StackRadar

CVE-2025-0665

High

Advisory

Published 5 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
233
of 17,781 indexed, latest versions
Container images
222
deployed by those charts
Fix available
2 of 2
affected packages

curl-8.12.1-1.1 on GA media

Carried by container images the latest versions of 233 of 17,781 indexed charts deploy, on 222 images.

Affected packageAffected versionsFixed inImages
curlapk8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+15 more8.12.0-r0220
curlrpm7.60.0-lp151.5.6.18.12.1-1.12
OSV records
ALPINE-CVE-2025-0665CGA-fr6q-jchj-fq9ropenSUSE-SU-2025:14809-1
Also known as
CGA-mcvh-pjq3-m6h6

Charts affected

233 by stars
ChartLatestAffected imagesRadar Score
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
curl@8.4.0-r0
8.12.0-r0

Open the chart page →

2,103
botkubeinfracloudioVerified publisher1.14.01 of 1See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
curl@8.9.1-r1
8.12.0-r0

Open the chart page →

1,097
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
curl@8.9.0-r0
8.12.0-r0

Open the chart page →

16,251
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
curl@8.4.0-r0
8.12.0-r0

Open the chart page →

6,041
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
gitea/gitea:1.22.376f516a1a8c2
curl@8.10.1-r0
8.12.0-r0

Open the chart page →

23,228
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
temporalio/server:1.22.4c0a44c26397b
curl@8.4.0-r0
8.12.0-r0

Open the chart page →

14,893
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
openmined/syft-seaweedfs:0.9.53a4144c0bb82
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

17,245
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.01 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

1 of the 3 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
thingsboard/toolbox:1.13.01bd61a0da6d3
curl@8.9.1-r1
8.12.0-r0

Open the chart page →

3,534
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
curl@8.11.1-r0
8.12.0-r0

Open the chart page →

4,531
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
curl@8.1.2-r0
8.12.0-r0

Open the chart page →

2,709
servarrservarr1.0.24 of 10See more

servarr servarr 1.0.2

4 of the 10 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
curl@8.5.0-r0
8.12.0-r0
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
curl@8.5.0-r0
8.12.0-r0
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
curl@8.5.0-r0
8.12.0-r0
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

14,238
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

14,240
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:4.6.1fd916f75415f
curl@8.4.0-r0
8.12.0-r0

Open the chart page →

14,094
lndfold0.3.151 of 4See more

lnd fold 0.3.15

1 of the 4 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
curl@8.3.0-r0
8.12.0-r0

Open the chart page →

8,835
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
alpine/curl:8.5.0513c4f0d7123
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

13,953
graphql-gatewaygraphql-gatewayVerified publisher0.1.51 of 1See more

graphql-gateway graphql-gateway 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
hansehe/graphql-gateway:1.0.458e09540afbc
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

1,660
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.45b161f051d01
curl@8.4.0-r0
8.12.0-r0

Open the chart page →

19,337
coder-observabilitycoder-observabilityVerified publisher0.7.32 of 21See more

coder-observability coder-observability 0.7.3

2 of the 21 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
dannyben/madness:latestebdf50556c02
curl@8.9.0-r0
8.12.0-r0
nginxinc/nginx-unprivileged:1.24-alpinebe76a26e238d
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

24,700
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
curl@8.9.1-r0
8.12.0-r0

Open the chart page →

3,451
hazelcasthazelcastVerified publisher5.10.21 of 2See more

hazelcast hazelcast 5.10.2

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
curl@8.9.0-r0
8.12.0-r0

Open the chart page →

2,634
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
curl@8.2.1-r0
8.12.0-r0

Open the chart page →

3,675
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-1.108.14c6df805bbf2
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

17,693
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
curl@8.9.0-r0
8.12.0-r0

Open the chart page →

2,160
smockerandrcunsVerified publisher0.0.41 of 1See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
andrcuns/smocker:0.18.5b4a8eb20581a
curl@8.4.0-r0
8.12.0-r0

Open the chart page →

2,173
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
curl@8.10.1-r0
8.12.0-r0

Open the chart page →

2,388
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ddosify/selfhosted_frontend:4.1.5bf454ab99d89
curl@8.5.0-r0
8.12.0-r0
library/nginx:1.25.5-alpine516475cc129d
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

22,202
celestia-nodecelestia-node0.1.71 of 1See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
curl@8.9.1-r1
8.12.0-r0

Open the chart page →

1,799
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
curl@8.9.0-r0
8.12.0-r0

Open the chart page →

12,562
swaggeruichrisfuVerified publisher0.3.71 of 1See more

swaggerui chrisfu 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v5.6.2342808e22de4
curl@8.2.1-r0
8.12.0-r0

Open the chart page →

1,309
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

9,724
tasmo-admincrystalnetVerified publisher3.0.111 of 1See more

tasmo-admin crystalnet 3.0.11

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

891
data-fairdata354-helmVerified publisher1.1.23 of 12See more

data-fair data354-helm 1.1.2

3 of the 12 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
curl@8.5.0-r0
8.12.0-r0
ghcr.io/data-fair/metrics:0a8d40779eeae
curl@8.1.2-r0
8.12.0-r0
ghcr.io/data-fair/processings:15a9216989707
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

