StackRadar

CVE-2025-0665

High

Advisory

Published 5 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
233
of 17,781 indexed, latest versions
Container images
222
deployed by those charts
Fix available
2 of 2
affected packages

curl-8.12.1-1.1 on GA media

Carried by container images the latest versions of 233 of 17,781 indexed charts deploy, on 222 images.

Affected packageAffected versionsFixed inImages
curlapk8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+15 more8.12.0-r0220
curlrpm7.60.0-lp151.5.6.18.12.1-1.12
OSV records
ALPINE-CVE-2025-0665CGA-fr6q-jchj-fq9ropenSUSE-SU-2025:14809-1
Also known as
CGA-mcvh-pjq3-m6h6

Charts affected

233 by stars
ChartLatestAffected imagesRadar Score
mnemonic-ninjagabe565Verified publisher0.5.21 of 1See more

mnemonic-ninja gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/gabe565/mnemonic-ninja:latest1fd90a9e4d04
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

686
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
curl@8.11.1-r0
8.12.0-r0

Open the chart page →

2,183
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
curl@8.1.2-r0
8.12.0-r0

Open the chart page →

11,961
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
curl@8.9.1-r1
8.12.0-r0

Open the chart page →

2,155
monitoringgaloymoney0.12.211 of 6See more

monitoring galoymoney 0.12.21

1 of the 6 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
curl@8.10.1-r0
8.12.0-r0

Open the chart page →

5,295
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
curl@8.1.2-r0
8.12.0-r0

Open the chart page →

11,961
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
curl@8.9.1-r1
8.12.0-r0

Open the chart page →

2,155
monitoringgaloymoney20.12.211 of 6See more

monitoring galoymoney2 0.12.21

1 of the 6 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
curl@8.10.1-r0
8.12.0-r0

Open the chart page →

5,295
sunflare-toolsglenndehaanVerified publisher1.1.01 of 1See more

sunflare-tools glenndehaan 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
glenndehaan/sunflare-tools:latesta5b3f1dd865d
curl@8.2.1-r0
8.12.0-r0

Open the chart page →

1,502
ingress-nginxgpg-dev4.9.01 of 2See more

ingress-nginx gpg-dev 4.9.0

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

2,316
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
curl@8.11.0-r2
8.12.0-r0

Open the chart page →

49,025
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
curl@8.9.1-r2
8.12.0-r0

Open the chart page →

2,590
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
curl@8.9.0-r0
8.12.0-r0
clsen2024/gwangju_2-3:service-a-151b1d45961cd
curl@8.9.0-r0
8.12.0-r0
clsen2024/gwangju_2-3:service-c-1efb1586c8299
curl@8.9.0-r0
8.12.0-r0

Open the chart page →

6,491
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
curl@8.9.0-r0
8.12.0-r0

Open the chart page →

4,303
hellohello-helm-world0.1.01 of 1See more

hello hello-helm-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
hngtech11/hello-world:v1f0112dc12cfb
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

652
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
curl@8.10.1-r0
8.12.0-r0

Open the chart page →

9,460
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
curl@8.9.1-r0
8.12.0-r0

Open the chart page →

3,451
cruise-controlhelm-cruise-controlVerified publisher2.1.11 of 2See more

cruise-control helm-cruise-control 2.1.1

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/kafka-cruise-control-ui:0.4.096c25035cb02
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

1,453
printserverhmediadeVerified publisher1.0.21 of 4See more

printserver hmediade 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

10,839
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
curl@8.9.1-r1
8.12.0-r0

Open the chart page →

3,614
hydrogen-webhydrogen-web0.1.101 of 1See more

hydrogen-web hydrogen-web 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
curl@8.10.1-r0
8.12.0-r0

Open the chart page →

725
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
curl@8.1.2-r0
8.12.0-r0

Open the chart page →

2,058
jenainseefrlab3.1.01 of 1See more

jena inseefrlab 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
stain/jena-fuseki:latestb1d0c96f19ad
curl@8.9.0-r0
8.12.0-r0

Open the chart page →

1,262
hetzner-dyndnsitsmethemojoVerified publisher1.4.01 of 1See more

hetzner-dyndns itsmethemojo 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
hashicorp/terraform:1.9.7b77efab1a448
curl@8.10.1-r0
8.12.0-r0

Open the chart page →

1,836
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
curl@8.1.2-r0
8.12.0-r0

Open the chart page →

5,713
organizrk8s-home-lab-repo8.1.11 of 1See more

organizr k8s-home-lab-repo 8.1.1

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
organizr/organizr:latest1ce319d73cdf
curl@8.4.0-r0
8.12.0-r0

Open the chart page →

1,533
zurgk8s-home-lab-repo1.2.11 of 1See more

zurg k8s-home-lab-repo 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
curl@8.8.0-r0
8.12.0-r0

Open the chart page →

1,733
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
curl@8.3.0-r0
8.12.0-r0

