StackRadar

CVE-2025-0840

High

Advisory

Published 29 Jan 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
310
of 17,787 indexed, latest versions
Container images
287
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 310 of 17,787 indexed charts deploy, on 287 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+29 more2.24-5ubuntu14.2+esm7, 2.26.1-1ubuntu1~16.04.8+esm11, 2.30-21ubuntu1~18.04.9+esm4, 2.34-6ubuntu1.10+2 more267
binutilsapk2.40-r7, 2.41-r0, 2.42-r02.40-r8, 2.41-r1, 2.42-r120
OSV records
ALPINE-CVE-2025-0840DEBIAN-CVE-2025-0840UBUNTU-CVE-2025-0840
Also known as
USN-7306-1, USN-7423-2, USN-7899-1

Charts affected

310 by stars
ChartLatestAffected imagesRadar Score
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
binutils@2.40-2
no fix listed

Open the chart page →

26,060
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
binutils@2.40-2
no fix listed

Open the chart page →

26,535
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
binutils@2.40-2
no fix listed

Open the chart page →

10,112
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
binutils@2.41-r0
2.41-r1

Open the chart page →

2,805
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
binutils@2.40-2
no fix listed

Open the chart page →

17,348
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
binutils@2.40-2
no fix listed

Open the chart page →

14,383
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
binutils@2.38-4ubuntu2.6
2.38-4ubuntu2.7

Open the chart page →

9,396
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
binutils@2.40-2
no fix listed

Open the chart page →

6,540
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
binutils@2.40-2
no fix listed

Open the chart page →

8,858
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
binutils@2.40-r7
2.40-r8

Open the chart page →

1,588

Container images carrying it

287 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ibmcom/icp-swift-sample:latestb5d8c6714dbc
binutils@2.26.1-1ubuntu1~16.04.6
2.26.1-1ubuntu1~16.04.8+esm11
1
ibmcom/microclimate-theia:lateste17bdccc5030
binutils@2.26.1-1ubuntu1~16.04.5
2.26.1-1ubuntu1~16.04.8+esm11
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
binutils@2.40-2
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.10
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
binutils@2.40-2
no fix listed
1
jacobalberty/unifi:v7.1.664a3616625dda
binutils@2.30-21ubuntu1~18.04.7
2.30-21ubuntu1~18.04.9+esm4
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
binutils@2.30-21ubuntu1~18.04.9
2.30-21ubuntu1~18.04.9+esm4
1
jacobalberty/unifi:5.10.19c409924e2463
binutils@2.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm11
1
jaedb/iris:latest048cfbf58d57
binutils@2.40-2
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.10
1
jordan/icinga2:latestf75025fe8ea8
binutils@2.40-2
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
binutils@2.38-4ubuntu2.6
2.38-4ubuntu2.7
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
binutils@2.34-6ubuntu1
2.34-6ubuntu1.10
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.10
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
binutils@2.38-4ubuntu2.6
2.38-4ubuntu2.7
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
binutils@2.38-4ubuntu2.6
2.38-4ubuntu2.7
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
binutils@2.38-4ubuntu2.6
2.38-4ubuntu2.7
1
kennethreitz/httpbin:latest599fe5e50731
binutils@2.30-21ubuntu1~18.04
2.30-21ubuntu1~18.04.9+esm4
1
kimai/kimai2:2.67.03084f1e5ecdc
binutils@2.40-2
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
binutils@2.40-2
no fix listed
1
kong/httpbin:latesta6ac46531193
binutils@2.38-4ubuntu2.6
2.38-4ubuntu2.7
1
kusionstack/kusion:v0.14.0126c8f0b0976
binutils@2.38-4ubuntu2.6
2.38-4ubuntu2.7
1
laly9999/node-app:1dd0e503913e1
binutils@2.40-2
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
binutils@2.40-2
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
binutils@2.40-2
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
binutils@2.40-2
no fix listed
1
library/node:208f693eaa7e0a
binutils@2.40-2
no fix listed
1
library/python:3.8d41127070014
binutils@2.40-2
no fix listed
1
library/sonarqube:10.0.0-communityef9723cf4fe4
binutils@2.38-4ubuntu2.2
2.38-4ubuntu2.7
1
library/varnish:7.5.04d0bb287d87b
binutils@2.40-2
no fix listed
1
library/varnish:7.3-alpine6db2c9e4c2dd
binutils@2.41-r0
2.41-r1
1
library/wordpress:6.4.3-apache8ae66efb09a2
binutils@2.40-2
no fix listed
1
librenms/librenms:24.11.00920bc9117a8
binutils@2.41-r0
2.41-r1
1
linuxserver/unifi-controller:8.0.240ae315a3a456
binutils@2.34-6ubuntu1.7
2.34-6ubuntu1.10
1
linuxserver/unifi-controller:7.3.83ab105cc50322
binutils@2.34-6ubuntu1.5
2.34-6ubuntu1.10
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.10
1
makersquad/harp-proxy:0.8.1a40dd258c527
binutils@2.40-2
no fix listed
1
martinhelmich/typo3:12.4c83a4f3fd7ae
binutils@2.40-2
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
binutils@2.40-2
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
binutils@2.40-2
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.10
1
mediagis/nominatim:4.2d0eae7b51374
binutils@2.38-4ubuntu2.5
2.38-4ubuntu2.7
1
middlewareeng/middleware:0.3.1747d880812f1
binutils@2.40-2
no fix listed
1
milvusdb/milvus:v2.2.13a3a55e1c1497
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.10
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.10
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
binutils@2.40-2
no fix listed
1
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
binutils@2.40-2
no fix listed
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
binutils@2.42-r0
2.42-r1
1
moreillon/api-proxy:latestd7d4a5463525
binutils@2.40-2
no fix listed
1
moreillon/food-manager:lateste8fd856e593d
binutils@2.40-2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.