38,346
jumpdjjudas21Verified publisher0.1.71 of 1See more

jump djjudas21 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
daledavies/jump:v1.4.10a0c8ad93902
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

728
openssh-serverdjjudas21Verified publisher0.1.141 of 1See more

openssh-server djjudas21 0.1.14

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
linuxserver/openssh-server:9.7_p1-r4-ls17153ea39d2485c
curl@8.9.1-r2
8.12.0-r0

Open the chart page →

565
event-exporterevent-exporterVerified publisher0.1.171 of 1See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
kubestar/event-exporter:latest656606941255
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

1,210
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-frontend:v1.5.12409c2a00ab6
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

5,291
featurehubfeaturehub4.1.61 of 7See more

featurehub featurehub 4.1.6

1 of the 7 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
curl@8.4.0-r0
8.12.0-r0

Open the chart page →

8,240
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
curl@8.9.1-r1
8.12.0-r0

Open the chart page →

1,965
organizrgeek-cookbookVerified publisher7.4.21 of 1See more

organizr geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
organizr/organizr:latest1ce319d73cdf
curl@8.4.0-r0
8.12.0-r0

Open the chart page →

1,533
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
curl@8.11.0-r2
8.12.0-r0

Open the chart page →

6,416
temporalglasskubeVerified publisher0.45.2-gk.14 of 14See more

temporal glasskube 0.45.2-gk.1

4 of the 14 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
curl@8.5.0-r0
8.12.0-r0
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
curl@8.5.0-r0
8.12.0-r0
temporalio/server:1.25.08a5798191dea
curl@8.5.0-r0
8.12.0-r0
temporalio/ui:2.30.25c2a3645d09c
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

16,346
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
curl@8.9.1-r1
8.12.0-r0

Open the chart page →

4,679
mysql-checkkfirfer0.3.01 of 1See more

mysql-check kfirfer 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
kfirfer/mysql-client:0.0.4d23d173f333f
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

785
ks-corekubeblocksVerified publisher1.1.31 of 5See more

ks-core kubeblocks 1.1.3

1 of the 5 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
kubesphere/kubectl:v1.27.1649b445b1b732
curl@8.9.0-r0
8.12.0-r0

Open the chart page →

4,721
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
curl@8.2.1-r0
8.12.0-r0

Open the chart page →

5,940
miniapiminiapi1.3.21 of 1See more

miniapi miniapi 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
udhos/miniapi:1.3.28a7042db82ce
curl@8.10.1-r0
8.12.0-r0

Open the chart page →

854
opencatalogiopencatalogi1.0.61 of 8See more

opencatalogi opencatalogi 1.0.6

1 of the 8 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

14,838
chartmuseumphntom4.0.201 of 1See more

chartmuseum phntom 4.0.20

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
phntom/chartmuseum:v0.16.053883b65d9b7
curl@8.2.0-r1
8.12.0-r0

Open the chart page →

2,939
phpipamphpipam-helmVerified publisher1.0.122 of 3See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.7.354468713454e
curl@8.11.0-r2
8.12.0-r0
phpipam/phpipam-www:v1.7.3ace0efd24830
curl@8.11.0-r2
8.12.0-r0

Open the chart page →

3,778
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
haproxytech/kubernetes-ingress:1.11.4c5f8a41ef0d4
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

7,432

Container images carrying it

222 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
curl@8.5.0-r0
8.12.0-r0
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
curl@8.5.0-r0
8.12.0-r0
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
curl@8.5.0-r0
8.12.0-r0
1
ghcr.io/pschichtel/keycloak-webhook-router:main285e226fe7f6
curl@8.11.0-r2
8.12.0-r0
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
curl@8.3.0-r0
8.12.0-r0
1
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend:0.6.2c5f1e2ca5781
curl@8.11.1-r0
8.12.0-r0
1
ghcr.io/radar-base/radar-home/radar-home:0.1.71cfe3da9d812
curl@8.11.1-r0
8.12.0-r0
1
ghcr.io/radar-base/radar-rest-source-auth/radar-rest-source-authorizer:4.4.153e096497f7db
curl@8.11.1-r0
8.12.0-r0
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
curl@8.11.1-r0
8.12.0-r0
1
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
curl@8.5.0-r0
8.12.0-r0
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
curl@8.10.1-r0
8.12.0-r0
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
curl@8.11.1-r0
8.12.0-r0
1
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
curl@8.7.1-r0
8.12.0-r0
1
ghcr.io/zazuko/blueprint:v0.1.092ac2f97978e
curl@8.5.0-r0
8.12.0-r0
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
curl@8.9.0-r0
8.12.0-r0
1
quay.io/fairwinds/docker-demo:1.4.0d53cb940196c
curl@8.1.0-r0
8.12.0-r0
1
quay.io/yushiwho/sys-stats:e1f9d778c8d08b95c0b
curl@8.5.0-r0
8.12.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
curl@8.5.0-r0
8.12.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
curl@8.1.1-r1
8.12.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
curl@8.10.1-r0
8.12.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
curl@8.5.0-r0
8.12.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
curl@8.11.1-r0
8.12.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.