CVE-2025-0938

Medium

Advisory

Published 31 Jan 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.8; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 559; of 17,787 indexed, latest versions
Container images: 570; deployed by those charts
Fix available: 15 of 15; affected packages

Red Hat Security Advisory: python3.9 security update

Carried by container images the latest versions of 559 of 17,787 indexed charts deploy, on 570 images.

Affected package	Affected versions	Fixed in	Images
python3rpm	3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+22 more	0:3.6.8-74.el8_10	130
python3.9rpm	3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+6 more	0:3.9.21-2.el9	20
python3.11rpm	3.11.7-1.el9, 3.11.7-1.el9_4.5	0:3.11.11-2.el9	2
python3.12rpm	3.12.5-2.el9_5.2	0:3.12.9-1.el9	1
python3.11deb	3.11.0~rc1-1~22.04, 3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3+2 more	3.11.0~rc1-1~22.04.1~esm3, 3.11.2-6+deb12u6	106
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+10 more	3.8.10-0ubuntu1~20.04.16	96
python3apk	3.11.3-r10, 3.11.4-r0, 3.11.5-r0, 3.11.6-r0+11 more	3.11.12-r0, 3.12.9-r0	59
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more	2.7.6-8ubuntu0.6+esm28, 2.7.12-1ubuntu0~16.04.18+esm16, 2.7.17-1~18.04ubuntu1.13+esm11, 2.7.18-1~20.04.7+esm7+1 more	54
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+10 more	3.10.12-1~22.04.9	48
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	3.6.9-1~18.04ubuntu1.13+esm4	44
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	3.5.2-2ubuntu0~16.04.13+esm16	25
python3.12deb	3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4	3.12.3-1ubuntu0.5	9
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	3.4.3-1ubuntu1~14.04.7+esm15	7
pythonbitnami	3.11.11-0, 3.12.8-0	3.9.22	2
python-3.12apk	3.12.0-r1	3.12.9-r0	1

OSV records: ALPINE-CVE-2025-0938 BIT-python-2025-0938 CGA-h8w3-v52w-xgr3 DEBIAN-CVE-2025-0938 RHSA-2025:6977 RHSA-2025:7107 RHSA-2025:7109 RHSA-2026:5588 RLSA-2025:6977 UBUNTU-CVE-2025-0938
Also known as: BIT-libpython-2025-0938, BIT-python-min-2025-0938, CGA-mmh7-3wrq-48mh, PSF-2025-1, USN-7280-1, USN-7280-2, USN-7280-3, USN-7348-1, USN-7348-2

Charts affected

559 by stars

Chart

Latest

Affected images

Radar Score

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.16

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2025-0938.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.16
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	python3@3.6.8-37.el8	0:3.6.8-74.el8_10

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

2 of 2 See more

emissary-ingress wenerme 8.12.2

2 of the 2 container images this version deploys carry CVE-2025-0938.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	python3@3.11.11-r0	3.11.12-r0
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	3.6.9-1~18.04ubuntu1.13+esm4

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-0938.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.16

Open the chart page →

15,230

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	python3@3.6.8-41.el8	0:3.6.8-74.el8_10

Open the chart page →

6,138

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-0938.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.9

Open the chart page →

9,248

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.9

Open the chart page →

14,100

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-0938.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	python3@3.6.8-41.el8	0:3.6.8-74.el8_10

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	python3@3.6.8-48.el8_7	0:3.6.8-74.el8_10

Open the chart page →

6,016

Container images carrying it

570 by charts deploying them

A fixed version is listed for 15 of the 15 affected packages.

