StackRadar

CVE-2025-14813

Critical

Advisory

Published 15 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.3
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
139
of 17,781 indexed, latest versions
Container images
137
deployed by those charts
Fix available
2 of 4
affected packages

Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks

Carried by container images the latest versions of 139 of 17,781 indexed charts deploy, on 137 images.

Affected packageAffected versionsFixed inImages
bcprov-jdk18onmaven1.71, 1.72, 1.73, 1.74+10 more1.80.2, 1.81.1, 1.84124
bcprov-jdk15to18maven1.63, 1.65, 1.70, 1.72+8 more1.8422
bcprov-ext-jdk18onmaven1.75, 1.78no fix listed7
bouncycastledeb1.61-1no fix listed1
OSV records
GHSA-574f-3g2m-x479UBUNTU-CVE-2025-14813

Charts affected

139 by stars
ChartLatestAffected imagesRadar Score
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

4,257
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
bcprov-jdk15to18@1.83
1.84

Open the chart page →

1,261
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
bcprov-jdk18on@1.76
1.80.2

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
bcprov-jdk18on@1.73
1.80.2

Open the chart page →

5,129
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
bcprov-jdk18on@1.73
1.80.2

Open the chart page →

4,599
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
bcprov-jdk18on@1.82
1.84

Open the chart page →

2,901
myappmyapp-helm-charts0.4.01 of 1See more

myapp myapp-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
adityaprasadpathak/myapp:3.07e3b9777362c
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,141
nacosnacos-yunyeVerified publisher1.0.31 of 1See more

nacos nacos-yunye 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
nacos/nacos-server:v3.0.130a39cb0c54d
bcprov-jdk18on@1.79
1.80.2

Open the chart page →

1,783
datawolfncsaVerified publisher1.1.01 of 3See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
ncsa/datawolf:4.7.0af6649d59150
bcprov-jdk18on@1.72
1.80.2

Open the chart page →

4,989
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
bcprov-jdk18on@1.77
1.80.2

Open the chart page →

15,369
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
bcprov-jdk18on@1.77
1.80.2

Open the chart page →

5,826
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
bcprov-ext-jdk18on@1.75
bcprov-jdk18on@1.75
no fix listed
1.80.2

Open the chart page →

9,005
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
bcprov-jdk18on@1.74
1.80.2

Open the chart page →

6,037
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

6,338
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
bcprov-ext-jdk18on@1.75
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.77
no fix listed
no fix listed
1.80.2

Open the chart page →

1,190
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.1.0474ea3fdf25d
bcprov-jdk18on@1.81
1.81.1

Open the chart page →

71,208
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
bcprov-ext-jdk18on@1.75
bcprov-jdk15to18@1.75
bcprov-jdk18on@1.78
no fix listed
no fix listed
1.80.2

Open the chart page →

1,753
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,097
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
bcprov-jdk18on@1.77
1.80.2

Open the chart page →

5,269
radar-gatewayradar-baseVerified publisher1.9.01 of 2See more

radar-gateway radar-base 1.9.0

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,284
radar-outputradar-baseVerified publisher1.2.101 of 1See more

radar-output radar-base 1.2.10

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,465
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
bcprov-jdk18on@1.76
1.80.2

Open the chart page →

4,203
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,590
keycloaksikalabs0.1.01 of 1See more

keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.3.36a7217a100bd
bcprov-jdk18on@1.81
1.81.1

Open the chart page →

1,690
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
bcprov-jdk15to18@1.75
no fix listed

Open the chart page →

4,946
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
bcprov-jdk18on@1.80
1.80.2

Open the chart page →

3,153
sn-consolestreamnative1.13.01 of 1See more

sn-console streamnative 1.13.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
streamnative/private-cloud-console:v2.3.27-all91e54375e154
bcprov-jdk18on@1.79
1.80.2

Open the chart page →

1,827
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.009a381c715ab
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

5,063
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

4,674
configservertwomartensVerified publisher0.2.01 of 1See more

configserver twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
2martens/configserver:latestbf1cdb80239d
bcprov-jdk18on@1.78
1.80.2

Open the chart page →

2,144
timetabletwomartensVerified publisher0.2.01 of 1See more

timetable twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
2martens/timetable:latestbd1ba6ab84c9
bcprov-jdk18on@1.80
1.80.2

