CVE-2025-10148
MediumAdvisory
Published 12 Sept 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.005
- 41st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 589
- of 17,781 indexed, latest versions
- Container images
- 603
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 589 of 17,781 indexed charts deploy, on 603 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 1:8.14.1-2+deb13u3+e1, 7.88.1-10, 7.88.1-10+deb12u1, 7.88.1-10+deb12u4+13 more | 7.88.1-10+deb12u15, 8.5.0-2ubuntu10.7, 8.14.1-2+deb13u1, 8.14.1-2+e1+1 more | 461 |
| curlapk | 8.11.0-r2, 8.11.1-r0, 8.12.0-r0, 8.12.1-r0+4 more | 8.14.1-r2, 8.16.0-r0 | 142 |
- OSV records
- ALPINE-CVE-2025-10148DEBIAN-CVE-2025-10148UBUNTU-CVE-2025-10148ECHO-0bd8-fe65-a70f
- Also known as
- USN-8062-1
Charts affected
589 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| infrahubinfrahubVerified publisher | 4.33.2 | 1 of 5See more | 10,428 |
| kubeflowkubeflow | 1.6.2 | 1 of 45See more | 96,941 |
| librechatlibrechat | 1.8.10 | 1 of 3See more | 2,654 |
| radarrloeken-at-homeVerified publisher | 5.27.0-nightly | 1 of 1See more | 586 |
| headplanenbcloudVerified publisher | 0.1.2 | 1 of 4See more | 7,949 |
| open5gsopen5gsVerified publisher | 2.3.4 | 1 of 5See more | 9,261 |
| steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher | 0.13.1 | 2 of 2See more | 5,468 |
| uffizzi-appuffizzi-app | 1.3.0 | 1 of 14See more | 19,337 |
| reposilitevolker-raschekVerified publisher | 1.0.0 | 1 of 1See more | 2,957 |
| grafana-pdf-exporterwiremindVerified publisher | 2.1.1 | 1 of 1See more | 9,746 |
| certscertsVerified publisher | 2.1.3 | 1 of 1See more | 695 |
| collabora-codechrisingenhaag | 2.6.0 | 1 of 1See more | 4,180 |
| coder-observabilitycoder-observabilityVerified publisher | 0.7.3 | 1 of 21See more | 24,700 |
| convertigoconvertigoOfficialVerified publisher | 8.4.3 | 2 of 5See more | 17,404 |
| cosmocosmo-platformOfficialVerified publisher | 0.20.0 | 2 of 10See more | 28,839 |
| zabbix-kubernetes-discoverydjerfyVerified publisher | 1.4.20 | 1 of 1See more | 4,147 |
| zabbix-agentfermosit | 0.0.5 | 1 of 1See more | 2,369 |
| healthchecksgabe565Verified publisher | 0.17.0 | 1 of 1See more | 2,286 |
| infrahub-enterpriseinfrahub-enterpriseVerified publisher | 4.19.2 | 1 of 5See more | 10,530 |
| dayz-dedicated-serverjespernohrVerified publisher | 0.1.2 | 1 of 3See more | 4,309 |
| kubecostmesosphere-stable | 0.37.5 | 1 of 9See more | 17,693 |
| gateway-apinicklasfrahm-gateway-apiVerified publisher | 0.2.0 | 1 of 1See more | 1,257 |
| openclaw-with-brainopenclaw-with-brainVerified publisher | 0.1.67 | 2 of 3See more | 5,218 |
