StackRadar

CVE-2025-1390

Medium

Advisory

Published 18 Feb 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
782
of 17,790 indexed, latest versions
Container images
855
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 782 of 17,790 indexed charts deploy, on 855 images.

Affected packageAffected versionsFixed inImages
libcap2deb1:2.24-0ubuntu2, 1:2.24-12, 1:2.25-1.2, 1:2.32-1+6 more1:2.32-1ubuntu0.2, 1:2.44-1ubuntu0.22.04.2, 1:2.66-4+deb12u1, 1:2.66-5ubuntu2.2855
OSV records
DEBIAN-CVE-2025-1390UBUNTU-CVE-2025-1390
Also known as
USN-7287-1

Charts affected

782 by stars
ChartLatestAffected imagesRadar Score
image-storage-servicejtektVerified publisher0.4.32 of 4See more

image-storage-service jtekt 0.4.3

2 of the 4 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libcap2@1:2.66-4
1:2.66-4+deb12u1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

22,728
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
libcap2@1:2.66-4
1:2.66-4+deb12u1
moreillon/user-manager-front:v5.0.3b067dbbbb6af
libcap2@1:2.66-4
1:2.66-4+deb12u1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libcap2@1:2.66-4
1:2.66-4+deb12u1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

63,822
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

16,680
actual-budgetk8s-chartsVerified publisher0.2.31 of 1See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
actualbudget/actual-server:25.3.158fecd9088b7
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

2,633
bitcoin-stackk8s-chartsVerified publisher1.0.11 of 1See more

bitcoin-stack k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
blockstream/bitcoind:27.29472492530e3
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

2,436
jellyfink8s-chartsVerified publisher0.2.41 of 1See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.696b09723b22f
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

4,127
nostr-rs-relayk8s-chartsVerified publisher1.0.11 of 1See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
scsibug/nostr-rs-relay:0.9.003f54bfbffff
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

3,371
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
libcap2@1:2.44-1build3
1:2.44-1ubuntu0.22.04.2

Open the chart page →

9,835
k8s-ssh-bastionk8s-ssh-bastion0.5.41 of 1See more

k8s-ssh-bastion k8s-ssh-bastion 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.2

Open the chart page →

3,327
kanrikanri0.1.01 of 1See more

kanri kanri 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

2,100
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

8,877
helm-mongodb-operatorkeyporttech0.1.01 of 1See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
libcap2@1:2.24-12
no fix listed

Open the chart page →

8,819
quickwitkfirfer0.7.21 of 1See more

quickwit kfirfer 0.7.2

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

3,503
rabbitmqkfirfer0.7.211 of 2See more

rabbitmq kfirfer 0.7.21

1 of the 2 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
library/rabbitmq:3.12.100742852455ad
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2

Open the chart page →

2,487
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
libcap2@1:2.44-1build3
1:2.44-1ubuntu0.22.04.2

Open the chart page →

19,257
cdashkitwareVerified publisher0.19.02 of 3See more

cdash kitware 0.19.0

2 of the 3 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
libcap2@1:2.66-4
1:2.66-4+deb12u1
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

12,206
visual-regression-trackerkokuwa5.1.02 of 4See more

visual-regression-tracker kokuwa 5.1.0

2 of the 4 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
libcap2@1:2.66-4
1:2.66-4+deb12u1
visualregressiontracker/api:5.0.11941aeb8c8bf9
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

9,147
kubeflowkromanow94-kubeflow0.5.17 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

7 of the 30 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.13.073486345a602
libcap2@1:2.66-4
1:2.66-4+deb12u1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
libcap2@1:2.66-4
1:2.66-4+deb12u1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
libcap2@1:2.66-4
1:2.66-4+deb12u1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
libcap2@1:2.66-4
1:2.66-4+deb12u1
library/python:3.7eedf63967cdb
libcap2@1:2.66-4
1:2.66-4+deb12u1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
libcap2@1:2.66-4
1:2.66-4+deb12u1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

