StackRadar

CVE-2025-14505

Medium

Advisory

Published 8 Jan 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
99
of 17,781 indexed, latest versions
Container images
90
deployed by those charts
Fix available
None
affected package

Elliptic Uses a Cryptographic Primitive with a Risky Implementation

Carried by container images the latest versions of 99 of 17,781 indexed charts deploy, on 90 images.

Affected packageAffected versionsFixed inImages
ellipticnpm6.4.0, 6.4.1, 6.5.0, 6.5.2+5 moreno fix listed90
OSV records
GHSA-848j-6mx2-7j84

Charts affected

99 by stars
ChartLatestAffected imagesRadar Score
chatwootchatwootVerified publisher2.0.241 of 3See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v4.15.167ebc751c171
elliptic@6.5.4
no fix listed

Open the chart page →

9,203
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
elliptic@6.6.1
no fix listed

Open the chart page →

8,364
sorry-cypresssorry-cypressVerified publisher1.20.01 of 4See more

sorry-cypress sorry-cypress 1.20.0

1 of the 4 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-director:2.5.1110228ecd353b
elliptic@6.5.4
no fix listed

Open the chart page →

4,285
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
microcks/microcks-postman-runtime:latestcb72e46a1b3c
elliptic@6.4.1
no fix listed

Open the chart page →

10,732
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
elliptic@6.5.3
no fix listed

Open the chart page →

5,251
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
elliptic@6.5.4
no fix listed

Open the chart page →

5,946
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
elliptic@6.6.1
no fix listed

Open the chart page →

2,654
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
elliptic@6.4.1
no fix listed

Open the chart page →

9,261
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
elliptic@6.5.4
no fix listed

Open the chart page →

7,450
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
elliptic@6.5.4
no fix listed

Open the chart page →

17,404
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
elliptic@6.5.4
no fix listed

Open the chart page →

2,521
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
elliptic@6.5.4
no fix listed

Open the chart page →

7,579
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
elliptic@6.4.1
no fix listed

Open the chart page →

6,868
dltbrokerassist-iot-distributed-broker0.2.01 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

1 of the 9 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
elliptic@6.5.4
no fix listed

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.01 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

1 of the 9 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
elliptic@6.5.4
no fix listed

Open the chart page →

77,687
data-fairdata354-helmVerified publisher1.1.22 of 12See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ghcr.io/data-fair/metrics:0a8d40779eeae
elliptic@6.5.4
no fix listed
ghcr.io/data-fair/simple-directory:438a4f32fad82
elliptic@6.5.4
no fix listed

Open the chart page →

38,346
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
elliptic@6.5.4
no fix listed

Open the chart page →

5,056
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
elliptic@6.5.4
no fix listed

Open the chart page →

3,925
enbuildenbuildVerified publisher0.0.503 of 6See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
elliptic@6.6.1
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
elliptic@6.6.1
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
elliptic@6.6.1
no fix listed

Open the chart page →

31,510
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
elliptic@6.5.3
no fix listed

Open the chart page →

3,444
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
elliptic@6.5.4
no fix listed

Open the chart page →

7,801
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
elliptic@6.5.4
no fix listed

Open the chart page →

3,143
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
elliptic@6.5.4
no fix listed

Open the chart page →

5,940
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
elliptic@6.4.1
no fix listed

Open the chart page →

5,300
openccuopenccuVerified publisher3.89.81 of 1See more

openccu openccu 3.89.8

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
elliptic@6.6.1
no fix listed

Open the chart page →

1,916
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
elliptic@6.5.2
no fix listed

Open the chart page →

7,517
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
elliptic@6.4.1
no fix listed

Open the chart page →

25,443
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
elliptic@6.5.4
no fix listed

Open the chart page →

3,237
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
elliptic@6.5.4
no fix listed

Open the chart page →

2,616
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
elliptic@6.5.4
no fix listed

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
elliptic@6.5.4
no fix listed

Open the chart page →

77,706
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
elliptic@6.6.1
no fix listed

Open the chart page →

2,136
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:maine263be0a7440
elliptic@6.6.1
no fix listed

Open the chart page →

7,405
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
elliptic@6.4.1
no fix listed

Open the chart page →

29,901
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
elliptic@6.5.3
no fix listed

Open the chart page →

25,456
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
elliptic@6.5.4
no fix listed

