StackRadar

CVE-2025-1376

Medium

Advisory

Published 17 Feb 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
461
of 17,787 indexed, latest versions
Container images
457
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 461 of 17,787 indexed charts deploy, on 457 images.

Affected packageAffected versionsFixed inImages
elfutilsdeb0.176-1.1build1, 0.176-1.1ubuntu0.1, 0.186-1build1, 0.186-1ubuntu0.1+8 moreno fix listed457
OSV records
DEBIAN-CVE-2025-1376UBUNTU-CVE-2025-1376

Charts affected

461 by stars
ChartLatestAffected imagesRadar Score
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
elfutils@0.176-1.1build1
no fix listed

Open the chart page →

9,225
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
elfutils@0.176-1.1build1
no fix listed

Open the chart page →

9,225
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
library/mariadb:10ce66c7be32a0
elfutils@0.186-1ubuntu0.1
no fix listed

Open the chart page →

8,858
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
elfutils@0.188-2.1
no fix listed

Open the chart page →

8,824
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
elfutils@0.176-1.1build1
no fix listed

Open the chart page →

15,287
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
elfutils@0.186-1build1
no fix listed

Open the chart page →

9,296
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
elfutils@0.190-1.1ubuntu0.1
no fix listed

Open the chart page →

4,032
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
library/mariadb:ltsdd9b303aed4f
elfutils@0.190-1.1ubuntu0.1
no fix listed

Open the chart page →

5,635
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
elfutils@0.186-1build1
no fix listed

Open the chart page →

14,172
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
elfutils@0.190-1.1build4
no fix listed

Open the chart page →

2,136
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-1376.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
elfutils@0.186-1ubuntu0.1
no fix listed

Open the chart page →

7,916

Container images carrying it

457 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
elfutils@0.192-4
no fix listed
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
elfutils@0.192-4
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
elfutils@0.186-1build1
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
elfutils@0.192-4
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
elfutils@0.188-2.1
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
elfutils@0.188-2.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
elfutils@0.188-2.1
no fix listed
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
elfutils@0.186-1ubuntu0.1
no fix listed
1
ghcr.io/rss-bridge/rss-bridge:latest606896116558
elfutils@0.188-2.1
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
elfutils@0.188-2.1
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
elfutils@0.192-4
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
elfutils@0.188-2.1
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
elfutils@0.192-4
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
elfutils@0.176-1.1build1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
elfutils@0.176-1.1build1
no fix listed
1
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
elfutils@0.176-1.1ubuntu0.1
no fix listed
1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
elfutils@0.176-1.1ubuntu0.1
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
elfutils@0.176-1.1build1
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
elfutils@0.192-4
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
elfutils@0.192-4
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
elfutils@0.188-2.1
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
elfutils@0.188-2.1
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.31b53b0b3488e
elfutils@0.192-4
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
elfutils@0.188-2.1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
elfutils@0.188-2.1
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
elfutils@0.192-4
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
elfutils@0.188-2.1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
elfutils@0.188-2.1
no fix listed
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
elfutils@0.176-1.1build1
no fix listed
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
elfutils@0.186-1ubuntu0.1
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
elfutils@0.188-2.1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
elfutils@0.188-2.1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
elfutils@0.188-2.1
no fix listed
1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
elfutils@0.188-2.1
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
elfutils@0.190-1.1ubuntu0.1
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
elfutils@0.176-1.1build1
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
elfutils@0.188-2.1
no fix listed
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
elfutils@0.186-1build1
no fix listed
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
elfutils@0.190-1.1ubuntu0.1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.