StackRadar

CVE-2025-0840

High

Advisory

Published 29 Jan 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
310
of 17,787 indexed, latest versions
Container images
287
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 310 of 17,787 indexed charts deploy, on 287 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+29 more2.24-5ubuntu14.2+esm7, 2.26.1-1ubuntu1~16.04.8+esm11, 2.30-21ubuntu1~18.04.9+esm4, 2.34-6ubuntu1.10+2 more267
binutilsapk2.40-r7, 2.41-r0, 2.42-r02.40-r8, 2.41-r1, 2.42-r120
OSV records
ALPINE-CVE-2025-0840DEBIAN-CVE-2025-0840UBUNTU-CVE-2025-0840
Also known as
USN-7306-1, USN-7423-2, USN-7899-1

Charts affected

310 by stars
ChartLatestAffected imagesRadar Score
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
binutils@2.40-2
no fix listed

Open the chart page →

26,060
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
binutils@2.40-2
no fix listed

Open the chart page →

26,535
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
binutils@2.40-2
no fix listed

Open the chart page →

10,112
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
binutils@2.41-r0
2.41-r1

Open the chart page →

2,805
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
binutils@2.40-2
no fix listed

Open the chart page →

17,348
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
binutils@2.40-2
no fix listed

Open the chart page →

14,383
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
binutils@2.38-4ubuntu2.6
2.38-4ubuntu2.7

Open the chart page →

9,396
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
binutils@2.40-2
no fix listed

Open the chart page →

6,540
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
binutils@2.40-2
no fix listed

Open the chart page →

8,858
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-0840.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
binutils@2.40-r7
2.40-r8

Open the chart page →

1,588

Container images carrying it

287 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
moreillon/group-manager:latest3caa8f710ee0
binutils@2.40-2
no fix listed
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
binutils@2.40-2
no fix listed
1
mshanley80/httpbin2022:latest5b189a70c0fb
binutils@2.34-6ubuntu1.4
2.34-6ubuntu1.10
1
muhammedgamal/fp23:latest74b4cd69b6fa
binutils@2.40-2
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
binutils@2.26.1-1ubuntu1~16.04.6
2.26.1-1ubuntu1~16.04.8+esm11
1
nodered/node-red:3.0.2-18e2632a7a35dd
binutils@2.41-r0
2.41-r1
1
oled01/automx2:2025.1.105d3e398e675
binutils@2.40-2
no fix listed
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
binutils@2.30-21ubuntu1~18.04.2
2.30-21ubuntu1~18.04.9+esm4
1
omecproject/onos-progran:1.0.05715e5648aa0
binutils@2.26.1-1ubuntu1~16.04.6
2.26.1-1ubuntu1~16.04.8+esm11
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
binutils@2.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm11
1
oneuptime/probe:release6b2d98713711
binutils@2.40-2
no fix listed
1
opea/codegen-ui:1.02bee4eb66f3e
binutils@2.40-2
no fix listed
1
opea/codetrans-ui:1.03ef121f34610
binutils@2.40-2
no fix listed
1
opea/docsum-ui:1.07f854e9bffaf
binutils@2.40-2
no fix listed
1
openbas/caldera-server:5.1.0a277796d9724
binutils@2.40-2
no fix listed
1
opendatacube/pipelines:wofs-1.225d810e8504b8
binutils@2.30-21ubuntu1~18.04
2.30-21ubuntu1~18.04.9+esm4
1
opendatacube/restcube:latest91870111837c
binutils@2.30-21ubuntu1~18.04.1
2.30-21ubuntu1~18.04.9+esm4
1
opendatacube/wms:latest1b90cdf68831
binutils@2.30-21ubuntu1~18.04.1
2.30-21ubuntu1~18.04.9+esm4
1
openelevation/open-elevation:latest82fb21612e86
binutils@2.34-6ubuntu1.1
2.34-6ubuntu1.10
1
openproject/hocuspocus:release-338001b288dc1359dfb5
binutils@2.40-2
no fix listed
1
openthread/otbr:latestf307f59f6432
binutils@2.30-21ubuntu1~18.04.9
2.30-21ubuntu1~18.04.9+esm4
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
binutils@2.30-21ubuntu1~18.04.4
2.30-21ubuntu1~18.04.9+esm4
1
phan2410/dummy-service:0.0.89c6ed6de26ca
binutils@2.40-2
no fix listed
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
binutils@2.40-2
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
binutils@2.42-4ubuntu2
2.42-4ubuntu2.4
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
binutils@2.40-2
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
binutils@2.40-2
no fix listed
1
psono/psono-server:5.0.03b974b43ea03
binutils@2.42-r0
2.42-r1
1
qumine/minecraft-server:v0.1.15c0b650d51132
binutils@2.38-4ubuntu2.1
2.38-4ubuntu2.7
1
rabeh/apibootspring:1.0941007b6946e
binutils@2.38-4ubuntu2.3
2.38-4ubuntu2.7
1
redash/redash:25.8.000d813437db5
binutils@2.40-2
no fix listed
1
redash/redash:26.3.0c5c9148f5c38
binutils@2.40-2
no fix listed
1
resouer/redis-slave:v2e2f198b49ba7
binutils@2.24-5ubuntu3.1
2.24-5ubuntu14.2+esm7
1
rezachalak/bzen-mongo:1.0.034f694325191
binutils@2.34-6ubuntu1.6
2.34-6ubuntu1.10
1
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
binutils@2.40-2
no fix listed
1
rocketadmin/rocketadmin:1.17.710955ef540b9
binutils@2.40-2
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
binutils@2.40-2
no fix listed
1
ryshe/terraria:latestb1c89f7f359a
binutils@2.40-2
no fix listed
1
santisbon/evwatcher:latestc4e994ca4540
binutils@2.40-2
no fix listed
1
santisbon/evworker:lateste807283f8d69
binutils@2.40-2
no fix listed
1
santisbon/speedtest:latest8ee3a1697227
binutils@2.40-2
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
binutils@2.40-2
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
binutils@2.30-21ubuntu1~18.04.2
2.30-21ubuntu1~18.04.9+esm4
1
seafileltd/seafile-mc:9.0.106693911bcc40
binutils@2.34-6ubuntu1.4
2.34-6ubuntu1.10
1
seafileltd/seafile-mc:10.0.170628f29c663
binutils@2.34-6ubuntu1.6
2.34-6ubuntu1.10
1
seafileltd/seafile-mc:9.0.97ac833196f60
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.10
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
binutils@2.38-4ubuntu2.6
2.38-4ubuntu2.7
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
binutils@2.34-6ubuntu1.1
2.34-6ubuntu1.10
1
seldonio/locust-core:0.81d0da98a2d76
binutils@2.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm11
1
signalen/backend:2.50.14760256000738
binutils@2.40-2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.