StackRadar

CVE-2025-12758

High

Advisory

Published 27 Nov 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
109
of 17,781 indexed, latest versions
Container images
104
deployed by those charts
Fix available
1 of 1
affected package

Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

Carried by container images the latest versions of 109 of 17,781 indexed charts deploy, on 104 images.

Affected packageAffected versionsFixed inImages
validatornpm1.5.1, 2.1.0, 3.2.1, 4.4.0+17 more13.15.22104
OSV records
GHSA-vghf-hv5q-vc2g

Charts affected

109 by stars
ChartLatestAffected imagesRadar Score
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
validator@13.7.0
13.15.22

Open the chart page →

4,431
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
validator@13.12.0
13.15.22

Open the chart page →

5,352
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
validator@13.7.0
13.15.22

Open the chart page →

5,639
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
validator@10.11.0
13.15.22

Open the chart page →

2,213
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
validator@13.0.0
13.15.22

Open the chart page →

2,828
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
validator@13.12.0
13.15.22

Open the chart page →

1,721
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
validator@13.12.0
13.15.22

Open the chart page →

7,450
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
validator@13.11.0
13.15.22

Open the chart page →

3,451
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher1.1.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/sredevopsorg/ghost-on-kubernetes:maindd991bafa85e
validator@7.2.0
13.15.22

Open the chart page →

1,447
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
validator@4.4.0
13.15.22

Open the chart page →

5,209
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
validator@13.7.0
13.15.22

Open the chart page →

7,776
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
validator@10.11.0
13.15.22

Open the chart page →

2,851
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
validator@13.5.2
13.15.22

Open the chart page →

2,519
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
validator@7.2.0
13.15.22

Open the chart page →

4,260
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
validator@13.7.0
13.15.22

Open the chart page →

15,653
sendgeek-cookbookVerified publisher1.2.21 of 1See more

send geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
registry.gitlab.com/timvisee/send:v3.4.2047986cf6ef69
validator@13.7.0
13.15.22

Open the chart page →

1,148
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
validator@13.15.20
13.15.22

Open the chart page →

15,712
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
validator@13.12.0
13.15.22

Open the chart page →

13,738
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
validator@13.7.0
13.15.22

Open the chart page →

2,449
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
validator@2.1.0
13.15.22

Open the chart page →

3,437
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
validator@13.11.0
13.15.22

Open the chart page →

9,369
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
validator@4.4.0
13.15.22

Open the chart page →

18,277
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
validator@13.9.0
13.15.22

Open the chart page →

1,722
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
validator@13.12.0
13.15.22

Open the chart page →

4,083
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
validator@13.9.0
13.15.22

Open the chart page →

1,722
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
validator@13.9.0
13.15.22

Open the chart page →

1,722
cors-proxycors-proxyVerified publisher1.2.01 of 1See more

cors-proxy cors-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
validator@13.15.15
13.15.22

Open the chart page →

1,598
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
validator@4.4.0
13.15.22

Open the chart page →

5,209
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
validator@13.12.0
13.15.22

Open the chart page →

3,769
swagger-combine-uicryptexlabsVerified publisher0.2.41 of 1See more

swagger-combine-ui cryptexlabs 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
cryptexlabs/swagger-combine-ui:0.2.1ed0bc94fd412
validator@10.11.0
13.15.22

Open the chart page →

1,378
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
validator@10.11.0
13.15.22

Open the chart page →

27,550
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
validator@10.11.0
13.15.22

Open the chart page →

24,656
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
validator@10.11.0
13.15.22

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
validator@10.11.0
13.15.22

Open the chart page →

27,256
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
validator@13.7.0
13.15.22

Open the chart page →

27,096
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-user-service:1.049e164a9a439
validator@13.12.0
13.15.22

Open the chart page →

7,691
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
validator@13.9.0
13.15.22

Open the chart page →

3,159
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
validator@13.7.0
13.15.22

Open the chart page →

2,172
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
validator@13.11.0
13.15.22

Open the chart page →

13,241
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
validator@13.6.0
13.15.22

Open the chart page →

12,222
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
validator@12.2.0
13.15.22

Open the chart page →

9,019
contentbridgeglenndehaanVerified publisher1.1.01 of 1See more

contentbridge glenndehaan 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
glenndehaan/contentbridge:latest99b9e4f73848
validator@13.9.0
13.15.22

Open the chart page →

1,000
Governify-Bluejaygovernify0.1.03 of 12See more

Governify-Bluejay governify 0.1.0

3 of the 12 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
governify/director:v1.4.0608c6940bb98
validator@13.6.0
13.15.22
governify/registry:v3.4.0d3f37f4f8168
validator@13.5.2
13.15.22
governify/reporter:v2.2.038595913458f
validator@10.11.0
13.15.22

Open the chart page →

22,512
Governify-Falcongovernify0.1.04 of 10See more

Governify-Falcon governify 0.1.0

4 of the 10 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
governify/collector-dynamic:v1.3.06d3d1a5b46a9
validator@13.5.2
13.15.22
governify/director:v1.4.0608c6940bb98
validator@13.6.0
13.15.22
governify/registry:v3.4.0d3f37f4f8168
validator@13.5.2
13.15.22
governify/reporter:v2.2.038595913458f
validator@10.11.0
13.15.22

