StackRadar

CVE-2025-11731

Low

Advisory

Published 14 Oct 2025In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.1
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
593
of 17,787 indexed, latest versions
Container images
373
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 593 of 17,787 indexed charts deploy, on 373 images.

Affected packageAffected versionsFixed inImages
libxsltdeb1.1.28-2.1ubuntu0.3, 1.1.28-2ubuntu0.1, 1.1.29-5ubuntu0.2, 1.1.34-4+17 moreno fix listed373
OSV records
DEBIAN-CVE-2025-11731UBUNTU-CVE-2025-11731

Charts affected

593 by stars
ChartLatestAffected imagesRadar Score
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
libxslt@1.1.35-1+deb12u4
no fix listed

Open the chart page →

4,911
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

4,626
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,827
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

5,982
helmchartclouddrove1.4.01 of 1See more

helmchart clouddrove 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,827
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
libxslt@1.1.34-4ubuntu0.22.04.1
no fix listed

Open the chart page →

20,900
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

23,665
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
galaxy/galaxy-stable:v18.018e577a626dfd
libxslt@1.1.28-2ubuntu0.1
no fix listed

Open the chart page →

70,895
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

2,481
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libxslt@1.1.35-1+deb12u3
no fix listed

Open the chart page →

9,128
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,827
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,827
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
libxslt@1.1.35-1+deb12u1
no fix listed

Open the chart page →

13,220
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,827
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
libxslt@1.1.35-1+deb12u1
no fix listed

Open the chart page →

14,559
postgresqlcowboysysopVerified publisher15.5.71 of 1See more

postgresql cowboysysop 15.5.7

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
libxslt@1.1.35-1
no fix listed

Open the chart page →

4,770
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
opencsghq/postgres:15.1842578c9d3ebd
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
opencsghq/postgres:15.19b98600564e07
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

11,335
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
opencsghq/postgres:15.19b98600564e07
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

6,632
cypikcypik-app0.1.02 of 2See more

cypik cypik-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libxslt@1.1.35-1.2+deb13u3
no fix listed
library/nginx:1.25a484819eb602
libxslt@1.1.35-1
no fix listed

Open the chart page →

7,503
view-cadvisorcypik-helm-chart0.1.01 of 1See more

view-cadvisor cypik-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,827
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
libxslt@1.1.34-4ubuntu0.22.04.1
no fix listed

Open the chart page →

5,398
nginx-chartdaeho12Verified publisher0.1.01 of 1See more

nginx-chart daeho12 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,827
damap-chartdamapVerified publisher0.3.03 of 5See more

damap-chart damap 0.3.0

3 of the 5 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
libxslt@1.1.35-1.2+deb13u3
no fix listed
library/postgres:16f1c3376c26f2
libxslt@1.1.35-1.2+deb13u3
no fix listed
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

13,936
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

3,547
helm-chart-testdasmeta0.1.41 of 1See more

helm-chart-test dasmeta 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,827
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
libxslt@1.1.35-1+deb12u3
no fix listed

Open the chart page →

5,062
datacube-dashboarddatacube-charts0.5.101 of 2See more

datacube-dashboard datacube-charts 0.5.10

1 of the 2 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,626
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libxslt@1.1.35-1
no fix listed

Open the chart page →

10,090
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,827
challengedeneme0.1.01 of 2See more

challenge deneme 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

2,675
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libxslt@1.1.34-4ubuntu0.22.04.1
no fix listed

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libxslt@1.1.34-4ubuntu0.22.04.1
no fix listed

Open the chart page →

29,033
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libxslt@1.1.35-1+deb12u3
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
no fix listed

Open the chart page →

68,240
migration-incluster-cddevtron0.10.01 of 1See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
no fix listed

Open the chart page →

3,891
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
libxslt@1.1.35-1+deb12u3
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
no fix listed

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
no fix listed

Open the chart page →

32,902
migration-incluster-cddevtron-labs0.10.01 of 1See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
libxslt@1.1.35-1
no fix listed

Open the chart page →

3,891
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
libxslt@1.1.35-1+deb12u1
no fix listed

Open the chart page →

4,046
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
libxslt@1.1.34-4ubuntu0.22.04.5
no fix listed

Open the chart page →

10,035
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libxslt@1.1.35-1
no fix listed

Open the chart page →

14,627
dominodomino-iisasVerified publisher0.3.12 of 3See more

domino domino-iisas 0.3.1

2 of the 3 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
libxslt@1.1.35-1.2+deb13u2
no fix listed
ghcr.io/iisas/domino-frontend:k8s8e53861be292
libxslt@1.1.35-1+deb12u3
no fix listed

Open the chart page →

10,270
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
libxslt@1.1.34-4ubuntu0.22.04.1
no fix listed

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
libxslt@1.1.34-4build2
no fix listed

Open the chart page →

30,699
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
libxslt@1.1.35-1.2+deb13u2
no fix listed

Open the chart page →

3,455
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

19,802
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
libxslt@1.1.35-1
no fix listed

Open the chart page →

4,586
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libxslt@1.1.35-1.2+deb13u2
no fix listed

Open the chart page →

13,391
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
libxslt@1.1.35-1.2+deb13u3
no fix listed

Open the chart page →

1,626
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-11731.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
libxslt@1.1.34-4ubuntu0.20.04.1
no fix listed

Open the chart page →

25,122

Container images carrying it

373 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
libxslt@1.1.35-1.2+deb13u2
no fix listed
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
libxslt@1.1.35-1.2+deb13u3
no fix listed
1
ghcr.io/rss-bridge/rss-bridge:latest606896116558
libxslt@1.1.35-1+deb12u4
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
libxslt@1.1.35-1
no fix listed
1
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
libxslt@1.1.35-1+deb12u4
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
libxslt@1.1.35-1+deb12u4
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
libxslt@1.1.39-0exp1ubuntu0.24.04.3
no fix listed
1
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
libxslt@1.1.35-1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libxslt@1.1.35-1+deb12u3
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
libxslt@1.1.35-1+deb12u4
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libxslt@1.1.35-1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libxslt@1.1.35-1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libxslt@1.1.35-1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libxslt@1.1.35-1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libxslt@1.1.35-1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libxslt@1.1.35-1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libxslt@1.1.35-1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libxslt@1.1.35-1
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
libxslt@1.1.34-4
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libxslt@1.1.35-1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libxslt@1.1.35-1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libxslt@1.1.35-1.2+deb13u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libxslt@1.1.35-1+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.