StackRadar

CVE-2025-1371

Medium

Advisory

Published 17 Feb 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
14th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
239
of 17,781 indexed, latest versions
Container images
250
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 239 of 17,781 indexed charts deploy, on 250 images.

Affected packageAffected versionsFixed inImages
elfutilsdeb0.188-2.1, 0.190-1.1build4, 0.190-1.1build4.1, 0.192-4+1 more0.190-1.1ubuntu0.1250
OSV records
DEBIAN-CVE-2025-1371UBUNTU-CVE-2025-1371
Also known as
USN-7369-1

Charts affected

239 by stars
ChartLatestAffected imagesRadar Score
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
elfutils@0.188-2.1
no fix listed

Open the chart page →

30,219
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
elfutils@0.192-4
no fix listed

Open the chart page →

9,534
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
elfutils@0.188-2.1
no fix listed

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
elfutils@0.188-2.1
no fix listed

Open the chart page →

16,620
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,105
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
elfutils@0.192-4
no fix listed

Open the chart page →

9,755
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
elfutils@0.188-2.1
no fix listed

Open the chart page →

13,510
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
elfutils@0.188-2.1
no fix listed

Open the chart page →

3,218
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
elfutils@0.192-4
no fix listed

Open the chart page →

3,001
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,565
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,888
servicexssl-hep1.8.510 of 16See more

servicex ssl-hep 1.8.5

10 of the 16 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
elfutils@0.192-4
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
elfutils@0.192-4
no fix listed

Open the chart page →

66,266
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
elfutils@0.188-2.1
no fix listed

Open the chart page →

20,223
steadybit-agentsteadybit3.1.1612 of 6See more

steadybit-agent steadybit 3.1.161

2 of the 6 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
elfutils@0.192-4
no fix listed
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
elfutils@0.192-4
no fix listed

Open the chart page →

4,277
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
elfutils@0.188-2.1
no fix listed

Open the chart page →

13,390
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
elfutils@0.192-4
no fix listed

Open the chart page →

3,389
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
elfutils@0.192-4
no fix listed

Open the chart page →

4,674
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,199
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,648
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
elfutils@0.188-2.1
no fix listed
opea/embedding-tei:1.05c9639de61c1
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed
opea/reranking-tei:1.0e48613afb191
elfutils@0.188-2.1
no fix listed
opea/retriever-redis:1.0eb746b263705
elfutils@0.188-2.1
no fix listed

Open the chart page →

39,090
codegentest-opea1.0.03 of 5See more

codegen test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
elfutils@0.188-2.1
no fix listed
opea/codegen-ui:1.02bee4eb66f3e
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,814
codetranstest-opea1.0.03 of 5See more

codetrans test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
elfutils@0.188-2.1
no fix listed
opea/codetrans-ui:1.03ef121f34610
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,385
docsumtest-opea1.0.03 of 5See more

docsum test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
elfutils@0.188-2.1
no fix listed
opea/docsum-ui:1.07f854e9bffaf
elfutils@0.188-2.1
no fix listed
opea/llm-docsum-tgi:1.002f9e8fa5d71
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
elfutils@0.188-2.1
no fix listed

Open the chart page →

9,616
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,350
jellyfinth-chartsVerified publisher0.1.01 of 1See more

jellyfin th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.77ae36aab93ef
elfutils@0.188-2.1
no fix listed

Open the chart page →

3,958
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
elfutils@0.188-2.1
no fix listed

Open the chart page →

10,086
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
elfutils@0.188-2.1
no fix listed

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
elfutils@0.188-2.1
no fix listed

Open the chart page →

14,358
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
elfutils@0.192-4
no fix listed

Open the chart page →

3,911
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,984
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
elfutils@0.188-2.1
no fix listed

Open the chart page →

9,117
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-1371.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1

Open the chart page →

2,097

Container images carrying it

250 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
elfutils@0.188-2.1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
elfutils@0.188-2.1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
elfutils@0.188-2.1
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
elfutils@0.188-2.1
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
elfutils@0.188-2.1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.2.0ae13784ffcfc
elfutils@0.192-4
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
elfutils@0.192-4
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
elfutils@0.192-4
no fix listed
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
elfutils@0.192-4
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
elfutils@0.188-2.1
no fix listed
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
elfutils@0.188-2.1
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
elfutils@0.188-2.1
no fix listed
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
elfutils@0.192-4
no fix listed
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
elfutils@0.192-4
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
elfutils@0.192-4
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
elfutils@0.192-4
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
elfutils@0.192-4
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
elfutils@0.188-2.1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
elfutils@0.192-4
no fix listed
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
elfutils@0.192-4
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
elfutils@0.192-4
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
elfutils@0.188-2.1
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
elfutils@0.188-2.1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
elfutils@0.188-2.1
no fix listed
1
ghcr.io/rss-bridge/rss-bridge:latest606896116558
elfutils@0.188-2.1
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
elfutils@0.188-2.1
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
elfutils@0.192-4
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
elfutils@0.188-2.1
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
elfutils@0.192-4
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
elfutils@0.192-4
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
elfutils@0.192-4
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
elfutils@0.188-2.1
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
elfutils@0.188-2.1
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.31b53b0b3488e
elfutils@0.192-4
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
elfutils@0.188-2.1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
elfutils@0.188-2.1
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
elfutils@0.192-4
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
elfutils@0.188-2.1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
elfutils@0.188-2.1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
elfutils@0.188-2.1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
elfutils@0.188-2.1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
elfutils@0.188-2.1
no fix listed
1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
elfutils@0.188-2.1
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
elfutils@0.188-2.1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
elfutils@0.188-2.1
no fix listed
1
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
elfutils@0.192-4
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
elfutils@0.188-2.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.