Open the chart page →

6,447
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

3,507
kloudlite-platformkloudlite1.1.51 of 3See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
curl@8.4.0-r0
8.12.0-r0

Open the chart page →

1,970
ingress-nginxkomailo-helm-charts1.0.01 of 2See more

ingress-nginx komailo-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
curl@8.10.1-r0
8.12.0-r0

Open the chart page →

1,547
installerkrateo2.7.11 of 2See more

installer krateo 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

3,236
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

2,534
ingress-nginxkubebb4.7.01 of 2See more

ingress-nginx kubebb 4.7.0

1 of the 2 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
curl@8.1.1-r1
8.12.0-r0

Open the chart page →

3,099
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
curl@8.11.0-r2
8.12.0-r0

Open the chart page →

2,299
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
curl@8.2.1-r0
8.12.0-r0

Open the chart page →

3,561
jupyterhubkubeblocksVerified publisher0.1.01 of 7See more

jupyterhub kubeblocks 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:4.5.67adeeed34a36
curl@8.2.1-r0
8.12.0-r0

Open the chart page →

7,356
lokikubeblocksVerified publisher5.39.01 of 5See more

loki kubeblocks 5.39.0

1 of the 5 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.24-alpinebe76a26e238d
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

5,841
postgres-operatorkubeblocksVerified publisher1.12.21 of 1See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
curl@8.7.1-r0
8.12.0-r0

Open the chart page →

1,554
testkube-dashboardkubeshop1.16.71 of 1See more

testkube-dashboard kubeshop 1.16.7

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
kubeshop/testkube-dashboard:1.16.748958b4126a4
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

672
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
iomesh/prepare-csi:v1.0.24206d42b92f1
curl@8.1.2-r0
8.12.0-r0

Open the chart page →

48,665
IOMeshkubesphere-stable1.2.01 of 25See more

IOMesh kubesphere-stable 1.2.0

1 of the 25 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
iomesh/prepare-csi:v1.0.3-rc0063b18afb6a1
curl@8.1.2-r0
8.12.0-r0

Open the chart page →

46,341
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivilegeddigest-pinned8f14986c54fa
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

7,802
freescoutl4gVerified publisher0.1.01 of 3See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

5,332
lambdapinglambdaping1.0.41 of 1See more

lambdaping lambdaping 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
udhos/lambdaping:1.0.46bd2cf2ac732
curl@8.11.1-r0
8.12.0-r0

Open the chart page →

1,330
qbittorrentnoxleonardo0918000.1.01 of 1See more

qbittorrentnox leonardo091800 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

1,118
qbittorrentlib42Verified publisher1.0.01 of 1See more

qbittorrent lib42 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
curl@8.0.1-r2
8.12.0-r0

Open the chart page →

2,167
locust-pluginslocust-pluginsVerified publisher0.0.42 of 3See more

locust-plugins locust-plugins 0.0.4

2 of the 3 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
curl@8.5.0-r0
8.12.0-r0
sky5367/locust-plugins-timescale:latestd3150f201471
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

7,510
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-0665.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
curl@8.5.0-r0
8.12.0-r0

Open the chart page →

3,225

Container images carrying it

222 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
curl@8.5.0-r0
8.12.0-r0
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
curl@8.5.0-r0
8.12.0-r0
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
curl@8.5.0-r0
8.12.0-r0
1
ghcr.io/pschichtel/keycloak-webhook-router:main285e226fe7f6
curl@8.11.0-r2
8.12.0-r0
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
curl@8.3.0-r0
8.12.0-r0
1
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend:0.6.2c5f1e2ca5781
curl@8.11.1-r0
8.12.0-r0
1
ghcr.io/radar-base/radar-home/radar-home:0.1.71cfe3da9d812
curl@8.11.1-r0
8.12.0-r0
1
ghcr.io/radar-base/radar-rest-source-auth/radar-rest-source-authorizer:4.4.153e096497f7db
curl@8.11.1-r0
8.12.0-r0
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
curl@8.11.1-r0
8.12.0-r0
1
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
curl@8.5.0-r0
8.12.0-r0
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
curl@8.10.1-r0
8.12.0-r0
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
curl@8.11.1-r0
8.12.0-r0
1
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
curl@8.7.1-r0
8.12.0-r0
1
ghcr.io/zazuko/blueprint:v0.1.092ac2f97978e
curl@8.5.0-r0
8.12.0-r0
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
curl@8.9.0-r0
8.12.0-r0
1
quay.io/fairwinds/docker-demo:1.4.0d53cb940196c
curl@8.1.0-r0
8.12.0-r0
1
quay.io/yushiwho/sys-stats:e1f9d778c8d08b95c0b
curl@8.5.0-r0
8.12.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
curl@8.5.0-r0
8.12.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
curl@8.1.1-r1
8.12.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
curl@8.10.1-r0
8.12.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
curl@8.5.0-r0
8.12.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
curl@8.11.1-r0
8.12.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.