StackRadar

CVE-2025-0938

Medium

Advisory

Published 31 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
559
of 17,781 indexed, latest versions
Container images
570
deployed by those charts
Fix available
15 of 15
affected packages

Red Hat Security Advisory: python3.9 security update

Carried by container images the latest versions of 559 of 17,781 indexed charts deploy, on 570 images.

Affected packageAffected versionsFixed inImages
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+22 more0:3.6.8-74.el8_10130
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+6 more0:3.9.21-2.el920
python3.11rpm3.11.7-1.el9, 3.11.7-1.el9_4.50:3.11.11-2.el92
python3.12rpm3.12.5-2.el9_5.20:3.12.9-1.el91
python3.11deb3.11.0~rc1-1~22.04, 3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3+2 more3.11.0~rc1-1~22.04.1~esm3, 3.11.2-6+deb12u6106
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+10 more3.8.10-0ubuntu1~20.04.1696
python3apk3.11.3-r10, 3.11.4-r0, 3.11.5-r0, 3.11.6-r0+11 more3.11.12-r0, 3.12.9-r059
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more2.7.6-8ubuntu0.6+esm28, 2.7.12-1ubuntu0~16.04.18+esm16, 2.7.17-1~18.04ubuntu1.13+esm11, 2.7.18-1~20.04.7+esm7+1 more54
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+10 more3.10.12-1~22.04.948
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more3.6.9-1~18.04ubuntu1.13+esm444
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.13+esm1625
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.43.12.3-1ubuntu0.59
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm157
pythonbitnami3.11.11-0, 3.12.8-03.9.222
python-3.12apk3.12.0-r13.12.9-r01
OSV records
ALPINE-CVE-2025-0938BIT-python-2025-0938CGA-h8w3-v52w-xgr3DEBIAN-CVE-2025-0938RHSA-2025:6977RHSA-2025:7107RHSA-2025:7109RHSA-2026:5588RLSA-2025:6977UBUNTU-CVE-2025-0938
Also known as
BIT-libpython-2025-0938, BIT-python-min-2025-0938, CGA-mmh7-3wrq-48mh, PSF-2025-1, USN-7280-1, USN-7280-2, USN-7280-3, USN-7348-1, USN-7348-2

Charts affected

559 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.02 of 4See more

airflow airflow-helm 8.9.0

2 of the 4 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
python3.11@3.11.2-6
3.11.2-6+deb12u6
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
python3@3.11.9-r0
3.11.12-r0

Open the chart page →

11,367
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
python3@3.6.8-41.el8
0:3.6.8-74.el8_10

Open the chart page →

7,713
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
python3.10@3.10.4-3ubuntu0.1
3.10.12-1~22.04.9

Open the chart page →

9,145
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.16

Open the chart page →

32,259
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
python3.11@3.11.2-6+deb12u4
3.11.2-6+deb12u6

Open the chart page →

10,622
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm16
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm16

Open the chart page →

23,964
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
python3.10@3.10.4-3ubuntu0.1
3.10.12-1~22.04.9

Open the chart page →

33,725
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python2.7@2.7.17-1~18.04ubuntu1.2
2.7.17-1~18.04ubuntu1.13+esm11

Open the chart page →

15,592
plane-cemakeplaneOfficialVerified publisher1.8.11 of 11See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
library/rabbitmq:3.13.6-management-alpine611107e29cce
python3@3.12.3-r1
3.12.9-r0

Open the chart page →

4,854
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.9

Open the chart page →

10,670
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
python3.8@3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.16

Open the chart page →

18,509
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
python3@3.6.8-56.el8_9
0:3.6.8-74.el8_10

Open the chart page →

6,675
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16
stackstorm/st2api:3.86f56d239d280
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16
stackstorm/st2auth:3.833ecfda16608
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16
stackstorm/st2notifier:3.8f190a6212195
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16
stackstorm/st2rulesengine:3.8259503496ff9
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16
stackstorm/st2scheduler:3.8b1de2055c362
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16
stackstorm/st2sensorcontainer:3.8b1a338f64773
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16
stackstorm/st2stream:3.81c8904a3bf67
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16
stackstorm/st2timersengine:3.81bf35bfaf00c
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16
stackstorm/st2workflowengine:3.819fdfffdbba8
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.16

Open the chart page →

96,419
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
supabase/storage-api:v1.12.0f983fb50bd95
python3@3.12.7-r0
3.12.9-r0
supabase/studio:20241021-9f9b08326d8070c55e9
python3.11@3.11.2-6+deb12u3
3.11.2-6+deb12u6

