StackRadar

CVE-2025-10060

High

Advisory

Published 19 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
19
of 17,781 indexed, latest versions
Container images
10
deployed by those charts
Fix available
2 of 2
affected packages

MongoDB may be susceptible to Invariant Failure in Transactions due Upsert Operation

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 10 images.

Affected packageAffected versionsFixed inImages
mongodbbitnami6.0.4-1, 6.0.8-1, 6.0.10-1, 6.0.12+6 more6.0.2510
MongoDB (R)bitnami6.0.8, 6.0.10, 7.0.5-3, 7.0.8-16.0.254
OSV records
BIT-mongodb-2025-10060

Charts affected

19 by stars
ChartLatestAffected imagesRadar Score
rocketchatrocketchat-server7.0.21 of 12See more

rocketchat rocketchat-server 7.0.2

1 of the 12 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
mongodb@6.0.10-1
MongoDB (R)@6.0.10
6.0.25
6.0.25

Open the chart page →

12,279
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
mongodb@6.0.10-1
MongoDB (R)@6.0.10
6.0.25
6.0.25

Open the chart page →

10,622
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
mongodb@7.0.14-1
6.0.25

Open the chart page →

14,956
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
ilum/mongodb:6.0.542b6d774c37d
mongodb@6.0.12
6.0.25

Open the chart page →

23,228
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
mongodb@6.0.10-1
MongoDB (R)@6.0.10
6.0.25
6.0.25

Open the chart page →

28,534
ilum-coreilumOfficialVerified publisher6.7.31 of 5See more

ilum-core ilum 6.7.3

1 of the 5 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
ilum/mongodb:6.0.542b6d774c37d
mongodb@6.0.12
6.0.25

Open the chart page →

3,556
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
mongodb@6.0.10-1
MongoDB (R)@6.0.10
6.0.25
6.0.25

Open the chart page →

13,738
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
mongodb@8.0.10-1
6.0.25

Open the chart page →

4,238
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.5-debian-11-r66fe59ed5d79f
mongodb@7.0.5-3
MongoDB (R)@7.0.5-3
6.0.25
6.0.25

Open the chart page →

12,907
fllocaloperationsassist-iot-fl-local-operations1.1.01 of 3See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
assistiot/fl_repository_db:latestad8f72108636
mongodb@6.0.8-1
MongoDB (R)@6.0.8
6.0.25
6.0.25

Open the chart page →

3,786
flrepositorydbassist-iot-fl-repository1.1.01 of 2See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
assistiot/fl_repository_db:latestad8f72108636
mongodb@6.0.8-1
MongoDB (R)@6.0.8
6.0.25
6.0.25

Open the chart page →

4,367
mongodbcowboysysopVerified publisher15.1.51 of 1See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
mongodb@7.0.8-1
MongoDB (R)@7.0.8-1
6.0.25
6.0.25

Open the chart page →

6,161
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
mongodb@6.0.10-1
MongoDB (R)@6.0.10
6.0.25
6.0.25

Open the chart page →

22,589
camera-viewermoreillonVerified publisher0.2.11 of 4See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
mongodb@6.0.4-1
6.0.25

Open the chart page →

11,643
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
mongodb@6.0.4-1
6.0.25

Open the chart page →

8,556
mqtt-loggermoreillonVerified publisher0.3.11 of 5See more

mqtt-logger moreillon 0.3.1

1 of the 5 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
mongodb@6.0.4-1
6.0.25

Open the chart page →

10,959
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
mongodb@6.0.10-1
MongoDB (R)@6.0.10
6.0.25
6.0.25

Open the chart page →

25,704
mongodbpetersandor14.1.81 of 1See more

mongodb petersandor 14.1.8

1 of the 1 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnami/mongodb:8.0.8b3bd5b6be9a0
mongodb@8.0.8-0
6.0.25

Open the chart page →

4,109
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-10060.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
mongodb@8.0.11-0
6.0.25

Open the chart page →

5,066

Container images carrying it

10 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
mongodb@6.0.10-1
MongoDB (R)@6.0.10
6.0.25
6.0.25
6
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
mongodb@6.0.4-1
6.0.25
3
assistiot/fl_repository_db:latestad8f72108636
mongodb@6.0.8-1
MongoDB (R)@6.0.8
6.0.25
6.0.25
2
ilum/mongodb:6.0.542b6d774c37d
mongodb@6.0.12
6.0.25
2
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
mongodb@7.0.14-1
6.0.25
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
mongodb@7.0.8-1
MongoDB (R)@7.0.8-1
6.0.25
6.0.25
1
bitnamilegacy/mongodb:7.0.5-debian-11-r66fe59ed5d79f
mongodb@7.0.5-3
MongoDB (R)@7.0.5-3
6.0.25
6.0.25
1
bitnamilegacy/mongodb:latestb0652af9c8d0
mongodb@8.0.11-0
6.0.25
1
bitnami/mongodb:8.0.8b3bd5b6be9a0
mongodb@8.0.8-0
6.0.25
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
mongodb@8.0.10-1
6.0.25
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.