Container image	Digest	Package	Fixed in	Used by
linuxserver/calibre :version-v5.21.0	a847b5b2d860	python2.7@2.7.17-1~18.04ubuntu1.6 python3.6@3.6.9-1~18.04ubuntu1.4	2.7.17-1~18.04ubuntu1.13+esm11 3.6.9-1~18.04ubuntu1.13+esm4	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	python3.8@3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.16	1
linuxserver/codimd :latest	b801bbcf6386	python2.7@2.7.17-1~18.04ubuntu1.2	2.7.17-1~18.04ubuntu1.13+esm11	1
linuxserver/deluge :18.04.1	0ac871624394	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13+esm4	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13+esm4	1
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13+esm4	1
linuxserver/yq :3.2.2	6f5b9586a93e	python3@3.11.5-r0	3.11.12-r0	1
logiqai/flash :v3.10.2	65b996bc7bdc	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u6	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.16	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13+esm4	1
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	python2.7@2.7.18-1~20.04.1 python3.8@3.8.10-0ubuntu1~20.04.2	2.7.18-1~20.04.7+esm7 3.8.10-0ubuntu1~20.04.16	1
makersquad/harp-proxy :0.8.1	a40dd258c527	python3.11@3.11.2-6+deb12u5	3.11.2-6+deb12u6	1
mediagis/nominatim :3.7	c15e941485ef	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.16	1
mediagis/nominatim :4.2	d0eae7b51374	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.9	1
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	python3@3.6.8-41.el8	0:3.6.8-74.el8_10	1
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	python3.11@3.11.2-6+deb12u5	3.11.2-6+deb12u6	1
mlikiowa/napcat-docker :latest	1336a777f9a4	python3.10@3.10.12-1~22.04.6	3.10.12-1~22.04.9	1
moonrailgun/tianji :1.11.2	b528c8f8fcc4	python3@3.12.3-r1	3.12.9-r0	1
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	python3.11@3.11.2-6	3.11.2-6+deb12u6	1
mshanley80/httpbin2022 :latest	5b189a70c0fb	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.16	1
muhammedgamal/fp23 :latest	74b4cd69b6fa	python3.11@3.11.2-6	3.11.2-6+deb12u6	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	2.7.12-1ubuntu0~16.04.18+esm16 3.5.2-2ubuntu0~16.04.13+esm16	1
netboxcommunity/netbox :v3.2.8	3d652dca5351	python3.10@3.10.4-3ubuntu0.1	3.10.12-1~22.04.9	1
nodered/node-red :3.0.2-18	e2632a7a35dd	python3@3.11.6-r1	3.11.12-r0	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	python3@3.12.7-r0	3.12.9-r0	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	python3.11@3.11.2-6+deb12u2	3.11.2-6+deb12u6	1
omecproject/c3po-hssdb :master-latest	28a90cc26716	python2.7@2.7.18-1~20.04.1	2.7.18-1~20.04.7+esm7	1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	python3.6@3.6.9-1~18.04	3.6.9-1~18.04ubuntu1.13+esm4	1
omecproject/onos-progran :1.0.0	5715e5648aa0	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	2.7.12-1ubuntu0~16.04.18+esm16 3.5.2-2ubuntu0~16.04.13+esm16	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	python2.7@2.7.12-1ubuntu0~16.04.4 python3.5@3.5.2-2ubuntu0~16.04.5	2.7.12-1ubuntu0~16.04.18+esm16 3.5.2-2ubuntu0~16.04.13+esm16	1
opea/codegen-ui :1.0	2bee4eb66f3e	python3.11@3.11.2-6	3.11.2-6+deb12u6	1
opea/codetrans-ui :1.0	3ef121f34610	python3.11@3.11.2-6	3.11.2-6+deb12u6	1
opea/docsum-ui :1.0	7f854e9bffaf	python3.11@3.11.2-6	3.11.2-6+deb12u6	1
opea/speecht5 :1.0	249afad3d268	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u6	1
openbas/caldera-server :5.1.0	a277796d9724	python3.11@3.11.2-6+deb12u5	3.11.2-6+deb12u6	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	python3.6@3.6.7-1~18.04	3.6.9-1~18.04ubuntu1.13+esm4	1
opendatacube/restcube :latest	91870111837c	python3.6@3.6.7-1~18.04	3.6.9-1~18.04ubuntu1.13+esm4	1
opendatacube/wms :latest	1b90cdf68831	python3.6@3.6.7-1~18.04	3.6.9-1~18.04ubuntu1.13+esm4	1
openelevation/open-elevation :latest	82fb21612e86	python3.8@3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.16	1
openkm/openkm-ce :6.3.11	3bc465a7461b	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.16	1
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	python3@3.11.9-r0	3.11.12-r0	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.16	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.16	1
openthread/otbr :latest	f307f59f6432	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	2.7.17-1~18.04ubuntu1.13+esm11 3.6.9-1~18.04ubuntu1.13+esm4	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	python2.7@2.7.17-1~18.04ubuntu1.2	2.7.17-1~18.04ubuntu1.13+esm11	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	python3.4@3.4.3-1ubuntu1~14.04.6	3.4.3-1ubuntu1~14.04.7+esm15	1
owncloud/server :10.15.0	51d9b74fc2a8	python3.8@3.8.10-0ubuntu1~20.04.11	3.8.10-0ubuntu1~20.04.16	1
penpotapp/backend :2.2.1	47853d9bb9dd	python3.10@3.10.12-1~22.04.6	3.10.12-1~22.04.9	1
penpotapp/exporter :2.2.1	5c835ffd87ab	python3.10@3.10.12-1~22.04.6	3.10.12-1~22.04.9	1
phan2410/dummy-service :0.0.8	9c6ed6de26ca	python3.11@3.11.2-6+deb12u5	3.11.2-6+deb12u6	1