| qgis-serverqgis-serverVerified publisher | 0.1.10 | 1 of 3See more | 5,435 |
| rocketmq-clusterrocketmq | 12.6.0 | 1 of 2See more | 6,328 |
| lldapself-hosters-by-nightVerified publisher | 0.5.2 | 1 of 2See more | 3,400 |
| skypilotskypilotOfficialVerified publisher | 0.13.0 | 1 of 3See more | 5,852 |
| kafka-chartsoldevelo-kafka-chart | 32.4.4 | 1 of 1See more | 2,355 |
| repmanszpadel-chartsVerified publisher | 3.52.17 | 1 of 3See more | 7,052 |
| structurizrvirtualrootVerified publisher | 0.5.0 | 1 of 1See more | 4,378 |
| agentareaagentareaVerified publisher | 0.0.18 | 2 of 16See more | 14,914 |
| upcloud-csiankra-chartsVerified publisher | 0.4.0 | 1 of 8See more | 14,917 |
| argocd-backup-s3argocd-backup-s3Verified publisher | 0.9.5 | 1 of 1See more | 5,222 |
| aramid-indexerbiatec-repoVerified publisher | 3.9.0 | 1 of 5See more | 13,357 |
| aramid-relaybiatec-repoVerified publisher | 4.4.1 | 1 of 1See more | 5,059 |
| cbioportalcbioportalOfficialVerified publisher | 1.1.0 | 1 of 1See more | 3,674 |
| cert-vaultcert-vaultOfficialVerified publisher | 2.12.0 | 1 of 7See more | 15,863 |
| passbolt-hachristianhuthVerified publisher | 6.0.1 | 1 of 4See more | 10,817 |
| squestchristianhuthVerified publisher | 6.6.7 | 1 of 4See more | 9,971 |
| typo3christianhuthVerified publisher | 7.7.0 | 1 of 2See more | 8,466 |
| cluster-setupcluster-setup | 1.5.0 | 1 of 8See more | 10,037 |
| commonground-gatewaycommonground-gateway | 1.5.4 | 1 of 7See more | 9,724 |
| paperless-ngxcrystalnetVerified publisher | 0.2.22 | 1 of 3See more | 13,761 |
| data-fairdata354-helmVerified publisher | 1.1.2 | 1 of 12See more | 38,346 |
| datacube-explorerdatacube-charts | 0.5.32 | 1 of 1See more | 4,854 |
| dbrepodbrepo | 1.13.3 | 4 of 25See more | 52,635 |
| dragonfly-stackdragonflyVerified publisher | 0.1.2 | 1 of 7See more | 18,376 |
| rstudiodsri-helm-charts | 0.1.28 | 1 of 1See more | 5,670 |
| elchi-stackelchi | 1.13.0 | 1 of 10See more | 15,383 |
| enbuildenbuildVerified publisher | 0.0.50 | 1 of 6See more | 31,510 |
Container images carrying it
603 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 9e635efba431 | curl | 7.88.1-10+deb12u15 | 6 |
| pnnlmiscscripts/ | cfbc9b70cbf8 | curl | 8.14.1-r2 | 6 |
| quay.io/ | 95d6f0e05636 | curl | 7.88.1-10+deb12u15 | 6 |
| bitnamilegacy/ | c74b703deed2 | curl | 7.88.1-10+deb12u15 | 5 |
| flaresolverr/ | 139dfee1c6f8 | curl | 7.88.1-10+deb12u15 | 5 |
| bitnamilegacy/ | fac502149c40 | curl | 7.88.1-10+deb12u15 | 4 |
| library/ | 287ff321f9e3 | curl | 7.88.1-10+deb12u15 | 4 |
