StackRadar

CVE-2025-13151

High

Advisory

Published 7 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,951
of 17,790 indexed, latest versions
Container images
2,136
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: libtasn1 security update

Carried by container images the latest versions of 1,951 of 17,790 indexed charts deploy, on 2,136 images.

Affected packageAffected versionsFixed inImages
libtasn1-6deb3.4-3ubuntu0.1, 3.4-3ubuntu0.5, 3.4-3ubuntu0.6, 4.7-3ubuntu0.16.04.2+12 more3.4-3ubuntu0.6+esm1, 4.7-3ubuntu0.16.04.3+esm4, 4.13-2ubuntu0.1~esm1, 4.16.0-2ubuntu0.1+esm1+4 more1,740
libtasn1apk4.19.0-r2, 4.20.0-r04.21.0-r046
libtasn1rpm4.13-3.el8, 4.13-3.el8_6.1, 4.13-4.el8_7, 4.13-5.el8_10+7 more0:4.13-6.el8_10, 0:4.16.0-10.el9_8, 0:4.20.0-5.el10_2, 4.13-150000.4.14.1+2 more350
OSV records
ALPINE-CVE-2025-13151DEBIAN-CVE-2025-13151UBUNTU-CVE-2025-13151RHSA-2026:28235RHSA-2026:28253RHSA-2026:36728RLSA-2026:28253RLSA-2026:36728openSUSE-SU-2026:10033-1SUSE-SU-2026:0224-1SUSE-SU-2026:21142-1
Also known as
USN-7954-1, USN-7954-2

Charts affected

1,951 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-13151.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
yandex/clickhouse-server:21.3.204eccfffb01d7
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1

Open the chart page →

9,256

Container images carrying it

2,136 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
istio/pilot:1.17.1ce9d87606701
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
istio/pilot:1.15.2db08d6963975
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
istio/pilot:1.10.3e7e110a421c2
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
istio/proxyv2:1.2.90c78be035e98
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm4
1
istio/proxyv2:1.9.687a9db561d2e
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
istio/proxyv2:1.10.088c6c693e67a
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
istio/proxyv2:1.14.1df69c1a7af7c
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
istio/ztunnel:1.25.005f3972d80a9
libtasn1-6@4.19.0-3ubuntu0.24.04.1
4.19.0-3ubuntu0.24.04.2
1
ixsystems/truecommand:3.2.019c218455cd2
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
jacobalberty/unifi:v7.1.664a3616625dda
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
jacobalberty/unifi:5.10.19c409924e2463
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm4
1
jaedb/iris:latest048cfbf58d57
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
janzo83/serviceexample:latestfb3c4ac36f3e
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
jbtronics/part-db1:latest5db71f6db59d
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
jedi132000/nextapp:latestdc2a81e92f23
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
jellyfin/jellyfin:10.11.81694ff069f0c
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
jellyfin/jellyfin:10.11.717285f9cce63
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
libtasn1-6@4.19.0-2
no fix listed
1
jellyfin/jellyfin:10.11.6333b64771663
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
libtasn1-6@4.19.0-2
no fix listed
1
jellyfin/jellyfin:10.10.77ae36aab93ef
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
jellyfin/jellyfin:10.10.696b09723b22f
libtasn1-6@4.19.0-2
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
libtasn1-6@4.19.0-2
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
libtasn1-6@4.19.0-2
no fix listed
1
jhipster/jhipster-registry:latest7184525acd4d
libtasn1-6@4.16.0-2ubuntu0.1
4.16.0-2ubuntu0.1+esm1
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
libtasn1-6@4.19.0-2
no fix listed
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
libtasn1-6@4.19.0-2
no fix listed
1
jlesage/firefox:v25.03.1055c28defe31
libtasn1@4.20.0-r0
4.21.0-r0
1
jmferrer/azure-devops-agent:latest030f68ec6998
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm4
1
johly/airtrail:v3.11.19f702b91e0e7
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
joplin/server:latest3f7b852959aa
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
libtasn1-6@4.19.0-2
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
libtasn1-6@4.19.0-3build1
4.19.0-3ubuntu0.24.04.2
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
kennethreitz/httpbin:latest599fe5e50731
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
kimai/kimai2:2.67.03084f1e5ecdc
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
libtasn1-6@4.19.0-2
no fix listed
1
knspar/phronetis:0.1.4609499d2dc91a
libtasn1-6@4.19.0-3build1
4.19.0-3ubuntu0.24.04.2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.