CVE-2025-14813
CriticalAdvisory
Published 15 Apr 2026In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.3
- base score, highest
- EPSS
- 0.003
- 24th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 139
- of 17,781 indexed, latest versions
- Container images
- 137
- deployed by those charts
- Fix available
- 2 of 4
- affected packages
Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks
Carried by container images the latest versions of 139 of 17,781 indexed charts deploy, on 137 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| bcprov-jdk18onmaven | 1.71, 1.72, 1.73, 1.74+10 more | 1.80.2, 1.81.1, 1.84 | 124 |
| bcprov-jdk15to18maven | 1.63, 1.65, 1.70, 1.72+8 more | 1.84 | 22 |
| bcprov-ext-jdk18onmaven | 1.75, 1.78 | no fix listed | 7 |
| bouncycastledeb | 1.61-1 | no fix listed | 1 |
- OSV records
- GHSA-574f-3g2m-x479UBUNTU-CVE-2025-14813
Charts affected
139 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| graylogkong-zVerified publisher | 3.0.32 | 1 of 5See more | 2,699 |
| nacosygqygq2Verified publisher | 2.1.10 | 1 of 4See more | 4,983 |
| guacamoleberyju-org | 1.4.2 | 1 of 3See more | 3,606 |
| wazuhwazuh-helm-morgovedVerified publisher | 2.0.7 | 1 of 5See more | 11,384 |
| glasskube-operatorglasskubeOfficialVerified publisher | 0.12.2 | 1 of 3See more | 11,933 |
| milvusmilvus-helm | 5.0.27 | 1 of 4See more | 10,670 |
| druiddruid-helmVerified publisher | 37.0.2 | 1 of 3See more | 3,812 |
| hivemq-operatorhivemqOfficialVerified publisher | 0.11.62 | 1 of 2See more | 7,857 |
| guacamoledmunozv04Verified publisher | 0.3.4 | 1 of 2See more | 3,606 |
| unifiunifiVerified publisher | 1.16.0 | 1 of 1See more | 7,268 |
| elasticsearch-clusterwiremindVerified publisher | 4.5.2 | 1 of 2See more | 2,283 |
| janssenjanssen-auth-serverOfficialVerified publisher | 0.0.0-nightly | 4 of 8See more | 1,068 |
| thehivestrangebee-helmOfficialVerified publisher | 1.0.6 | 1 of 7See more | 16,210 |
| wazuhwazuh-helmVerified publisher | 0.0.8 | 1 of 4See more | 6,168 |
| druidwiremindVerified publisher | 1.22.1 | 1 of 3See more | 7,930 |
| seafiledatamateVerified publisher | 0.6.0 | 1 of 6See more | 27,267 |
| geonode-k8sgeonode-k8sVerified publisher | 2.0.0 | 1 of 10See more | 13,953 |
| kubernetes-loggingkubernetes-logging | 4.8.0 | 2 of 6See more | 10,530 |
| musicocielmusicocielVerified publisher | 0.0.0 | 1 of 3See more | 4,406 |
| opensearchcaptnbpVerified publisher | 3.1.1 | 1 of 2See more | 998 |
| thingsboardcetic | 0.1.2 | 1 of 2See more | 5,235 |
| cosmocosmo-platformOfficialVerified publisher | 0.20.0 | 1 of 10See more | 28,839 |
| flowableflowable-oss | 7.1.0 | 1 of 2See more | 2,784 |
