CVE-2025-13151

High

Advisory

Published 7 Jan 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.011; 65th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,951; of 17,790 indexed, latest versions
Container images: 2,136; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: libtasn1 security update

Carried by container images the latest versions of 1,951 of 17,790 indexed charts deploy, on 2,136 images.

Affected package	Affected versions	Fixed in	Images
libtasn1-6deb	3.4-3ubuntu0.1, 3.4-3ubuntu0.5, 3.4-3ubuntu0.6, 4.7-3ubuntu0.16.04.2+12 more	3.4-3ubuntu0.6+esm1, 4.7-3ubuntu0.16.04.3+esm4, 4.13-2ubuntu0.1~esm1, 4.16.0-2ubuntu0.1+esm1+4 more	1,740
libtasn1apk	4.19.0-r2, 4.20.0-r0	4.21.0-r0	46
libtasn1rpm	4.13-3.el8, 4.13-3.el8_6.1, 4.13-4.el8_7, 4.13-5.el8_10+7 more	0:4.13-6.el8_10, 0:4.16.0-10.el9_8, 0:4.20.0-5.el10_2, 4.13-150000.4.14.1+2 more	350

OSV records: ALPINE-CVE-2025-13151 DEBIAN-CVE-2025-13151 UBUNTU-CVE-2025-13151 RHSA-2026:28235 RHSA-2026:28253 RHSA-2026:36728 RLSA-2026:28253 RLSA-2026:36728 openSUSE-SU-2026:10033-1 SUSE-SU-2026:0224-1 SUSE-SU-2026:21142-1
Also known as: USN-7954-1, USN-7954-2

Charts affected

1,951 by stars

Chart

Latest

Affected images

Radar Score

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-13151.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	libtasn1-6@4.13-2	4.13-2ubuntu0.1~esm1
yandex/clickhouse-server :21.3.20	4eccfffb01d7	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1