| bitnamilegacy/ | cd354d5b2556 | curl | 7.88.1-10+deb12u15 | 3 |
| bitnamilegacy/ | 77e65e9d633e | curl | 7.88.1-10+deb12u15 | 3 |
| gchq/ | 5ec58edbb2db | curl | 8.5.0-2ubuntu10.7 | 3 |
| guacamole/ | f344085e618b | curl | 8.5.0-2ubuntu10.7 | 3 |
| library/ | a484819eb602 | curl | 7.88.1-10+deb12u15 | 3 |
| ghcr.io/ | 6a5594b7b32c | curl | 7.88.1-10+deb12u15 | 3 |
| quay.io/ | 6545dac92173 | curl | 7.88.1-10+deb12u15 | 3 |
| quay.io/ | 709c7da19c5a | curl | 7.88.1-10+deb12u15 | 3 |
| alpine/ | 062a01ad7a0e | curl | 8.14.1-r2 | 2 |
| apache/ | 319cd8a81ed1 | curl | 8.5.0-2ubuntu10.7 | 2 |
| apache/ | ae0b86d3c4d0 | curl | 8.5.0-2ubuntu10.7 | 2 |
| bitnamilegacy/ | 00176a47afa0 | curl | 7.88.1-10+deb12u15 | 2 |
| bitnamilegacy/ | f12387ec882b | curl | 7.88.1-10+deb12u15 | 2 |
| cfssl/ | c9018c2ddf0b | curl | 7.88.1-10+deb12u15 | 2 |
| excalidraw/ | f7ee194addd6 | curl | 8.14.1-r2 | 2 |
| gjeanmart/ | 926264c8f2d1 | curl | 7.88.1-10+deb12u15 | 2 |
| grafana/ | d8ea37798ccc | curl | 8.14.1-r2 | 2 |
| jenkins/ | b470bcdc4ecd | curl | 7.88.1-10+deb12u15 | 2 |
| kurento/ | 03c0d34d0828 | curl | 8.5.0-2ubuntu10.7 | 2 |
| library/ | b8d940ca9376 | curl | 7.88.1-10+deb12u15 | 2 |
| library/ | 98f8ec75657d | curl | 7.88.1-10+deb12u15 | 2 |
| library/ | 6e75aa8f767c | curl | 7.88.1-10+deb12u15 | 2 |
| library/ | eedf63967cdb | curl | 7.88.1-10+deb12u15 | 2 |
| louislam/ | 917318f9d7be | curl | 7.88.1-10+deb12u15 | 2 |
| louislam/ | 9aeb4e51d038 | curl | 7.88.1-10+deb12u15 | 2 |
| louislam/ | a8610b3b4c38 | curl | 7.88.1-10+deb12u15 | 2 |
| moreillon/ | c9f85db3baa5 | curl | 7.88.1-10+deb12u15 | 2 |
| moreillon/ | e1c9bfab5c16 | curl | 7.88.1-10+deb12u15 | 2 |
| moreillon/ | b067dbbbb6af | curl | 7.88.1-10+deb12u15 | 2 |
| nginxinc/ | 65e3e85dbaed | curl | 8.14.1-r2 | 2 |
| opencloudeu/ | f9634bb04905 | curl | 8.14.1-r2 | 2 |
| opencloudeu/ | 1691ad6612a3 | curl | 7.88.1-10+deb12u15 | 2 |
| opencloudeu/ | 27cb9b952f0d | curl | 7.88.1-10+deb12u15 | 2 |
| opencloudeu/ | 5b176baa3694 | curl | 7.88.1-10+deb12u15 | 2 |
| opencloudeu/ | 6e8b2df6c5a4 | curl | 7.88.1-10+deb12u15 | 2 |
| opencloudeu/ | 82f888a34440 | curl | 7.88.1-10+deb12u15 | 2 |
| opencloudeu/ | e0ac35a9576e | curl | 7.88.1-10+deb12u15 | 2 |
| opendatacube/ | 668cbb41473c | curl | 8.5.0-2ubuntu10.7 | 2 |
| qichenxu4pd/ | f3a8502bc21b | curl | 7.88.1-10+deb12u15 | 2 |
| quickwit/ | 363ff56ce456 | curl | 7.88.1-10+deb12u15 | 2 |
| rajnandan1/ | 30407afca731 | curl | 7.88.1-10+deb12u15 | 2 |
| uffizzi/ | 0344805f267b | curl | 7.88.1-10+deb12u15 | 2 |
| uselagoon/ | 2c89ed939b8b | curl | 8.14.1-r2 | 2 |