StackRadar

CVE-2025-1377

Medium

Advisory

Published 17 Feb 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
288
of 17,781 indexed, latest versions
Container images
292
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 288 of 17,781 indexed charts deploy, on 292 images.

Affected packageAffected versionsFixed inImages
elfutilsdeb0.186-1build1, 0.188-2.1, 0.190-1.1build4, 0.190-1.1build4.1+2 more0.186-1ubuntu0.1, 0.190-1.1ubuntu0.1292
OSV records
DEBIAN-CVE-2025-1377UBUNTU-CVE-2025-1377
Also known as
USN-7369-1

Charts affected

288 by stars
ChartLatestAffected imagesRadar Score
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,565
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,888
servicexssl-hep1.8.510 of 16See more

servicex ssl-hep 1.8.5

10 of the 16 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
elfutils@0.192-4
no fix listed
sslhep/servicex_app:v1.8.51d12f943cec5
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
elfutils@0.192-4
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
elfutils@0.192-4
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
elfutils@0.192-4
no fix listed

Open the chart page →

66,266
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
elfutils@0.188-2.1
no fix listed

Open the chart page →

20,223
steadybit-agentsteadybit3.1.1612 of 6See more

steadybit-agent steadybit 3.1.161

2 of the 6 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
elfutils@0.192-4
no fix listed
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
elfutils@0.192-4
no fix listed

Open the chart page →

4,277
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
elfutils@0.188-2.1
no fix listed

Open the chart page →

13,390
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
elfutils@0.192-4
no fix listed

Open the chart page →

3,389
convert-datasvtechVerified publisher0.13.21 of 3See more

convert-data svtech 0.13.2

1 of the 3 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

7,588
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
elfutils@0.192-4
no fix listed

Open the chart page →

4,674
elasticsearchsvtech-public-helm-charts1.0.01 of 1See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

12,048
preparationsvtech-public-helm-charts1.0.01 of 1See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

12,048
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,199
tensor_apptensor-app0.2.22 of 3See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
elfutils@0.186-1build1
0.186-1ubuntu0.1
xeladock/nginx2:latestc259a67b1dff
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

17,461
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
elfutils@0.188-2.1
no fix listed

Open the chart page →

11,648
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
elfutils@0.188-2.1
no fix listed
opea/embedding-tei:1.05c9639de61c1
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed
opea/reranking-tei:1.0e48613afb191
elfutils@0.188-2.1
no fix listed
opea/retriever-redis:1.0eb746b263705
elfutils@0.188-2.1
no fix listed

Open the chart page →

39,090
codegentest-opea1.0.03 of 5See more

codegen test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
elfutils@0.188-2.1
no fix listed
opea/codegen-ui:1.02bee4eb66f3e
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,814
codetranstest-opea1.0.03 of 5See more

codetrans test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
elfutils@0.188-2.1
no fix listed
opea/codetrans-ui:1.03ef121f34610
elfutils@0.188-2.1
no fix listed
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,385
docsumtest-opea1.0.03 of 5See more

docsum test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
elfutils@0.188-2.1
no fix listed
opea/docsum-ui:1.07f854e9bffaf
elfutils@0.188-2.1
no fix listed
opea/llm-docsum-tgi:1.002f9e8fa5d71
elfutils@0.188-2.1
no fix listed

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
elfutils@0.188-2.1
no fix listed

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
elfutils@0.188-2.1
no fix listed

Open the chart page →

9,616
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,350
jellyfinth-chartsVerified publisher0.1.01 of 1See more

jellyfin th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.77ae36aab93ef
elfutils@0.188-2.1
no fix listed

Open the chart page →

3,958
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
elfutils@0.188-2.1
no fix listed

Open the chart page →

10,086
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
elfutils@0.188-2.1
no fix listed

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
elfutils@0.188-2.1
no fix listed

Open the chart page →

14,358
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

9,347
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
elfutils@0.192-4
no fix listed

Open the chart page →

3,911
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
elfutils@0.188-2.1
no fix listed

Open the chart page →

5,984
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

6,232
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
elfutils@0.188-2.1
no fix listed

Open the chart page →

9,117
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

9,248
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
elfutils@0.186-1build1
0.186-1ubuntu0.1

Open the chart page →

14,100
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-1377.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
elfutils@0.190-1.1build4
0.190-1.1ubuntu0.1