Open the chart page →

9,256

Container images carrying it

2,136 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
countly/countly-server :25.05.4	e3c238248f99	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1	1
cradlepoint/pgbouncer :1.0.1	8f5720b0cd03	libtasn1-6@4.13-2	4.13-2ubuntu0.1~esm1	1
craftypath/sops-operator :v0.8.0	402a0024c732	libtasn1@4.13-3.el8	0:4.13-6.el8_10	1
cribl/cribl :3.0.2	762747cb6796	libtasn1-6@4.13-2	4.13-2ubuntu0.1~esm1	1
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	libtasn1-6@4.7-3ubuntu0.16.04.3	4.7-3ubuntu0.16.04.3+esm4	1
cspconsole/config-provider :1.0.36	5524a26a6c23	libtasn1-6@4.19.0-2+deb12u1	no fix listed	1
cspconsole/csp-control-center :1.0.10	46dda4a31bd6	libtasn1-6@4.19.0-2+deb12u1	no fix listed	1
cspconsole/report-collector :1.0.158	39750248193b	libtasn1-6@4.19.0-2+deb12u1	no fix listed	1
cspconsole/report-processor :1.0.27	9a2d8840bfdf	libtasn1-6@4.19.0-2+deb12u1	no fix listed	1
ctron/hawkbit-operator :0.1.4	8fdea8f76499	libtasn1@4.13-3.el8	0:4.13-6.el8_10	1
cubejs/cubestore :v1.5.3	34ac523a9bab	libtasn1-6@4.19.0-2+deb12u1	no fix listed	1
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	libtasn1-6@4.20.0-2	4.20.0-2+deb13u1	1
cyfershepard/jellystat :1.1.11	c4e2dfa8bddf	libtasn1-6@4.19.0-2+deb12u1	no fix listed	1
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	libtasn1-6@4.19.0-2	no fix listed	1
daedalusproject/base_kubectl :latest	6f72b5119eda	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1	1
danialnabiyan1382/lsdisk :v2.0.8	f96a7ebf1f42	libtasn1-6@4.19.0-2+deb12u1	no fix listed	1
dannielkil/book-frontend :latest	937993927694	libtasn1-6@4.19.0-2	no fix listed	1
darthsim/imgproxy :v3.30.1	3b709e4a0e5e	libtasn1-6@4.19.0-3ubuntu0.24.04.1	4.19.0-3ubuntu0.24.04.2	1
darthsim/imgproxy :v3.26	476cb08c816a	libtasn1-6@4.19.0-3build1	4.19.0-3ubuntu0.24.04.2	1
darthsim/imgproxy :v3.29.1	7d12c7c8fc66	libtasn1-6@4.19.0-3ubuntu0.24.04.1	4.19.0-3ubuntu0.24.04.2	1
daskdev/dask-notebook :1.1.0	052630f5ca04	libtasn1-6@4.13-2	4.13-2ubuntu0.1~esm1	1
dasmeta/mongodb-bi-connector :1.0.3	fa657960dfec	libtasn1-6@4.13-2	4.13-2ubuntu0.1~esm1	1
datadog/agent :6	aad9994de6a7	libtasn1-6@4.19.0-3build1	4.19.0-3ubuntu0.24.04.2	1
datadog/extendeddaemonset :v0.8.0	513a4377aed5	libtasn1@4.13-3.el8	0:4.13-6.el8_10	1
datafuselabs/databend-meta :v1.2.279	ba877ee6cb4d	libtasn1-6@4.19.0-2	no fix listed	1
datafuselabs/databend-query :v1.2.279	a936843b85b4	libtasn1-6@4.19.0-2	no fix listed	1
datalayers/datalayers :v2.2.10	17b292079239	libtasn1-6@4.18.0-4build1	4.18.0-4ubuntu0.2	1
datalust/seq :5.0.832-pre	9c731bb207a6	libtasn1-6@4.7-3ubuntu0.16.04.3	4.7-3ubuntu0.16.04.3+esm4	1
datalust/seq-input-gelf :3.0.441-x64	3de34aed5642	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1	1
datamate/seafile-professional :11.0.20	2dd66b722464	libtasn1-6@4.18.0-4ubuntu0.1	4.18.0-4ubuntu0.2	1
datawire/ambassador-operator :v1.3.0	f95ae710d75c	libtasn1@4.13-3.el8	0:4.13-6.el8_10	1
dbgate/dbgate :7.2.3	f2dc7423ea88	libtasn1-6@4.19.0-2+deb12u1	no fix listed	1
dblaci/ubuntu-ssh-rsync :20231020	eea697611af4	libtasn1-6@4.18.0-4build1	4.18.0-4ubuntu0.2	1
ddosify/alaz :v0.12.0	ea602056d9ce	libtasn1-6@4.19.0-2	no fix listed	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	libtasn1-6@4.19.0-2	no fix listed	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	libtasn1-6@4.19.0-2	no fix listed	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	libtasn1-6@4.19.0-2	no fix listed	1
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	libtasn1-6@4.19.0-2	no fix listed	1
deconzcommunity/deconz :2.29.2	062de2362641	libtasn1-6@4.19.0-2	no fix listed	1
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1	1
deepflowce/deepflow-agent :v6.2.6.5	29332fee7fc2	libtasn1-6@4.18.0-4build1	4.18.0-4ubuntu0.2	1
defactops/defactops-backend :1.0.23	07b663c0092a	libtasn1-6@4.19.0-2	no fix listed	1
dellcloud/category :distributed	02fc234353a9	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1	1
dellcloud/pages :1.0	4d2eb25b9225	libtasn1-6@4.16.0-2	4.16.0-2ubuntu0.1+esm1	1
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	libtasn1@4.13-3.el8	0:4.13-6.el8_10	1
dellemc/csm-application-mobility-velero-plugin :v0.1.0	660cabd6d929	libtasn1@4.13-3.el8	0:4.13-6.el8_10	1
dependencytrack/apiserver :4.14.2	1ba4f004e1ec	libtasn1-6@4.20.0-2	4.20.0-2+deb13u1	1
dessalines/lemmy :0.19.20	79e9f02c286c	libtasn1-6@4.19.0-2+deb12u1	no fix listed	1
devopsgoofy/k8s-platform :latest	ad865312099f	libtasn1-6@4.19.0-2	no fix listed	1
devopshq/artifactory-cleanup :1.0.18	30e093bffa91	libtasn1-6@4.19.0-2+deb12u1	no fix listed	1