StackRadar

CVE-2025-13151

High

Advisory

Published 7 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,949
of 17,803 indexed, latest versions
Container images
2,133
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: libtasn1 security update

Carried by container images the latest versions of 1,949 of 17,803 indexed charts deploy, on 2,133 images.

Affected packageAffected versionsFixed inImages
libtasn1-6deb3.4-3ubuntu0.1, 3.4-3ubuntu0.5, 3.4-3ubuntu0.6, 4.7-3ubuntu0.16.04.2+12 more3.4-3ubuntu0.6+esm1, 4.7-3ubuntu0.16.04.3+esm4, 4.13-2ubuntu0.1~esm1, 4.16.0-2ubuntu0.1+esm1+4 more1,738
libtasn1apk4.19.0-r2, 4.20.0-r04.21.0-r046
libtasn1rpm4.13-3.el8, 4.13-3.el8_6.1, 4.13-4.el8_7, 4.13-5.el8_10+7 more0:4.13-6.el8_10, 0:4.16.0-10.el9_8, 0:4.20.0-5.el10_2, 4.13-150000.4.14.1+2 more349
OSV records
ALPINE-CVE-2025-13151DEBIAN-CVE-2025-13151UBUNTU-CVE-2025-13151RHSA-2026:28235RHSA-2026:28253RHSA-2026:36728RLSA-2026:28253RLSA-2026:36728openSUSE-SU-2026:10033-1SUSE-SU-2026:0224-1SUSE-SU-2026:21142-1
Also known as
USN-7954-1, USN-7954-2

Charts affected

1,949 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,133 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
libtasn1@4.13-3.el8
0:4.13-6.el8_10
1
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
libtasn1@4.13-3.el8
0:4.13-6.el8_10
1
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
libtasn1@4.13-3.el8
0:4.13-6.el8_10
1
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
libtasn1@4.16.0-7.el9
0:4.16.0-10.el9_8
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
libtasn1-6@4.19.0-3ubuntu0.24.04.1
4.19.0-3ubuntu0.24.04.2
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/esphome/esphome:latest000c5ee5ee96
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
ghcr.io/firecrawl/firecrawl:2.11.349ddbbb3023fea
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/flanksource/mission-control-ai-assistant:1.0.1229a635cbeeb5
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
libtasn1-6@4.18.0-4build1
4.18.0-4ubuntu0.2
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
libtasn1-6@4.18.0-4ubuntu0.1
4.18.0-4ubuntu0.2
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
libtasn1@4.16.0-9.el9
0:4.16.0-10.el9_8
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
libtasn1@4.16.0-9.el9
0:4.16.0-10.el9_8
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
libtasn1@4.16.0-9.el9
0:4.16.0-10.el9_8
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/grycap/im:latest06a16d4f279f
libtasn1-6@4.19.0-3ubuntu0.24.04.1
4.19.0-3ubuntu0.24.04.2
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
libtasn1@4.20.0-r0
4.21.0-r0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
libtasn1-6@4.20.0-2
4.20.0-2+deb13u1
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.