Open the chart page →

24,319
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
validator@10.11.0
13.15.22

Open the chart page →

24,161
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
validator@12.2.0
13.15.22
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
validator@10.11.0
13.15.22
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
validator@12.2.0
13.15.22
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
validator@10.11.0
13.15.22

Open the chart page →

89,959
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
validator@13.11.0
13.15.22

Open the chart page →

3,451
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
validator@13.11.0
13.15.22

Open the chart page →

3,614
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
validator@10.9.0
13.15.22

Open the chart page →

39,349
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
validator@6.2.1
13.15.22
ibmcom/microclimate-portal:latested5505e5c7ec
validator@9.4.1
13.15.22

Open the chart page →

57,669

Container images carrying it

104 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mojaloop/event-sidecar:v11.0.189b8ab71b74b
validator@10.11.0
13.15.22
5
oscarsotosanchez/server:v1.06e2e1279126b
validator@10.11.0
13.15.22
4
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
validator@13.9.0
13.15.22
4
pantsel/konga:latestc8172b75607d
validator@4.4.0
13.15.22
3
governify/director:v1.4.0608c6940bb98
validator@13.6.0
13.15.22
2
governify/registry:v3.4.0d3f37f4f8168
validator@13.5.2
13.15.22
2
governify/reporter:v2.2.038595913458f
validator@10.11.0
13.15.22
2
hookiesolutions/webhookie:latest0629694246ba
validator@13.6.0
13.15.22
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
validator@13.11.0
13.15.22
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
validator@10.11.0
13.15.22
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
validator@10.11.0
13.15.22
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
validator@13.7.0
13.15.22
2
outlinewiki/outline:0.69.1d060dcd8f9aa
validator@13.7.0
13.15.22
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
validator@13.9.0
13.15.22
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
validator@13.7.0
13.15.22
2
arturisimo/server-urjc:v1.0d8dc4430531e
validator@13.7.0
13.15.22
1
assistiot/fl_orchestrator:api-latest7473d77448e1
validator@13.11.0
13.15.22
1
catalysm/csmm:latestf003b35f54d9
validator@5.7.0
13.15.22
1
chandanteekinavar/findery-market-user-service:1.049e164a9a439
validator@13.12.0
13.15.22
1
codetogether/codetogether:latest4348c8a38752
validator@13.12.0
13.15.22
1
cryptexlabs/authf:0.12.11189c07411d7c
validator@13.12.0
13.15.22
1
cryptexlabs/swagger-combine-ui:0.2.1ed0bc94fd412
validator@10.11.0
13.15.22
1
fiware/idm:8.3.3a1b6ed4ae84f
validator@13.9.0
13.15.22
1
fonoster/routr-connect:2.13.6e8c84b5eaa67
validator@13.12.0
13.15.22
1
fonoster/routr-dispatcher:2.13.65f8f380dc174
validator@13.12.0
13.15.22
1
fonoster/routr-location:2.13.6051ba9c34ef5
validator@13.12.0
13.15.22
1
fonoster/routr-pgdata:2.13.6e4d5f5ff1945
validator@13.12.0
13.15.22
1
fonoster/routr-registry:2.13.6e27001f2813c
validator@13.12.0
13.15.22
1
glenndehaan/contentbridge:latest99b9e4f73848
validator@13.9.0
13.15.22
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
validator@13.5.2
13.15.22
1
heywood8/redisinsight:2.28.00bc9ab313d37
validator@13.0.0
13.15.22
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
validator@13.11.0
13.15.22
1
hugohg34/server:0.0.2503e5d8960ff
validator@13.7.0
13.15.22
1
ibmcom/bai-admin-dev:19.0.202d882f2836e
validator@10.9.0
13.15.22
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
validator@6.2.1
13.15.22
1
ibmcom/microclimate-portal:latested5505e5c7ec
validator@9.4.1
13.15.22
1
inseefrlab/shelly:cloudshell31f04ca7436b
validator@12.2.0
13.15.22
1
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
validator@13.6.0
13.15.22
1
jakowenko/double-take:1.6.0b858bac9e32a
validator@13.6.0
13.15.22
1
jayfong/yapi:1.10.2163e5d621910
validator@10.11.0
13.15.22
1
keyoxide/keyoxide:stable96f27a71269d
validator@13.7.0
13.15.22
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
validator@13.7.0
13.15.22
1
kubebb/component-store:latestfd8ecbd73213
validator@13.11.0
13.15.22
1
kyso/kyso-front:lateste52595c5c16f
validator@13.11.0
13.15.22
1
library/ghost:6.37.01ef2e532ca4d
validator@13.12.0
13.15.22
1
library/ghost:6.25.12654b1e90413
validator@7.2.0
13.15.22
1
library/ghost:6.41.129773d6be407
validator@7.2.0
13.15.22
1
library/ghost:4.37.0767230c0f263
validator@7.2.0
13.15.22
1
library/ghost:6.39.0-alpine77196da4b0df
validator@7.2.0
13.15.22
1
library/ghost:5.79.083f7bf209844
validator@12.2.0
13.15.22
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.