ai-agent:0.0.16545dac92173
k8s.io/kubernetes@v0.0.0-20241022202705-f0c1ea863533
1.29.14
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
k8s.io/kubernetes@v1.25.5
1.29.14
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
k8s.io/kubernetes@v1.21.0-rc.0
1.29.14
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
k8s.io/kubernetes@v1.20.4
1.29.14
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
k8s.io/kubernetes@v1.27.2
1.29.14
3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
k8s.io/kubernetes@v1.24.2
1.29.14
3
quay.io/devtron/silver-surfer:e3b9a2f6-1191-387899640e2dc4316
k8s.io/kubernetes@v1.29.6
1.29.14
3
quay.io/metallb/controller:v0.13.101b33357b3595
k8s.io/kubernetes@v1.26.0
1.29.14
3
registry.k8s.io/kubectl:v1.31.099b37df34bc4
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.29.14
3
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
k8s.io/kubernetes@v1.28.7
1.29.14
2
bitnamilegacy/kubectl:1.26.4a0a972324d93
k8s.io/kubernetes@v1.26.4
1.29.14
2
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.29.14
2
dtzar/helm-kubectl:3.14.455429449408e
k8s.io/kubernetes@v1.29.3
1.29.14
2
iomesh/localpv-manager:v0.2.0f13deacac3f4
k8s.io/kubernetes@v1.24.4
1.29.14
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
k8s.io/kubernetes@v1.26.0
1.29.14
2
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
k8s.io/kubernetes@v1.25.4
1.29.14
2
uffizzi/controller:latest0344805f267b
k8s.io/kubernetes@v1.29.3
1.29.14
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
k8s.io/kubernetes@v0.0.0-20250515091041-8f3800390d48
1.29.14
2
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
k8s.io/kubernetes@v0.0.0-20250813142120-2e83bc4bf31e
1.29.14
2
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
k8s.io/kubernetes@v1.26.0
1.29.14
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
k8s.io/kubernetes@v1.31.0
1.31.6
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
1.29.14
2
quay.io/metallb/speaker:v0.13.1000406ccb1fa0
k8s.io/kubernetes@v1.26.0
1.29.14
2
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
1.29.14
2
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
k8s.io/kubernetes@v1.26.1
1.29.14
2
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
k8s.io/kubernetes@v1.26.1
1.29.14
2
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
k8s.io/kubernetes@v0.0.0-20250617182919-9e1848391882
1.29.14
2
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
1.29.14
2
airbyte/pod-sweeper:1.5.198d2c39d512e
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
1.29.14
1
alpine/k8s:1.27.321b24e6bf801
k8s.io/kubernetes@v1.27.3
1.29.14
1
alpine/k8s:1.31.106dbe6f391eda
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
1.29.14
1
alpine/k8s:1.31.137a319b15cfc9
k8s.io/kubernetes@v0.0.0-20250909225156-c601ba40fa8f
1.29.14
1
alpine/k8s:1.32.47e1e7d5b7a96
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
1.29.14
1
alpine/k8s:1.31.49c4976d47656
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
1.29.14
1
alpine/k8s:1.30.0bd01dae02676
k8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b9
1.29.14
1
alpine/k8s:1.30.2cd560fce90f7
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.29.14
1
alpine/k8s:1.28.13e5c0b053fed7
k8s.io/kubernetes@v0.0.0-20240814194418-024ab2a13ff7
1.29.14
1
alpine/k8s:1.32.3eec354133193
k8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa
1.29.14
1
alpine/k8s:1.28.2fc059f056ad0
k8s.io/kubernetes@v1.28.2
1.29.14
1
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
k8s.io/kubernetes@v1.16.1
1.29.14
1
ambassador/ambassador-agent:1.0.227a1ea0d934fb
k8s.io/kubernetes@v1.28.3
1.29.14
1
apecloud/gemini-scheduler:0.1.15832d1a9097a
k8s.io/kubernetes@v1.29.7
1.29.14
1
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
k8s.io/kubernetes@v1.28.4
1.29.14
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.