| nacosgujunxiang | 0.1.5 | 1 of 1See more | 1,767 |
| hazelcasthazelcastVerified publisher | 5.10.2 | 1 of 2See more | 2,634 |
| oesopsmxVerified publisher | 4.0.32 | 3 of 25See more | 107,811 |
| repoflowrepoflow-helm-public | 0.9.1 | 1 of 8See more | 13,521 |
| browserless-chromesagikazarmarkVerified publisher | 0.0.5 | 1 of 1See more | 24,488 |
| structurizrvirtualrootVerified publisher | 0.5.0 | 1 of 1See more | 4,378 |
| nacosbytectl | 0.1.6 | 1 of 1See more | 1,767 |
| cbioportalcbioportalOfficialVerified publisher | 1.1.0 | 1 of 1See more | 3,674 |
| cert-vaultcert-vaultOfficialVerified publisher | 2.12.0 | 1 of 7See more | 15,863 |
| nifid4nVerified publisher | 2.0.0 | 1 of 5See more | 5,398 |
| dbrepodbrepo | 1.13.3 | 1 of 25See more | 52,635 |
| enavenav-service-architectureVerified publisher | 0.0.7 | 6 of 10See more | 15,860 |
| atlas-cmmsf3k-techVerified publisher | 0.151.5 | 1 of 4See more | 5,291 |
| gluugluu-flexOfficialVerified publisher | 0.0.0-nightly | 4 of 9See more | 1,507 |
| gridgaingridgainOfficialVerified publisher | 1.0.6 | 1 of 1See more | 4,679 |
| guacamolehelmforgeVerified publisher | 1.5.2 | 1 of 5See more | 8,716 |
| jenkinsjkimVerified publisher | 5.5.14 | 1 of 2See more | 7,387 |
| mcpmcp-chartsVerified publisher | 0.0.23 | 1 of 7See more | 6,929 |
| clowder2ncsaVerified publisher | 1.9.7 | 1 of 12See more | 37,373 |
| data-prepperopensearch-project-helm-chartsVerified publisher | 0.3.1 | 1 of 1See more | 1,692 |
| portraitportraitVerified publisher | 0.2.13 | 1 of 8See more | 31,844 |
| querysiakhooiVerified publisher | 1.0.0 | 1 of 1See more | 1,792 |
| signserver-cesignserverOfficialVerified publisher | 2.3.5 | 1 of 1See more | 2,406 |
| starwhalestarwhaleVerified publisher | 0.6.15 | 1 of 4See more | 13,486 |
| jenkinstestchart | 0.1.9 | 1 of 2See more | 9,102 |
| jenkinstest-jenkins | 9.1.0 | 1 of 2See more | 9,102 |
| airbyteairbyte-v2Verified publisher | 2.2.0 | 1 of 10See more | 12,473 |
Container images carrying it
137 by charts deploying them
A fixed version is listed for 2 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| guacamole/ | f344085e618b | bcprov-jdk15to18 | no fix listed | 3 |
| jacobalberty/ | 896c0ab82d33 | bcprov-jdk18on | 1.80.2 | 3 |
| airbyte/ | 119be7bfb719 | bcprov-jdk18on | 1.80.2 | 2 |
| apache/ | 0116fb802786 | bcprov-jdk18on | 1.84 | 2 |
| apache/ | 7cdfd8deec92 | bcprov-jdk18on | 1.80.2 | 2 |
| bitnamilegacy/ | 00176a47afa0 | bcprov-jdk18on | 1.80.2 | 2 |
| hazelcast/ | 991ddb27c251 | bcprov-jdk18on | 1.80.2 | 2 |
| inaccel/ | 8c53744ed70b | bcprov-jdk18on | 1.80.2 | 2 |
