StackRadar

CVE-2025-10148

Medium

Advisory

Published 12 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
589
of 17,781 indexed, latest versions
Container images
603
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 589 of 17,781 indexed charts deploy, on 603 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.88.1-10, 7.88.1-10+deb12u1, 7.88.1-10+deb12u4+13 more7.88.1-10+deb12u15, 8.5.0-2ubuntu10.7, 8.14.1-2+deb13u1, 8.14.1-2+e1+1 more461
curlapk8.11.0-r2, 8.11.1-r0, 8.12.0-r0, 8.12.1-r0+4 more8.14.1-r2, 8.16.0-r0142
OSV records
ALPINE-CVE-2025-10148DEBIAN-CVE-2025-10148UBUNTU-CVE-2025-10148ECHO-0bd8-fe65-a70f
Also known as
USN-8062-1

Charts affected

589 by stars
ChartLatestAffected imagesRadar Score
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

10,428
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u15

Open the chart page →

96,941
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
curl@8.12.1-r0
8.14.1-r2

Open the chart page →

2,654
radarrloeken-at-homeVerified publisher5.27.0-nightly1 of 1See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
loeken/radarr:5.27.0-nightlya24409d3846d
curl@8.12.1-r1
8.14.1-r2

Open the chart page →

586
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

7,949
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
gradiant/open5gs-dbctl:0.10.3332031245fce
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

9,261
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.12 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

5,468
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

19,337
reposilitevolker-raschekVerified publisher1.0.01 of 1See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.5.264128c2d7a6ba
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

2,957
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u15

Open the chart page →

9,746
certscertsVerified publisher2.1.31 of 1See more

certs certs 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
mathnao/certs:2.1.3b900e6b64684
curl@8.12.1-r1
8.14.1-r2

Open the chart page →

695
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

4,180
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
grafana/grafana:10.4.19a9043254ba16
curl@8.12.1-r1
8.14.1-r2

Open the chart page →

24,700
convertigoconvertigoOfficialVerified publisher8.4.32 of 5See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
library/couchdb:3.4.22817ad50b5c5
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.02 of 10See more

cosmo cosmo-platform 0.20.0

2 of the 10 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15

Open the chart page →

28,839
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
curl@8.5.0-2ubuntu10.5
8.5.0-2ubuntu10.7

Open the chart page →

4,147
zabbix-agentfermosit0.0.51 of 1See more

zabbix-agent fermosit 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

2,369
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
curl@8.12.1-r1
8.14.1-r2

Open the chart page →

2,286
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

10,530
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
curl@8.5.0-2ubuntu10.4
8.5.0-2ubuntu10.7

Open the chart page →

4,309
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15

Open the chart page →

17,693
gateway-apinicklasfrahm-gateway-apiVerified publisher0.2.01 of 1See more

gateway-api nicklasfrahm-gateway-api 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
alpine/kubectl:1.33.32c59a3f0726c
curl@8.14.1-r1
8.14.1-r2

Open the chart page →

1,257
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.672 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

2 of the 3 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
curl@8.12.1-r1
8.14.1-r2
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

5,218
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

5,435
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

6,328
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/lldap/lldap:2025-05-193de697c3ba57
curl@8.12.1-r0
8.14.1-r2

Open the chart page →

3,400
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
curl@8.14.1-r1
8.14.1-r2

Open the chart page →

5,852
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

2,355
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15

Open the chart page →

7,052
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

4,378
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.29.15b3502a3b685
curl@8.14.1-r0
8.14.1-r2
temporalio/ui:2.39.0b768f87f18b5
curl@8.12.1-r0
8.14.1-r2

Open the chart page →

14,914
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
curl@8.14.1-r1
8.14.1-r2

Open the chart page →

14,917
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

5,222
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

13,357
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

5,059
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

3,674
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

15,863
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

10,817
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

9,971
typo3christianhuthVerified publisher7.7.01 of 2See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
martinhelmich/typo3:12.4c83a4f3fd7ae
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

8,466
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

10,037
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
curl@7.88.1-10
7.88.1-10+deb12u15

Open the chart page →

9,724
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15

Open the chart page →

13,761
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/data-fair/notify:3c739b74dabb0
curl@8.12.1-r1
8.14.1-r2

Open the chart page →

38,346
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

4,854
dbrepodbrepo1.13.34 of 25See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15

Open the chart page →

52,635
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

18,376
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

5,670
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
grafana/grafana:12.2.074144189b384
curl@8.14.1-r1
8.14.1-r2

Open the chart page →

15,383
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2025-10148.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

31,510

Container images carrying it

603 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
curl@8.14.1-r1
8.14.1-r2
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
curl@8.14.1-r1
8.14.1-r2
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
curl@8.11.1-r0
8.14.1-r2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.