StackRadar

CVE-2025-1149

Low

Advisory

Published 10 Feb 2025In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.1
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
410
of 17,781 indexed, latest versions
Container images
393
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 410 of 17,781 indexed charts deploy, on 393 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+39 moreno fix listed393
OSV records
DEBIAN-CVE-2025-1149UBUNTU-CVE-2025-1149

Charts affected

410 by stars
ChartLatestAffected imagesRadar Score
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
binutils@2.34-6ubuntu1.4
no fix listed

Open the chart page →

9,334
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
binutils@2.40-2
no fix listed

Open the chart page →

5,290
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
binutils@2.44-3
no fix listed

Open the chart page →

6,431
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
binutils@2.40-2
no fix listed

Open the chart page →

7,368
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
binutils@2.40-2
no fix listed

Open the chart page →

7,368
static-siteethersphereVerified publisher0.73.11 of 2See more

static-site ethersphere 0.73.1

1 of the 2 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
library/node:latestf5d1cc40abc1
binutils@2.44-3
no fix listed

Open the chart page →

6,851
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
binutils@2.40-2
no fix listed

Open the chart page →

10,741
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
binutils@2.44-3
no fix listed

Open the chart page →

5,039
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
binutils@2.44-3
no fix listed
fireflyiii/data-importer:version-2.2.3ab52bf932546
binutils@2.44-3
no fix listed

Open the chart page →

10,260
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
binutils@2.44-3
no fix listed

Open the chart page →

4,829
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
binutils@2.44-3
no fix listed

Open the chart page →

5,704
business-api-ecosystemfiware1.1.02 of 4See more

business-api-ecosystem fiware 1.1.0

2 of the 4 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
binutils@2.34-6ubuntu1.11
no fix listed
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
binutils@2.40-2
no fix listed

Open the chart page →

64,489
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
binutils@2.44-3
no fix listed

Open the chart page →

5,704
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
binutils@2.40-2
no fix listed

Open the chart page →

3,463
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest000c5ee5ee96
binutils@2.44-3
no fix listed

Open the chart page →

3,112
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

12,222
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
binutils@2.40-2
no fix listed

Open the chart page →

9,077
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
binutils@2.40-2
no fix listed

Open the chart page →

12,958
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
binutils@2.34-6ubuntu1.1
no fix listed

Open the chart page →

24,293
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
binutils@2.44-3
no fix listed

Open the chart page →

8,923
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
binutils@2.44-3
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
binutils@2.40-2
no fix listed

Open the chart page →

12,170
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
binutils@2.40-2
no fix listed

Open the chart page →

49,025
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
binutils@2.38-4ubuntu2.8
no fix listed

Open the chart page →

4,556
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
binutils@2.38-4ubuntu2.6
no fix listed

Open the chart page →

9,096
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
binutils@2.34-6ubuntu1.9
no fix listed
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
binutils@2.40-2
no fix listed

Open the chart page →

24,995
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
binutils@2.30-21ubuntu1~18.04.8
no fix listed

Open the chart page →

10,627
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
binutils@2.44-3
no fix listed

Open the chart page →

9,342
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
binutils@2.44-3
no fix listed

Open the chart page →

10,849
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
binutils@2.34-6ubuntu1.9
no fix listed

Open the chart page →

18,813
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
binutils@2.44-3
no fix listed

Open the chart page →

29,817
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
binutils@2.40-2
no fix listed

Open the chart page →

3,802
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
binutils@2.40-2
no fix listed

Open the chart page →

9,653
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
binutils@2.40-2
no fix listed

Open the chart page →

6,103
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
binutils@2.44-3
no fix listed

Open the chart page →

4,751
tomcathelmforgeVerified publisher1.0.61 of 2See more

tomcat helmforge 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
binutils@2.42-4ubuntu2.10
no fix listed

Open the chart page →

1,185
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
binutils@2.40-2
no fix listed

Open the chart page →

12,607
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
binutils@2.40-2
no fix listed

Open the chart page →

25,017
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
binutils@2.38-4ubuntu2.5
no fix listed

Open the chart page →

14,290
printserverhmediadeVerified publisher1.0.21 of 4See more

printserver hmediade 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
binutils@2.38-4ubuntu2.5
no fix listed

Open the chart page →

10,839
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
binutils@2.34-6ubuntu1.4
no fix listed

