StackRadar

CVE-2025-12758

High

Advisory

Published 27 Nov 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
109
of 17,781 indexed, latest versions
Container images
104
deployed by those charts
Fix available
1 of 1
affected package

Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements

Carried by container images the latest versions of 109 of 17,781 indexed charts deploy, on 104 images.

Affected packageAffected versionsFixed inImages
validatornpm1.5.1, 2.1.0, 3.2.1, 4.4.0+17 more13.15.22104
OSV records
GHSA-vghf-hv5q-vc2g

Charts affected

109 by stars
ChartLatestAffected imagesRadar Score
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
validator@12.2.0
13.15.22

Open the chart page →

10,494
interbtc-hydrainterlay0.1.151 of 4See more

interbtc-hydra interlay 0.1.15

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
validator@13.6.0
13.15.22

Open the chart page →

6,831
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
validator@8.2.0
13.15.22

Open the chart page →

7,232
keyoxide-webittrident-oss0.2.31 of 1See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
keyoxide/keyoxide:stable96f27a71269d
validator@13.7.0
13.15.22

Open the chart page →

2,363
ghostjanip81-helm-chartsVerified publisher0.1.21 of 1See more

ghost janip81-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
library/ghost:6.37.01ef2e532ca4d
validator@13.12.0
13.15.22

Open the chart page →

3,436
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
validator@13.7.0
13.15.22

Open the chart page →

5,826
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
validator@10.11.0
13.15.22

Open the chart page →

6,454
audiobookshelfk8s-home-lab-repo2.0.11 of 1See more

audiobookshelf k8s-home-lab-repo 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
validator@13.9.0
13.15.22

Open the chart page →

2,350
ghostk8s-home-lab-repo4.1.01 of 1See more

ghost k8s-home-lab-repo 4.1.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
library/ghost:6.41.129773d6be407
validator@7.2.0
13.15.22

Open the chart page →

3,092
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
validator@13.11.0
13.15.22

Open the chart page →

9,098
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
validator@10.11.0
13.15.22

Open the chart page →

3,397
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
validator@13.7.0
13.15.22

Open the chart page →

4,230
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
validator@13.7.0
13.15.22

Open the chart page →

5,410
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
validator@13.11.0
13.15.22

Open the chart page →

2,178
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
validator@13.7.0
13.15.22

Open the chart page →

13,819
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
validator@7.2.0
13.15.22

Open the chart page →

2,756
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
validator@13.11.0
13.15.22

Open the chart page →

2,685
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-ui-react:latestba6853e35c60
validator@13.9.0
13.15.22

Open the chart page →

5,905
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
validator@13.11.0
13.15.22

Open the chart page →

9,774
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
hugohg34/server:0.0.2503e5d8960ff
validator@13.7.0
13.15.22

Open the chart page →

29,588
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
validator@13.15.15
13.15.22

Open the chart page →

43,341
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
mojaloop/event-sidecar:v11.0.189b8ab71b74b
validator@10.11.0
13.15.22

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
mojaloop/event-sidecar:v11.0.189b8ab71b74b
validator@10.11.0
13.15.22

Open the chart page →

11,695
admin-api-svcmojaloop12.0.02 of 4See more

admin-api-svc mojaloop 12.0.0

2 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
mojaloop/central-ledger:v13.14.01abc8a7aa71c
validator@10.11.0
13.15.22
mojaloop/event-sidecar:v11.0.189b8ab71b74b
validator@10.11.0
13.15.22

Open the chart page →

12,108
finance-portalmojaloop5.1.41 of 11See more

finance-portal mojaloop 5.1.4

1 of the 11 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
mojaloop/role-assignment-service:v2.1.0def4bf273721
validator@13.7.0
13.15.22

Open the chart page →

14,809
fspiop-transfer-api-svcmojaloop12.0.12 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

2 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
mojaloop/event-sidecar:v11.0.189b8ab71b74b
validator@10.11.0
13.15.22
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
validator@10.11.0
13.15.22

Open the chart page →

11,479
mojaloopmojaloop14.0.03 of 6See more

mojaloop mojaloop 14.0.0

3 of the 6 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
mojaloop/central-ledger:v13.14.01abc8a7aa71c
validator@10.11.0
13.15.22
mojaloop/event-sidecar:v11.0.189b8ab71b74b
validator@10.11.0
13.15.22
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
validator@10.11.0
13.15.22

Open the chart page →

19,226
role-assignment-servicemojaloop3.1.01 of 1See more

role-assignment-service mojaloop 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
mojaloop/role-assignment-service:v2.1.0def4bf273721
validator@13.7.0
13.15.22

Open the chart page →

2,316
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
validator@10.11.0
13.15.22

Open the chart page →

6,684
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
validator@13.11.0
13.15.22

Open the chart page →

4,560
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
validator@7.2.0
13.15.22

Open the chart page →

4,960
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
validator@1.5.1
13.15.22
linuxserver/codimd:latestb801bbcf6386
validator@10.11.0
13.15.22

Open the chart page →

27,465
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
validator@13.12.0
13.15.22

Open the chart page →

4,219
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
validator@10.11.0
13.15.22

Open the chart page →

9,968
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
mishtinetwork/operator:latestbb3fe67a5f7c
validator@13.12.0
13.15.22

Open the chart page →

3,999
ungatep2p-avs0.1.01 of 3See more

ungate p2p-avs 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
validator@13.12.0
13.15.22

Open the chart page →

27,373
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
validator@10.11.0
13.15.22

Open the chart page →

6,524
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
validator@10.11.0
13.15.22

Open the chart page →

28,484
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
validator@13.9.0
13.15.22

Open the chart page →

1,884
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
validator@13.11.0
13.15.22

Open the chart page →

6,282
routr-connectroutr0.4.35 of 10See more

routr-connect routr 0.4.3

5 of the 10 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
fonoster/routr-connect:2.13.6e8c84b5eaa67
validator@13.12.0
13.15.22
fonoster/routr-dispatcher:2.13.65f8f380dc174
validator@13.12.0
13.15.22
fonoster/routr-location:2.13.6051ba9c34ef5
validator@13.12.0
13.15.22
fonoster/routr-pgdata:2.13.6e4d5f5ff1945
validator@13.12.0
13.15.22
fonoster/routr-registry:2.13.6e27001f2813c
validator@13.12.0
13.15.22

Open the chart page →

11,021
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
validator@13.9.0
13.15.22

Open the chart page →

1,722
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
validator@13.9.0
13.15.22

Open the chart page →

5,582
hedgedocschmitzis0.1.121 of 1See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
validator@13.7.0
13.15.22

Open the chart page →

3,118
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
validator@13.7.0
13.15.22

Open the chart page →

4,431
alertmanager-to-alerta-botsomeblackmagic0.2.01 of 1See more

alertmanager-to-alerta-bot someblackmagic 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
someblackmagic/alertmanager-to-alerta-bot:latest78bf43744ea5
validator@13.7.0
13.15.22

Open the chart page →

2,121
retail-store-sample-checkout-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-checkout-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
validator@13.12.0
13.15.22

Open the chart page →

1,313
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
validator@3.2.1
13.15.22

Open the chart page →

3,827
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
validator@13.9.0
13.15.22

Open the chart page →

39,090
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-12758.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
validator@13.9.0
13.15.22

Open the chart page →

5,604

Container images carrying it

104 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
validator@10.11.0
13.15.22
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
validator@10.11.0
13.15.22
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
validator@3.2.1
13.15.22
1
registry.gitlab.com/timvisee/send:v3.4.2047986cf6ef69
validator@13.7.0
13.15.22
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.