StackRadar

CVE-2025-1371

Medium

Advisory

Published 17 Feb 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
239
of 17,781 indexed, latest versions
Container images
250
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 239 of 17,781 indexed charts deploy, on 250 images.

Affected packageAffected versionsFixed inImages
elfutilsdeb0.188-2.1, 0.190-1.1build4, 0.190-1.1build4.1, 0.192-4+1 more0.190-1.1ubuntu0.1250
OSV records
DEBIAN-CVE-2025-1371UBUNTU-CVE-2025-1371
Also known as
USN-7369-1

Charts affected

239 by stars
ChartLatestAffected imagesRadar Score
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
elfutils@0.188-2.1
no fix listed

Open the chart page →

30,219
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
elfutils@0.192-4
no fix listed

Open the chart page →

9,534
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
elfutils@0.188-2.1
no fix listed

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
elfutils@0.188-2.1
no fix listed

Open the chart page →

16,620
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,105
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
elfutils@0.192-4
no fix listed

Open the chart page →

9,755
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
elfutils@0.188-2.1
no fix listed

Open the chart page →

13,510
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
elfutils@0.188-2.1
no fix listed

Open the chart page →

3,218
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
elfutils@0.192-4
no fix listed

Open the chart page →

3,001
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,565
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,888
servicexssl-hep1.8.510 of 16See more

servicex ssl-hep 1.8.5

10 of the 16 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
elfutils@0.192-4
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
elfutils@0.192-4
no fix listed

Open the chart page →

66,266
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
elfutils@0.188-2.1
no fix listed

Open the chart page →

20,223
steadybit-agentsteadybit3.1.1612 of 6See more

steadybit-agent steadybit 3.1.161

2 of the 6 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
elfutils@0.192-4
no fix listed
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
elfutils@0.192-4
no fix listed

Open the chart page →

4,277
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
elfutils@0.188-2.1
no fix listed

Open the chart page →

13,390
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
elfutils@0.192-4
no fix listed

Open the chart page →

3,389
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
elfutils@0.192-4
no fix listed

Open the chart page →

4,674
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,199
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,648
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
elfutils@0.188-2.1
no fix listed
opea/embedding-tei:1.05c9639de61c1
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed
opea/reranking-tei:1.0e48613afb191
elfutils@0.188-2.1
no fix listed
opea/retriever-redis:1.0eb746b263705
elfutils@0.188-2.1
no fix listed

Open the chart page →

39,090
codegentest-opea1.0.03 of 5See more

codegen test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
elfutils@0.188-2.1
no fix listed
opea/codegen-ui:1.02bee4eb66f3e
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,814
codetranstest-opea1.0.03 of 5See more

codetrans test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
elfutils@0.188-2.1
no fix listed
opea/codetrans-ui:1.03ef121f34610
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,385
docsumtest-opea1.0.03 of 5See more

docsum test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
elfutils@0.188-2.1
no fix listed
opea/docsum-ui:1.07f854e9bffaf
elfutils@0.188-2.1
no fix listed
opea/llm-docsum-tgi:1.002f9e8fa5d71
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
elfutils@0.188-2.1
no fix listed

Open the chart page →

9,616
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,350
jellyfinth-chartsVerified publisher0.1.01 of 1See more

jellyfin th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.77ae36aab93ef
elfutils@0.188-2.1
no fix listed

Open the chart page →

3,958
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
elfutils@0.188-2.1
no fix listed

Open the chart page →

10,086
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
elfutils@0.188-2.1
no fix listed

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
elfutils@0.188-2.1
no fix listed

Open the chart page →

14,358
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
elfutils@0.192-4
no fix listed

Open the chart page →

3,911
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,984
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
elfutils@0.188-2.1
no fix listed

