StackRadar

CVE-2025-13151

High

Advisory

Published 7 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,949
of 17,803 indexed, latest versions
Container images
2,133
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: libtasn1 security update

Carried by container images the latest versions of 1,949 of 17,803 indexed charts deploy, on 2,133 images.

Affected packageAffected versionsFixed inImages
libtasn1-6deb3.4-3ubuntu0.1, 3.4-3ubuntu0.5, 3.4-3ubuntu0.6, 4.7-3ubuntu0.16.04.2+12 more3.4-3ubuntu0.6+esm1, 4.7-3ubuntu0.16.04.3+esm4, 4.13-2ubuntu0.1~esm1, 4.16.0-2ubuntu0.1+esm1+4 more1,738
libtasn1apk4.19.0-r2, 4.20.0-r04.21.0-r046
libtasn1rpm4.13-3.el8, 4.13-3.el8_6.1, 4.13-4.el8_7, 4.13-5.el8_10+7 more0:4.13-6.el8_10, 0:4.16.0-10.el9_8, 0:4.20.0-5.el10_2, 4.13-150000.4.14.1+2 more349
OSV records
ALPINE-CVE-2025-13151DEBIAN-CVE-2025-13151UBUNTU-CVE-2025-13151RHSA-2026:28235RHSA-2026:28253RHSA-2026:36728RLSA-2026:28253RLSA-2026:36728openSUSE-SU-2026:10033-1SUSE-SU-2026:0224-1SUSE-SU-2026:21142-1
Also known as
USN-7954-1, USN-7954-2

Charts affected

1,949 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,133 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
ghcr.io/wolveix/satisfactory-server:v1.9.10e0f2f8c97598
libtasn1-6@4.18.0-4ubuntu0.1
4.18.0-4ubuntu0.2
1
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/wrenix/autopush-rs/autoconnect:1.84.285f93ced88b2
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/wrenix/autopush-rs/autoendpoint:1.84.2d95e9a124eed
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
libtasn1@4.16.0-9.el9
0:4.16.0-10.el9_8
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
libtasn1-6@4.19.0-2
no fix listed
1
ghcr.io/zystem-io/zymtrace-pub-gateway:26.9.2ae9ae0925ff8
libtasn1-6@4.18.0-4ubuntu0.1
4.18.0-4ubuntu0.2
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
libtasn1@4.16.0-9.el9
0:4.16.0-10.el9_8
1
public.ecr.aws/aktosecurity/redis47200b041382
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
libtasn1-6@4.19.0-3ubuntu0.24.04.1
4.19.0-3ubuntu0.24.04.2
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.3.0f68901a54664
libtasn1@4.16.0-8.el9_1
0:4.16.0-10.el9_8
1
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
libtasn1-6@4.18.0-4ubuntu0.1
4.18.0-4ubuntu0.2
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libtasn1-6@4.19.0-2
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libtasn1-6@4.19.0-2
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libtasn1-6@4.19.0-2
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libtasn1-6@4.19.0-2
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libtasn1-6@4.19.0-2
no fix listed
1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
libtasn1-6@4.19.0-2+deb12u1
no fix listed
1
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
libtasn1-6@4.19.0-2
no fix listed
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
libtasn1-6@4.19.0-2
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libtasn1-6@4.19.0-2
no fix listed
1
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
libtasn1@4.13-4.el8_7
0:4.13-6.el8_10
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
libtasn1@4.16.0-8.el9_1
0:4.16.0-10.el9_8
1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
libtasn1@4.16.0-8.el9_1
0:4.16.0-10.el9_8
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
libtasn1-6@4.13-2
4.13-2ubuntu0.1~esm1
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
libtasn1-6@4.16.0-2
4.16.0-2ubuntu0.1+esm1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libtasn1-6@4.19.0-2
no fix listed
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
libtasn1@4.16.0-8.el9_1
0:4.16.0-10.el9_8
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
libtasn1@4.16.0-8.el9_1
0:4.16.0-10.el9_8
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.