Open the chart page →

2,097

Container images carrying it

292 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
kinseii/wazuh-agent:4.14.17160eb143728
elfutils@0.188-2.1
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
elfutils@0.188-2.1
no fix listed
1
laly9999/node-app:1dd0e503913e1
elfutils@0.188-2.1
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
elfutils@0.188-2.1
no fix listed
1
library/cassandra:4.0093ee8ee5eb2
elfutils@0.188-2.1
no fix listed
1
library/mariadb:10.11.21c33370a599c
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
library/mariadb:10.10.2bfc25a68e113
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
library/mariadb:10.9.4fbb8456ebdb1
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
library/nextcloud:31.0.6-apache588609d76b21
elfutils@0.188-2.1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
elfutils@0.192-4
no fix listed
1
library/node:208f693eaa7e0a
elfutils@0.188-2.1
no fix listed
1
library/node:latestf5d1cc40abc1
elfutils@0.192-4
no fix listed
1
library/python:3.1070c9cc675605
elfutils@0.192-4
no fix listed
1
library/python:3.8d41127070014
elfutils@0.188-2.1
no fix listed
1
library/python:3.9da5aee29682d
elfutils@0.192-4
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
elfutils@0.188-2.1
no fix listed
1
livekit/ingress:v1.2.21ab01641b366
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
localstack/localstack:3.19d278167f2b7
elfutils@0.188-2.1
no fix listed
1
louislam/uptime-kuma:2.5.33e24e96c89ef
elfutils@0.188-2.1
no fix listed
1
louislam/uptime-kuma:2.0.24c364ef96aad
elfutils@0.188-2.1
no fix listed
1
louislam/uptime-kuma:2.4.091e963bfda56
elfutils@0.188-2.1
no fix listed
1
machines/filestash:latest0b8fc005e52e
elfutils@0.192-4
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
elfutils@0.188-2.1
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
merlos/zookeeper:3.9.3a38fc7e09ed7
elfutils@0.188-2.1
no fix listed
1
mindsdb/mindsdb:latest163011c09299
elfutils@0.192-4
no fix listed
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
elfutils@0.188-2.1
no fix listed
1
mlikiowa/napcat-docker:latest1336a777f9a4
elfutils@0.186-1build1
0.186-1ubuntu0.1
1
moreillon/api-proxy:latestd7d4a5463525
elfutils@0.188-2.1
no fix listed
1
moreillon/food-manager:lateste8fd856e593d
elfutils@0.188-2.1
no fix listed
1
moreillon/group-manager:latest3caa8f710ee0
elfutils@0.188-2.1
no fix listed
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
elfutils@0.188-2.1
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
elfutils@0.188-2.1
no fix listed
1
netdata/netdata:v2.11.0c45c71eb23ff
elfutils@0.192-4
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
elfutils@0.192-4
no fix listed
1
oneuptime/probe:release6b2d98713711
elfutils@0.188-2.1
no fix listed
1
onyxdotapp/onyx-backend:latest473fdffe4e67
elfutils@0.192-4
no fix listed
1
opea/chatqna:1.038c51b791efa
elfutils@0.188-2.1
no fix listed
1
opea/codegen:1.058f91683892d
elfutils@0.188-2.1
no fix listed
1
opea/codegen-ui:1.02bee4eb66f3e
elfutils@0.188-2.1
no fix listed
1
opea/codetrans:1.0e2436483b73d
elfutils@0.188-2.1
no fix listed
1
opea/codetrans-ui:1.03ef121f34610
elfutils@0.188-2.1
no fix listed
1
opea/docsum:1.03eaa91849512
elfutils@0.188-2.1
no fix listed
1
opea/docsum-ui:1.07f854e9bffaf
elfutils@0.188-2.1
no fix listed
1
opea/guardrails-tgi:1.0262c6048aab8
elfutils@0.188-2.1
no fix listed
1
opea/guardrails-tgi:latestf68bec6a1271
elfutils@0.188-2.1
no fix listed
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
elfutils@0.188-2.1
no fix listed
1
opea/speecht5:1.0249afad3d268
elfutils@0.188-2.1
no fix listed
1
opea/web-retriever-chroma:1.0fe08165d7770
elfutils@0.188-2.1
no fix listed
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
elfutils@0.188-2.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.