70,968
fileserverkronkltdVerified publisher0.3.101 of 1See more

fileserver kronkltd 0.3.10

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
duck1123/lnd-fileserver:latest9d6fb247b714
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2

Open the chart page →

3,772
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
duck1123/cert-downloader:latest0e29f19fa67c
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2

Open the chart page →

5,647
chaos-meshkubeblocksVerified publisher2.7.22 of 4See more

chaos-mesh kubeblocks 2.7.2

2 of the 4 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
libcap2@1:2.66-4
1:2.66-4+deb12u1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

13,572
ciliumkubeblocksVerified publisher1.15.11 of 2See more

cilium kubeblocks 1.15.1

1 of the 2 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2

Open the chart page →

5,130
openebskubeblocksVerified publisher3.10.02 of 3See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
libcap2@1:2.44-1build3
1:2.44-1ubuntu0.22.04.2
openebs/node-disk-operator:2.1.06afe2123c457
libcap2@1:2.44-1build3
1:2.44-1ubuntu0.22.04.2

Open the chart page →

10,587
spiderpoolkubeblocksVerified publisher1.2.01 of 4See more

spiderpool kubeblocks 1.2.0

1 of the 4 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
libcap2@1:2.32-1ubuntu0.1
1:2.32-1ubuntu0.2

Open the chart page →

8,470
juicefs-tenantkubegems1.0.11 of 3See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
kubegems/redis:7.2.5-debian-12-r2870ee3a77add
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

4,306
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

4,310
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
libcap2@1:2.32-1
1:2.32-1ubuntu0.2

Open the chart page →

7,208
databend-metakubesphere-stable0.7.31 of 1See more

databend-meta kubesphere-stable 0.7.3

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
datafuselabs/databend-meta:v1.2.279ba877ee6cb4d
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

2,838
databend-querykubesphere-stable0.8.31 of 1See more

databend-query kubesphere-stable 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
datafuselabs/databend-query:v1.2.279a936843b85b4
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

2,838
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
libcap2@1:2.44-1build3
1:2.44-1ubuntu0.22.04.2

Open the chart page →

18,420
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.7.25d3f9bf9240b
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2

Open the chart page →

48,954
IOMeshkubesphere-stable1.2.03 of 25See more

IOMesh kubesphere-stable 1.2.0

3 of the 25 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2
iomesh/node-disk-manager:1.8.0-2292ad270082e
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.2
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.2

Open the chart page →

46,639
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
libcap2@1:2.24-12
no fix listed

Open the chart page →

18,526
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
libcap2@1:2.24-12
no fix listed

Open the chart page →

9,388
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2
penpotapp/exporter:2.2.15c835ffd87ab
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2

Open the chart page →

16,976
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.42 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.2
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

20,386
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2

Open the chart page →

6,913
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.2

Open the chart page →

3,148
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
libcap2@1:2.66-5ubuntu2
1:2.66-5ubuntu2.2

Open the chart page →

3,379
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
libcap2@1:2.25-1.2
no fix listed

Open the chart page →

16,539
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2

Open the chart page →

7,848
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
libcap2@1:2.25-1.2
no fix listed

Open the chart page →

26,377
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

4,058
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

4,643
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
libcap2@1:2.66-4
1:2.66-4+deb12u1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

5,387
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

38,239
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2

Open the chart page →

10,780
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

7,534
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
libcap2@1:2.44-1ubuntu0.22.04.1
1:2.44-1ubuntu0.22.04.2

Open the chart page →

6,680
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-1390.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
libcap2@1:2.66-4
1:2.66-4+deb12u1

Open the chart page →

6,578

Container images carrying it

855 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
libcap2@1:2.66-4
1:2.66-4+deb12u1
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
libcap2@1:2.32-1
1:2.32-1ubuntu0.2
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
libcap2@1:2.66-4
1:2.66-4+deb12u1
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
libcap2@1:2.66-4
1:2.66-4+deb12u1
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
libcap2@1:2.66-4
1:2.66-4+deb12u1
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.