StackRadar

CVE-2025-13281

Medium

Advisory

Published 15 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.8
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
261
of 17,781 indexed, latest versions
Container images
239
deployed by those charts
Fix available
1 of 1
affected package

kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass

Carried by container images the latest versions of 261 of 17,781 indexed charts deploy, on 239 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+112 more1.32.10, 1.33.6, 1.34.2239
OSV records
GHSA-r6j8-c6r2-37rr
Also known as
GO-2025-4240

Charts affected

261 by stars
ChartLatestAffected imagesRadar Score
tfy-inferentia-operatortruefoundryVerified publisher0.2.81 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba
1.32.10

Open the chart page →

2,902
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6
1.32.10

Open the chart page →

8,607
vineyard-operatorvineyardVerified publisher0.24.21 of 2See more

vineyard-operator vineyard 0.24.2

1 of the 2 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
k8s.io/kubernetes@v1.19.3
1.32.10

Open the chart page →

4,525
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.32.10

Open the chart page →

1,122
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
k8s.io/kubernetes@v1.30.3
1.32.10

Open the chart page →

10,843
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
k8s.io/kubernetes@v1.18.19
1.32.10

Open the chart page →

15,230
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
1.32.10

Open the chart page →

2,743
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
1.32.10

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
1.32.10

Open the chart page →

11,784
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
1.32.10

Open the chart page →

12,606
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-13281.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
1.32.10

Open the chart page →

13,677

Container images carrying it

239 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
k8s.io/kubernetes@v1.33.1
1.33.6
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
k8s.io/kubernetes@v1.24.2
1.32.10
1
quay.io/argoprojlabs/argocd-rbac-operator:v0.2.451dded00137a
k8s.io/kubernetes@v1.32.6
1.32.10
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
k8s.io/kubernetes@v1.13.4
1.32.10
1
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
k8s.io/kubernetes@v1.25.9
1.32.10
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
k8s.io/kubernetes@v1.14.1
1.32.10
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
k8s.io/kubernetes@v1.24.2
1.32.10
1
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
k8s.io/kubernetes@v1.22.0
1.32.10
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
k8s.io/kubernetes@v1.24.2
1.32.10
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
k8s.io/kubernetes@v1.27.4
1.32.10
1
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
k8s.io/kubernetes@v1.25.16
1.32.10
1
quay.io/open-cluster-management/cluster-proxy:v0.12.035f9c3ad644a
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.32.10
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
k8s.io/kubernetes@v1.25.9
1.32.10
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
k8s.io/kubernetes@v1.20.4
1.32.10
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
k8s.io/kubernetes@v1.33.1
1.33.6
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
k8s.io/kubernetes@v1.34.1
1.34.2
1
registry.k8s.io/csi-vsphere/driver:v3.5.04bb8350a5a62
k8s.io/kubernetes@v1.33.0
1.33.6
1
registry.k8s.io/csi-vsphere/driver:v3.4.0f5349a8ae3f3
k8s.io/kubernetes@v1.31.2
1.32.10
1
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
k8s.io/kubernetes@v1.31.2
1.32.10
1
registry.k8s.io/csi-vsphere/syncer:v3.5.0bb88468fff2a
k8s.io/kubernetes@v1.33.0
1.33.6
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
k8s.io/kubernetes@v1.26.10
1.32.10
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
k8s.io/kubernetes@v1.34.1
1.34.2
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
k8s.io/kubernetes@v1.26.10
1.32.10
1
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
k8s.io/kubernetes@v1.25.0
1.32.10
1
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
k8s.io/kubernetes@v1.25.0
1.32.10
1
registry.k8s.io/kubectl:1.33.4261a9ed843eb
k8s.io/kubernetes@v1.33.4
1.33.6
1
registry.k8s.io/kubectl:v1.32.73c5268158974
k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88
1.32.10
1
registry.k8s.io/kubectl:v1.34.159bafa07ff3a
k8s.io/kubernetes@v1.34.1
1.34.2
1
registry.k8s.io/kubectl:v1.32.08ccae74fc039
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
1.32.10
1
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
1.32.10
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
k8s.io/kubernetes@v1.26.11
1.32.10
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
k8s.io/kubernetes@v1.28.7
1.32.10
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
k8s.io/kubernetes@v0.0.0-20240611201126-f25b321b9ae4
1.32.10
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
k8s.io/kubernetes@v1.25.0
1.32.10
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
k8s.io/kubernetes@v1.30.3
1.32.10
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
1.32.10
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
k8s.io/kubernetes@v1.29.14
1.32.10
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
k8s.io/kubernetes@v1.31.6
1.32.10
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
k8s.io/kubernetes@v1.18.0
1.32.10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.