StackRadar

CVE-2025-14762

Medium

Advisory

Published 18 Dec 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
11
of 17,781 indexed, latest versions
Container images
14
deployed by those charts
Fix available
1 of 1
affected package

AWS SDK for Ruby's S3 Encryption Client has a Key Commitment Issue

Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 14 images.

Affected packageAffected versionsFixed inImages
aws-sdk-s3gem1.63.0, 1.104.0, 1.119.0, 1.122.0+5 more1.208.014
OSV records
GHSA-2xgq-q749-89fq

Charts affected

11 by stars
ChartLatestAffected imagesRadar Score
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
aws-sdk-s3@1.126.0
1.208.0

Open the chart page →

10,530
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
aws-sdk-s3@1.119.0
1.208.0

Open the chart page →

5,056
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
aws-sdk-s3@1.104.0
1.208.0

Open the chart page →

6,810
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
aws-sdk-s3@1.63.0
1.208.0
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
aws-sdk-s3@1.63.0
1.208.0
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
aws-sdk-s3@1.63.0
1.208.0
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
aws-sdk-s3@1.63.0
1.208.0
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
aws-sdk-s3@1.63.0
1.208.0

Open the chart page →

113,791
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
aws-sdk-s3@1.122.0
1.208.0

Open the chart page →

5,940
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
aws-sdk-s3@1.141.0
1.208.0

Open the chart page →

5,558
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
library/logstash:9.1.233eae14f0867
aws-sdk-s3@1.192.0
1.208.0

Open the chart page →

2,942
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
aws-sdk-s3@1.122.0
1.208.0

Open the chart page →

5,940
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
aws-sdk-s3@1.119.0
1.208.0

Open the chart page →

6,026
fluentd-operatorstatcan0.5.11 of 1See more

fluentd-operator statcan 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
vmware/kube-fluentd-operator:latestf028c138a5f4
aws-sdk-s3@1.134.0
1.208.0

Open the chart page →

1,955
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-14762.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
aws-sdk-s3@1.177.0
1.208.0

Open the chart page →

10,795

Container images carrying it

14 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
chatwoot/chatwoot:v3.1.0d530ab8c1753
aws-sdk-s3@1.122.0
1.208.0
2
library/logstash:9.1.233eae14f0867
aws-sdk-s3@1.192.0
1.208.0
1
openproject/community:12.0.2734743d11094
aws-sdk-s3@1.104.0
1.208.0
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
aws-sdk-s3@1.126.0
1.208.0
1
vmware/kube-fluentd-operator:latestf028c138a5f4
aws-sdk-s3@1.134.0
1.208.0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
aws-sdk-s3@1.141.0
1.208.0
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
aws-sdk-s3@1.63.0
1.208.0
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
aws-sdk-s3@1.63.0
1.208.0
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
aws-sdk-s3@1.63.0
1.208.0
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
aws-sdk-s3@1.63.0
1.208.0
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
aws-sdk-s3@1.63.0
1.208.0
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
aws-sdk-s3@1.119.0
1.208.0
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
aws-sdk-s3@1.177.0
1.208.0
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
aws-sdk-s3@1.119.0
1.208.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.