StackRadar

CVE-2025-1372

High

Advisory

Published 17 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
288
of 17,781 indexed, latest versions
Container images
292
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 288 of 17,781 indexed charts deploy, on 292 images.

Affected packageAffected versionsFixed inImages
elfutilsdeb0.186-1build1, 0.188-2.1, 0.190-1.1build4, 0.190-1.1build4.1+2 more0.186-1ubuntu0.1, 0.190-1.1ubuntu0.1292
OSV records
DEBIAN-CVE-2025-1372UBUNTU-CVE-2025-1372
Also known as
USN-7369-1

Charts affected

288 by stars
ChartLatestAffected imagesRadar Score
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,565
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,888
servicexssl-hep1.8.510 of 16See more

servicex ssl-hep 1.8.5

10 of the 16 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
elfutils@0.192-4
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
elfutils@0.192-4
no fix listed

Open the chart page →

66,266
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
elfutils@0.188-2.1
no fix listed

Open the chart page →

20,223
steadybit-agentsteadybit3.1.1612 of 6See more

steadybit-agent steadybit 3.1.161

2 of the 6 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
elfutils@0.192-4
no fix listed
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
elfutils@0.192-4
no fix listed

Open the chart page →

4,277
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
elfutils@0.188-2.1
no fix listed

Open the chart page →

13,390
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
elfutils@0.192-4
no fix listed

Open the chart page →

3,389
convert-datasvtechVerified publisher0.13.21 of 3See more

convert-data svtech 0.13.2

1 of the 3 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

7,588
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
elfutils@0.192-4
no fix listed

Open the chart page →

4,674
elasticsearchsvtech-public-helm-charts1.0.01 of 1See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

12,048
preparationsvtech-public-helm-charts1.0.01 of 1See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

12,048
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,199
tensor_apptensor-app0.2.22 of 3See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
elfutils@0.186-1build1
0.186-1ubuntu0.1
xeladock/nginx2:latestc259a67b1dff
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

17,461
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,648
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
elfutils@0.188-2.1
no fix listed
opea/embedding-tei:1.05c9639de61c1
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed
opea/reranking-tei:1.0e48613afb191
elfutils@0.188-2.1
no fix listed
opea/retriever-redis:1.0eb746b263705
elfutils@0.188-2.1
no fix listed

Open the chart page →

39,090
codegentest-opea1.0.03 of 5See more

codegen test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
elfutils@0.188-2.1
no fix listed
opea/codegen-ui:1.02bee4eb66f3e
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,814
codetranstest-opea1.0.03 of 5See more

codetrans test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
elfutils@0.188-2.1
no fix listed
opea/codetrans-ui:1.03ef121f34610
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,385
docsumtest-opea1.0.03 of 5See more

docsum test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
elfutils@0.188-2.1
no fix listed
opea/docsum-ui:1.07f854e9bffaf
elfutils@0.188-2.1
no fix listed
opea/llm-docsum-tgi:1.002f9e8fa5d71
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
elfutils@0.188-2.1
no fix listed

Open the chart page →

9,616
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,350
jellyfinth-chartsVerified publisher0.1.01 of 1See more

jellyfin th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.77ae36aab93ef
elfutils@0.188-2.1
no fix listed

Open the chart page →

3,958
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
elfutils@0.188-2.1
no fix listed

Open the chart page →

10,086
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
elfutils@0.188-2.1
no fix listed

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
elfutils@0.188-2.1
no fix listed

Open the chart page →

14,358
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

9,347
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
elfutils@0.192-4
no fix listed

Open the chart page →

3,911
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,984
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

6,232
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
elfutils@0.188-2.1
no fix listed

Open the chart page →

9,117
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

9,248
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

14,100
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-1372.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1

Open the chart page →

2,097

Container images carrying it

292 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
elfutils@0.192-4
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
elfutils@0.188-2.1
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
elfutils@0.188-2.1
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
elfutils@0.188-2.1
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
elfutils@0.188-2.1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
elfutils@0.188-2.1
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
elfutils@0.192-4
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
xeladock/mysql_dns:latest4baf531453f1
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
xeladock/nginx2:latestc259a67b1dff
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
elfutils@0.188-2.1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
elfutils@0.188-2.1
no fix listed
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
elfutils@0.190-1.1build4.1
0.190-1.1ubuntu0.1
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
elfutils@0.188-2.1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
elfutils@0.192-4
no fix listed
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
elfutils@0.192-4
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
elfutils@0.188-2.1
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
elfutils@0.188-2.1
no fix listed
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
elfutils@0.188-2.1
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
elfutils@0.188-2.1
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
elfutils@0.188-2.1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
elfutils@0.188-2.1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
elfutils@0.188-2.1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
elfutils@0.188-2.1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
elfutils@0.188-2.1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
elfutils@0.188-2.1
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
elfutils@0.192-4
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
elfutils@0.188-2.1
no fix listed
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
elfutils@0.192-4
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
elfutils@0.192-4
no fix listed
1
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
elfutils@0.192-4
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
elfutils@0.192-4
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
elfutils@0.188-2.1
no fix listed
1
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
elfutils@0.192-4
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
elfutils@0.188-2.1
no fix listed
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
elfutils@0.192-4
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
elfutils@0.188-2.1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
elfutils@0.188-2.1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
elfutils@0.188-2.1
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
elfutils@0.188-2.1
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
elfutils@0.188-2.1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.2.0ae13784ffcfc
elfutils@0.192-4
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
elfutils@0.192-4
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
elfutils@0.192-4
no fix listed
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
elfutils@0.192-4
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.