Open the chart page →

23,123
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
python3.11@3.11.2-6
3.11.2-6+deb12u6

Open the chart page →

8,493
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.16

Open the chart page →

11,405
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
3.11.2-6+deb12u6

Open the chart page →

32,902
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
openmined/syft-seaweedfs:0.9.53a4144c0bb82
python3@3.11.9-r0
3.11.12-r0

Open the chart page →

17,245
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.16

Open the chart page →

11,782
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.1.01 of 3See more

tbmq-cluster tbmq-helm-chart 2.1.0

1 of the 3 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
thingsboard/toolbox:1.13.01bd61a0da6d3
python3@3.11.10-r1
3.11.12-r0

Open the chart page →

3,534
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
python3.8@3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.16

Open the chart page →

30,668
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
python3@3.6.8-56.el8_9.3
0:3.6.8-74.el8_10

Open the chart page →

9,868
codercoderOfficialVerified publisher1.44.62 of 2See more

coder coder 1.44.6

2 of the 2 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
python3@3.6.8-56.el8_9.3
0:3.6.8-74.el8_10
coderenvs/timescale:1.44.676fd37fe6830
python3@3.6.8-56.el8_9.3
0:3.6.8-74.el8_10

Open the chart page →

6,849
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
python3@3.12.8-r1
3.12.9-r0

Open the chart page →

4,531
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
python3.10@3.10.6-1~22.04.2ubuntu1.1
3.10.12-1~22.04.9

Open the chart page →

4,903
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
python3@3.11.4-r0
3.11.12-r0

Open the chart page →

2,709
nfs-serverobeoneVerified publisher1.1.51 of 1See more

nfs-server obeone 1.1.5

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
python3@3.11.10-r1
3.11.12-r0

Open the chart page →

228
servarrservarr1.0.22 of 10See more

servarr servarr 1.0.2

2 of the 10 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
dinutac/jinja2docker:2.1.89340dde8a8a4
python3@3.11.6-r1
3.11.12-r0
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
python3@3.11.6-r1
3.11.12-r0

Open the chart page →

14,238
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
python@3.11.11-0
3.9.22

Open the chart page →

16,210
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
python3.11@3.11.2-6
3.11.2-6+deb12u6

Open the chart page →

14,240
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
python3.8@3.8.5-1~20.04
3.8.10-0ubuntu1~20.04.16

Open the chart page →

52,919
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
python3.11@3.11.2-6+deb12u2
3.11.2-6+deb12u6

Open the chart page →

12,170
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
python3@3.6.8-48.el8_7
0:3.6.8-74.el8_10

Open the chart page →

4,652
kubeflowkubeflow1.6.22 of 45See more

kubeflow kubeflow 1.6.2

2 of the 45 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm4
library/python:3.7eedf63967cdb
python3.11@3.11.2-6
3.11.2-6+deb12u6

Open the chart page →

96,941
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
python3.11@3.11.2-6
3.11.2-6+deb12u6

Open the chart page →

19,337
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
python3.11@3.11.2-6
3.11.2-6+deb12u6

Open the chart page →

9,746
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
python3@3.6.8-24.el8_2.2
0:3.6.8-74.el8_10

Open the chart page →

9,052
cga-proxybarracuda-cga-helm-charts0.2.121 of 2See more

cga-proxy barracuda-cga-helm-charts 0.2.12

1 of the 2 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
fydeinc/envoyproxy:1.13.8.29fadb0a491db
python3@3.11.6-r0
3.11.12-r0

Open the chart page →

1,052
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
python3.8@3.8.10-0ubuntu1~20.04.8
3.8.10-0ubuntu1~20.04.16

Open the chart page →

7,960
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
python3.9@3.9.18-3.el9_4.3
0:3.9.21-2.el9

Open the chart page →

7,450
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
python3.11@3.11.2-6+deb12u4
3.11.2-6+deb12u6

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u6

Open the chart page →

28,839
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.5

Open the chart page →

4,147
openshift-secured-appeximiaitVerified publisher0.5.01 of 1See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
python3@3.6.8-47.el8_6.2
0:3.6.8-74.el8_10

Open the chart page →

12,042
openshift-secured-pgadmineximiaitVerified publisher0.2.02 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

2 of the 2 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
python3@3.11.4-r0
3.11.12-r0
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
python3@3.6.8-47.el8_6.2
0:3.6.8-74.el8_10

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
python3@3.6.8-47.el8_6.2
0:3.6.8-74.el8_10

Open the chart page →

13,874
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
python2.7@2.7.17-1~18.04ubuntu1.6
python3.6@3.6.9-1~18.04ubuntu1.4
2.7.17-1~18.04ubuntu1.13+esm11
3.6.9-1~18.04ubuntu1.13+esm4

Open the chart page →

22,773
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.16

Open the chart page →

10,598
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.16

Open the chart page →

10,154
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2025-0938.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
python3.8@3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.16

Open the chart page →

10,628

Container images carrying it

570 by charts deploying them

A fixed version is listed for 15 of the 15 affected packages.