Open the chart page →

8,685
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
binutils@2.38-4ubuntu2.1
no fix listed

Open the chart page →

32,205
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
binutils@2.38-4ubuntu2
no fix listed

Open the chart page →

7,144
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
binutils@2.38-4ubuntu2
no fix listed

Open the chart page →

7,862
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
binutils@2.26.1-1ubuntu1~16.04.5
no fix listed

Open the chart page →

57,669
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
binutils@2.26.1-1ubuntu1~16.04.6
no fix listed

Open the chart page →

25,160
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

37,671
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
binutils@2.40-2
no fix listed

Open the chart page →

11,812
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

7,650
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

18,066
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1149.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

7,650

Container images carrying it

393 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
josh5/unmanic:0.2.64d49c4816260
binutils@2.38-4ubuntu2.6
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
binutils@2.34-6ubuntu1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
binutils@2.34-6ubuntu1.3
no fix listed
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
binutils@2.38-4ubuntu2.6
no fix listed
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
binutils@2.38-4ubuntu2.6
no fix listed
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
binutils@2.38-4ubuntu2.6
no fix listed
1
kennethreitz/httpbin:latest599fe5e50731
binutils@2.30-21ubuntu1~18.04
no fix listed
1
kimai/kimai2:2.65.06dfc63199654
binutils@2.40-2
no fix listed
1
kitware/cdash:v5.3.0d7767d9b9da4
binutils@2.44-3
no fix listed
1
kixote/typemill4e9dff179519
binutils@2.44-3
no fix listed
1
kixote/typemill628f79a08cc7
binutils@2.44-3
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
binutils@2.40-2
no fix listed
1
kong/httpbin:latesta6ac46531193
binutils@2.38-4ubuntu2.6
no fix listed
1
kusionstack/kusion:v0.14.0126c8f0b0976
binutils@2.38-4ubuntu2.6
no fix listed
1
laly9999/node-app:1dd0e503913e1
binutils@2.40-2
no fix listed
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
binutils@2.42-4ubuntu2.10
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
binutils@2.42-4ubuntu2.7
no fix listed
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
binutils@2.42-4ubuntu2.10
no fix listed
1
library/convertigo:8.4.3ae605bfcda05
binutils@2.42-4ubuntu2.10
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
binutils@2.40-2
no fix listed
1
library/golang:latest512690a56605
binutils@2.44-3
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
binutils@2.40-2
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
binutils@2.44-3
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
binutils@2.40-2
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
binutils@2.44-3
no fix listed
1
library/node:208f693eaa7e0a
binutils@2.40-2
no fix listed
1
library/node:latestf5d1cc40abc1
binutils@2.44-3
no fix listed
1
library/php:8.4-fpm59fa733c9af6
binutils@2.44-3
no fix listed
1
library/python:3.1070c9cc675605
binutils@2.44-3
no fix listed
1
library/python:3.8d41127070014
binutils@2.40-2
no fix listed
1
library/python:3.9da5aee29682d
binutils@2.44-3
no fix listed
1
library/sonarqube:10.0.0-communityef9723cf4fe4
binutils@2.38-4ubuntu2.2
no fix listed
1
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
binutils@2.42-4ubuntu2.10
no fix listed
1
library/varnish:7.5.04d0bb287d87b
binutils@2.40-2
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
binutils@2.40-2
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
binutils@2.44-3
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
binutils@2.44-3
no fix listed
1
linuxserver/unifi-controller:8.0.240ae315a3a456
binutils@2.34-6ubuntu1.7
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
binutils@2.34-6ubuntu1.5
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
binutils@2.34-6ubuntu1.3
no fix listed
1
makersquad/harp-proxy:0.8.1a40dd258c527
binutils@2.40-2
no fix listed
1
mariusm/vingress:0.5.0b3db186c3d72
binutils@2.44-3
no fix listed
1
martinhelmich/typo3:12.4c83a4f3fd7ae
binutils@2.40-2
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
binutils@2.40-2
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
binutils@2.40-2
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
binutils@2.38-4ubuntu2.7
no fix listed
1
mediagis/nominatim:5.3.27923a8e67197
binutils@2.42-4ubuntu2.10
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
binutils@2.34-6ubuntu1.3
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
binutils@2.38-4ubuntu2.5
no fix listed
1
middlewareeng/middleware:0.3.1747d880812f1
binutils@2.40-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.