Open the chart page →

9,117
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1

Open the chart page →

2,097

Container images carrying it

250 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
machines/filestash:latest0b8fc005e52e
elfutils@0.192-4
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
elfutils@0.188-2.1
no fix listed
1
merlos/zookeeper:3.9.3a38fc7e09ed7
elfutils@0.188-2.1
no fix listed
1
mindsdb/mindsdb:latest163011c09299
elfutils@0.192-4
no fix listed
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
elfutils@0.188-2.1
no fix listed
1
moreillon/api-proxy:latestd7d4a5463525
elfutils@0.188-2.1
no fix listed
1
moreillon/food-manager:lateste8fd856e593d
elfutils@0.188-2.1
no fix listed
1
moreillon/group-manager:latest3caa8f710ee0
elfutils@0.188-2.1
no fix listed
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
elfutils@0.188-2.1
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
elfutils@0.188-2.1
no fix listed
1
netdata/netdata:v2.11.0c45c71eb23ff
elfutils@0.192-4
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
elfutils@0.192-4
no fix listed
1
oneuptime/probe:release6b2d98713711
elfutils@0.188-2.1
no fix listed
1
onyxdotapp/onyx-backend:latest473fdffe4e67
elfutils@0.192-4
no fix listed
1
opea/chatqna:1.038c51b791efa
elfutils@0.188-2.1
no fix listed
1
opea/codegen:1.058f91683892d
elfutils@0.188-2.1
no fix listed
1
opea/codegen-ui:1.02bee4eb66f3e
elfutils@0.188-2.1
no fix listed
1
opea/codetrans:1.0e2436483b73d
elfutils@0.188-2.1
no fix listed
1
opea/codetrans-ui:1.03ef121f34610
elfutils@0.188-2.1
no fix listed
1
opea/docsum:1.03eaa91849512
elfutils@0.188-2.1
no fix listed
1
opea/docsum-ui:1.07f854e9bffaf
elfutils@0.188-2.1
no fix listed
1
opea/guardrails-tgi:1.0262c6048aab8
elfutils@0.188-2.1
no fix listed
1
opea/guardrails-tgi:latestf68bec6a1271
elfutils@0.188-2.1
no fix listed
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
elfutils@0.188-2.1
no fix listed
1
opea/speecht5:1.0249afad3d268
elfutils@0.188-2.1
no fix listed
1
opea/web-retriever-chroma:1.0fe08165d7770
elfutils@0.188-2.1
no fix listed
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
elfutils@0.188-2.1
no fix listed
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
elfutils@0.192-4
no fix listed
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
elfutils@0.188-2.1
no fix listed
1
opencsghq/label-studio:v2.5.047e22aa71870
elfutils@0.192-4
no fix listed
1
opencsghq/label-studio:v2.4.0b4e849fcf94a
elfutils@0.192-4
no fix listed
1
openproject/hocuspocus:release-338001b288dc1359dfb5
elfutils@0.188-2.1
no fix listed
1
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
elfutils@0.192-4
no fix listed
1
phan2410/dummy-service:0.0.89c6ed6de26ca
elfutils@0.188-2.1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1
1
polyaxon/polyaxon-api:2.16.42b55c3265a90
elfutils@0.192-4
no fix listed
1
polyaxon/polyaxon-streams:2.16.4c186bd9834c0
elfutils@0.192-4
no fix listed
1
pretix/standalone:2026.7.05df3b7aa852e
elfutils@0.192-4
no fix listed
1
probely/farcaster-onprem-agent:v3741b34e8166f
elfutils@0.188-2.1
no fix listed
1
redimp/otterwiki:2778bf30da3da
elfutils@0.188-2.1
no fix listed
1
rocketadmin/rocketadmin:1.17.710955ef540b9
elfutils@0.188-2.1
no fix listed
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
elfutils@0.192-4
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
elfutils@0.188-2.1
no fix listed
1
sigp/siren:v3.0.42c219b04758e
elfutils@0.188-2.1
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
elfutils@0.188-2.1
no fix listed
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
elfutils@0.188-2.1
no fix listed
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
elfutils@0.188-2.1
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
elfutils@0.188-2.1
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
elfutils@0.188-2.1
no fix listed
1
sslhep/servicex_app:v1.8.51d12f943cec5
elfutils@0.192-4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.