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
elliptic@6.5.4
no fix listed

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
elliptic@6.5.4
no fix listed

Open the chart page →

5,141
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
elliptic@6.5.4
no fix listed

Open the chart page →

12,907
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
elliptic@6.6.0
no fix listed

Open the chart page →

3,769
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
elliptic@6.5.2
no fix listed

Open the chart page →

11,174
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
elliptic@6.5.4
no fix listed

Open the chart page →

3,744
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.4.101 of 1See more

connector-helm-chart enmeshed-connector 7.4.10

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.4.10e61f8bd4b8d1
elliptic@6.6.1
no fix listed

Open the chart page →

274
blobscanethereum-helm-chartsVerified publisher0.1.11 of 1See more

blobscan ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ethpandaops/blobscan:latest7a9ab6370657
elliptic@6.5.4
no fix listed

Open the chart page →

1,329
blobscan-indexerethereum-helm-chartsVerified publisher0.1.11 of 1See more

blobscan-indexer ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ethpandaops/blobscan-indexer:latestc58eb9ffe446
elliptic@6.5.4
no fix listed

Open the chart page →

2,114
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
elliptic@6.4.1
no fix listed

Open the chart page →

3,005
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
elliptic@6.5.4
no fix listed

Open the chart page →

2,266
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
elliptic@6.5.4
no fix listed

Open the chart page →

3,260
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
elliptic@6.5.4
no fix listed

Open the chart page →

4,756
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14505.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
elliptic@6.5.4
no fix listed

Open the chart page →

3,320

Container images carrying it

90 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
elliptic@6.5.4
no fix listed
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
elliptic@6.6.1
no fix listed
1
ondrejsika/parking:latestb1fd497416c8
elliptic@6.5.2
no fix listed
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
elliptic@6.4.1
no fix listed
1
penpotapp/exporter:2.2.15c835ffd87ab
elliptic@6.5.5
no fix listed
1
phntom/codimd:2.4.31b9aafbb62e6
elliptic@6.5.4
no fix listed
1
rakii8585/angular-node-webapp:latest026082a515ac
elliptic@6.5.4
no fix listed
1
requarks/wiki:canary-2.5.2438b5865a7386c
elliptic@6.5.4
no fix listed
1
samajh/alprfrontend:latest05ef4fddbb75
elliptic@6.5.4
no fix listed
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
elliptic@6.5.4
no fix listed
1
temporalio/web:1.14.033cfa863d8ce
elliptic@6.5.4
no fix listed
1
testhubio/testhub-frontend:on-preme86c2db53be8
elliptic@6.5.2
no fix listed
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
elliptic@6.5.4
no fix listed
1
ubercadence/web:v3.29.58564a5b44a6d
elliptic@6.5.3
no fix listed
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
elliptic@6.5.4
no fix listed
1
wekanteam/wekan:v4.2268a51f0327df
elliptic@6.4.0
no fix listed
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
elliptic@6.6.1
no fix listed
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
elliptic@6.6.1
no fix listed
1
ghcr.io/bluesky-social/pds:0.4d95725b24dbe
elliptic@6.6.1
no fix listed
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
elliptic@6.6.1
no fix listed
1
ghcr.io/data-fair/metrics:0a8d40779eeae
elliptic@6.5.4
no fix listed
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
elliptic@6.5.4
no fix listed
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
elliptic@6.6.1
no fix listed
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
elliptic@6.5.4
no fix listed
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
elliptic@6.5.4
no fix listed
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
elliptic@6.5.4
no fix listed
1
ghcr.io/nmshd/connector:7.4.10e61f8bd4b8d1
elliptic@6.6.1
no fix listed
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
elliptic@6.6.1
no fix listed
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
elliptic@6.5.4
no fix listed
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
elliptic@6.5.3
no fix listed
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
elliptic@6.5.4
no fix listed
1
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
elliptic@6.6.1
no fix listed
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
elliptic@6.5.4
no fix listed
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
elliptic@6.5.3
no fix listed
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
elliptic@6.5.3
no fix listed
1
quay.io/wekan/wekan:v5.65cb17600883a3
elliptic@6.5.4
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
elliptic@6.6.1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
elliptic@6.6.1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
elliptic@6.6.1
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
elliptic@6.4.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.