StackRadar

CVE-2025-13151

High

Advisory

Published 7 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,949
of 17,803 indexed, latest versions
Container images
2,133
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: libtasn1 security update

Carried by container images the latest versions of 1,949 of 17,803 indexed charts deploy, on 2,133 images.

Affected packageAffected versionsFixed inImages
libtasn1-6deb3.4-3ubuntu0.1, 3.4-3ubuntu0.5, 3.4-3ubuntu0.6, 4.7-3ubuntu0.16.04.2+12 more3.4-3ubuntu0.6+esm1, 4.7-3ubuntu0.16.04.3+esm4, 4.13-2ubuntu0.1~esm1, 4.16.0-2ubuntu0.1+esm1+4 more1,738
libtasn1apk4.19.0-r2, 4.20.0-r04.21.0-r046
libtasn1rpm4.13-3.el8, 4.13-3.el8_6.1, 4.13-4.el8_7, 4.13-5.el8_10+7 more0:4.13-6.el8_10, 0:4.16.0-10.el9_8, 0:4.20.0-5.el10_2, 4.13-150000.4.14.1+2 more349
OSV records
ALPINE-CVE-2025-13151DEBIAN-CVE-2025-13151UBUNTU-CVE-2025-13151RHSA-2026:28235RHSA-2026:28253RHSA-2026:36728RLSA-2026:28253RLSA-2026:36728openSUSE-SU-2026:10033-1SUSE-SU-2026:0224-1SUSE-SU-2026:21142-1
Also known as
USN-7954-1, USN-7954-2

Charts affected

1,949 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,133 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/istio-release/pilot:1.11.1c552478f8f11
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
libtasn1-6@4.7-3ubuntu0.16.04.3
4.7-3ubuntu0.16.04.3+esm4
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
libtasn1-6@4.19.0-3build1
4.19.0-3ubuntu0.24.04.2
1
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
libtasn1@4.16.0-9.el9
0:4.16.0-10.el9_8
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
libtasn1@4.16.0-8.el9_1
0:4.16.0-10.el9_8
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
libtasn1@4.16.0-8.el9_1
0:4.16.0-10.el9_8
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
libtasn1@4.16.0-8.el9_1
0:4.16.0-10.el9_8
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
libtasn1@4.16.0-8.el9_1
0:4.16.0-10.el9_8
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
libtasn1-6@4.19.0-2
no fix listed
1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
libtasn1-6@4.19.0-2
no fix listed
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
gcr.io/spotinst-artifacts/spot-ocean-metric-exporter:1.0.5ae57b62291aa
libtasn1@4.20.0-r0
4.21.0-r0
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.14.051404ef4419c
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
ghcr.io/98jan/smalland-server/smalland-server:deveb7be822d5b2
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
libtasn1@4.16.0-9.el9
0:4.16.0-10.el9_8
1
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
libtasn1-6@4.19.0-3build1
4.19.0-3ubuntu0.24.04.2
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
libtasn1-6@4.19.0-3build1
4.19.0-3ubuntu0.24.04.2
1
ghcr.io/afairgiant/medikeep:v0.70.04c28334f3c79
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
libtasn1-6@4.19.0-3build1
4.19.0-3ubuntu0.24.04.2
1
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
ghcr.io/appscode/csi-driver-cacerts:v0.6.0ab213b156017
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
libtasn1@4.13-4.el8_7
0:4.13-6.el8_10
1
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
libtasn1-6@4.19.0-3build1
4.19.0-3ubuntu0.24.04.2
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/atuinsh/atuin:18.12.0e953fa9e36ef
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.