Container imageDigestPackageFixed inUsed by
voltha/voltha-envoy:1.6.059ab2a00f712
python3.4@3.4.3-1ubuntu1~14.04.5
3.4.3-1ubuntu1~14.04.7+esm15
1
voltha/voltha-netconf:1.6.037f80524c207
python2.7@2.7.12-1ubuntu0~16.04.3
2.7.12-1ubuntu0~16.04.18+esm16
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python2.7@2.7.12-1ubuntu0~16.04.3
2.7.12-1ubuntu0~16.04.18+esm16
1
voltha/voltha-tester:1.7.0655c3048a602
python2.7@2.7.12-1ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm16
1
voltha/voltha-voltha:1.6.0ff596b62de59
python2.7@2.7.12-1ubuntu0~16.04.3
2.7.12-1ubuntu0~16.04.18+esm16
1
wazuh/wazuh-manager:4.4.121994f40e0da
python3.8@3.8.10-0ubuntu1~20.04.7
3.8.10-0ubuntu1~20.04.16
1
woojoong/wowza:latestec230db19652
python2.7@2.7.15~rc1-1ubuntu0.1
2.7.17-1~18.04ubuntu1.13+esm11
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.9
1
xeladock/mysql_dns:latest4baf531453f1
python3.10@3.10.4-3
3.10.12-1~22.04.9
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
python3.11@3.11.2-6+deb12u2
3.11.2-6+deb12u6
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
python3.11@3.11.2-6+deb12u2
3.11.2-6+deb12u6
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
python3.12@3.12.3-1ubuntu0.4
3.12.3-1ubuntu0.5
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
python3.8@3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.16
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
python3.10@3.10.4-3ubuntu0.1
3.10.12-1~22.04.9
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm16
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm16
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
python3.12@3.12.5-2.el9_5.2
0:3.12.9-1.el9
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
python3.9@3.9.21-1.el9_5
0:3.9.21-2.el9
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
python3.11@3.11.2-6+deb12u3
3.11.2-6+deb12u6
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
python3.11@3.11.2-6+deb12u3
3.11.2-6+deb12u6
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
python3@3.11.6-r0
3.11.12-r0
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
python3.10@3.10.12-1~22.04.7
3.10.12-1~22.04.9
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
python3.8@3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.16
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
python3.11@3.11.2-6+deb12u2
3.11.2-6+deb12u6
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u6
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
python3.11@3.11.2-6+deb12u4
3.11.2-6+deb12u6
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u6
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
python3@3.6.8-37.el8
0:3.6.8-74.el8_10
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
python3@3.6.8-37.el8
0:3.6.8-74.el8_10
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
python3@3.6.8-37.el8
0:3.6.8-74.el8_10
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
python3@3.6.8-37.el8
0:3.6.8-74.el8_10
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
python3@3.6.8-37.el8
0:3.6.8-74.el8_10
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
python3@3.11.6-r0
3.11.12-r0
1
ghcr.io/data-fair/processings:15a9216989707
python3@3.11.8-r0
3.11.12-r0
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
python3@3.12.3-r1
3.12.9-r0
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
python@3.12.8-0
3.9.22
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.5
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
python3.11@3.11.2-6
3.11.2-6+deb12u6
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm4
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
python3.11@3.11.2-6+deb12u2
3.11.2-6+deb12u6
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
python2.7@2.7.18-1~20.04.1
python3.8@3.8.10-0ubuntu1~20.04.4
2.7.18-1~20.04.7+esm7
3.8.10-0ubuntu1~20.04.16
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
python3.9@3.9.18-1.el9_3.1
0:3.9.21-2.el9
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
python3@3.6.8-23.el8
0:3.6.8-74.el8_10
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
python3.12@3.12.3-1ubuntu0.2
3.12.3-1ubuntu0.5
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
python3.6@3.6.9-1~18.04ubuntu1.12
3.6.9-1~18.04ubuntu1.13+esm4
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.5
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.5
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.16
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.16
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.16
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.