| jenkins/ | b470bcdc4ecd | bcprov-jdk18on | 1.80.2 | 2 |
| jenkins/ | c4098086090c | bcprov-jdk18on | 1.84 | 2 |
| library/ | 89729a95066a | bcprov-jdk18on | 1.80.2 | 2 |
| nacos/ | 1c191c30c8cd | bcprov-jdk18on | 1.80.2 | 2 |
| opensearchproject/ | 7f6fa1efee8f | bcprov-jdk15to18 bcprov-jdk18on | no fix listed 1.80.2 | 2 |
| ghcr.io/ | 536358d7b17e | bcprov-jdk18on | 1.84 | 2 |
| ghcr.io/ | 7752874e71d8 | bcprov-jdk18on | 1.80.2 | 2 |
| ghcr.io/ | 900e2b88bd08 | bcprov-jdk18on | 1.80.2 | 2 |
| ghcr.io/ | 2a797804f08c | bcprov-jdk18on | 1.80.2 | 2 |
| ghcr.io/ | 096b8bcbbe45 | bcprov-jdk18on | 1.80.2 | 2 |
| quay.io/ | 044a457e0498 | bcprov-jdk18on | 1.80.2 | 2 |
| 1dev/ | cd5b12fe5471 | bcprov-jdk18on | 1.80.2 | 1 |
| 2martens/ | bf1cdb80239d | bcprov-jdk18on | 1.80.2 | 1 |
| 2martens/ | bd1ba6ab84c9 | bcprov-jdk18on | 1.80.2 | 1 |
| 2martens/ | ba2c3040dab0 | bcprov-jdk18on | 1.80.2 | 1 |
| 48n6e/ | a6ed886fddfc | bcprov-jdk18on | 1.84 | 1 |
| adityaprasadpathak/ | 7e3b9777362c | bcprov-jdk18on | 1.80.2 | 1 |
| apache/ | bae523439ee3 | bcprov-jdk18on | 1.80.2 | 1 |
| apache/ | 0cef139b6bf1 | bcprov-jdk18on | 1.80.2 | 1 |
| apache/ | 63b8e3e40742 | bcprov-jdk18on | 1.80.2 | 1 |
| apachepulsar/ | 16f9fdab3fa6 | bcprov-ext-jdk18on bcprov-jdk18on | no fix listed 1.80.2 | 1 |
| apachepulsar/ | 9c9947de139d | bcprov-jdk18on | 1.80.2 | 1 |
| apache/ | 133d35d2c263 | bcprov-jdk18on | 1.80.2 | 1 |
| bitnamilegacy/ | 15d4647fd491 | bcprov-jdk18on | 1.80.2 | 1 |
| bitnamilegacy/ | 9cfd2df1294d | bcprov-jdk18on | 1.80.2 | 1 |
| bitnamilegacy/ | e6f6ddcce2f1 | bcprov-jdk18on | 1.80.2 | 1 |
| bitnamilegacy/ | cc599cbd15ff | bcprov-jdk18on | 1.80.2 | 1 |
| bitnamilegacy/ | da3df0976a9f | bcprov-jdk18on | 1.81.1 | 1 |
| bitnamilegacy/ | d8440eb6b290 | bcprov-jdk15to18 bcprov-jdk18on | no fix listed 1.80.2 | 1 |
| blackducksoftware/ | 90cca32de2cc | bcprov-jdk18on | 1.80.2 | 1 |
| bluerange/ | 07c8f73b55df | bcprov-jdk18on | 1.80.2 | 1 |
| browserless/ | c81ae5585b47 | bouncycastle | no fix listed | 1 |
| camunda/ | ab5abc09e407 | bcprov-jdk18on | 1.80.2 | 1 |
| cbioportal/ | 08debbd2dbf9 | bcprov-jdk18on | 1.80.2 | 1 |
| conductoross/ | 9fba127693e6 | bcprov-jdk18on | 1.80.2 | 1 |
| confluentinc/ | 8ec46c27982f | bcprov-jdk18on | 1.80.2 | 1 |
| consensys/ | bf6ecd2ea716 | bcprov-jdk18on | 1.80.2 | 1 |
| drpcorg/ | 8858fae1859d | bcprov-jdk15to18 | no fix listed | 1 |
| eclipseaerios/ | 43cd999a008d | bcprov-jdk18on | 1.80.2 | 1 |
| emeraldpay/ | 126f0ae0b388 | bcprov-jdk15to18 | no fix listed | 1 |
| emeraldpay/ | ac2a4bc66ab6 | bcprov-jdk15to18 | no fix listed | 1 |
| flowable/ | b7ae287502cd | bcprov-jdk18on | 1.80.2 | 1 |