Open the chart page →

1,527
wahlrechttwomartensVerified publisher0.3.01 of 1See more

wahlrecht twomartens 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
2martens/wahlrecht:latestba2c3040dab0
bcprov-jdk18on@1.80
1.80.2

Open the chart page →

1,689
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

45,239
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.14.49c344d2b1757
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.82
no fix listed
1.84

Open the chart page →

5,484
hazelcastwenerme5.10.21 of 2See more

hazelcast wenerme 5.10.2

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
hazelcast/management-center:5.5.2991ddb27c251
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,634
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
bcprov-jdk18on@1.79
1.80.2

Open the chart page →

2,191
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
bcprov-jdk18on@1.82
1.84

Open the chart page →

7,624
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.18.07f6fa1efee8f
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.78.1
no fix listed
1.80.2

Open the chart page →

9,381
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

1,159

Container images carrying it

137 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
folioci/mod-data-export:latest0cc86bf09755
bcprov-jdk18on@1.81
1.81.1
1
folioci/mod-data-export-worker:latest1ad1811c9b37
bcprov-jdk18on@1.81
1.81.1
1
folioci/mod-entities-links:latest3e2412815c0f
bcprov-jdk18on@1.81
1.81.1
1
folioci/mod-search:latest44d7ee9acdf6
bcprov-jdk18on@1.81
1.81.1
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
bcprov-jdk18on@1.79
1.80.2
1
glarad/mc-service-registry:latest7b02b9e7f1ef
bcprov-jdk18on@1.82
1.84
1
glasskube/operator:0.12.2be5133100d63
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.74
no fix listed
1.80.2
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
bcprov-jdk18on@1.77
1.80.2
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
bcprov-jdk18on@1.77
1.80.2
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
bcprov-jdk18on@1.77
1.80.2
1
gridgain/community:8.9.11d32d182a0e6a
bcprov-ext-jdk18on@1.78
no fix listed
1
gridgain/gridgain9:9.1.1895018390077b
bcprov-jdk18on@1.83
1.84
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
bcprov-jdk18on@1.71
1.80.2
1
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
bcprov-jdk18on@1.77
1.80.2
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
bcprov-jdk18on@1.78.1
1.80.2
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
bcprov-jdk18on@1.77
1.80.2
1
keyfactor/signserver-ce:7.3.2798fbbe00283
bcprov-jdk18on@1.80
1.80.2
1
library/elasticsearch:8.17.32cc40b15dff8
bcprov-jdk18on@1.78.1
1.80.2
1
library/elasticsearch:8.15.0310b9fc03b06
bcprov-jdk18on@1.78.1
1.80.2
1
library/logstash:9.1.233eae14f0867
bcprov-jdk18on@1.81
1.81.1
1
library/sonarqube:10.7.0-community0842dcd4c8f8
bcprov-jdk18on@1.76
1.80.2
1
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
bcprov-jdk18on@1.78.1
1.80.2
1
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
bcprov-jdk18on@1.76
1.80.2
1
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
bcprov-jdk18on@1.73
1.80.2
1
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
bcprov-jdk18on@1.73
1.80.2
1
nacos/nacos-server:v3.0.20e951a1d07bb
bcprov-jdk18on@1.79
1.80.2
1
nacos/nacos-server:v3.0.130a39cb0c54d
bcprov-jdk18on@1.79
1.80.2
1
ncsa/datawolf:4.7.0af6649d59150
bcprov-jdk18on@1.72
1.80.2
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
bcprov-jdk18on@1.77
1.80.2
1
openbas/platform:2.0.5d986d80b0a75
bcprov-jdk18on@1.82
1.84
1
opensearchproject/data-prepper:2.8.057c25fa01d3c
bcprov-jdk18on@1.76
1.80.2
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
bcprov-jdk18on@1.71
1.80.2
1
opensearchproject/opensearch:2.15.01963b3ece46d
bcprov-ext-jdk18on@1.75
bcprov-jdk15to18@1.74
bcprov-jdk18on@1.78
no fix listed
no fix listed
1.80.2
1
opensearchproject/opensearch:2.14.0466a49f379bb
bcprov-ext-jdk18on@1.75
bcprov-jdk15to18@1.75
bcprov-jdk18on@1.78
no fix listed
no fix listed
1.80.2
1
opensearchproject/opensearch:3.1.0474ea3fdf25d
bcprov-jdk18on@1.81
1.81.1
1
opensearchproject/opensearch:2.12.0645d3d9390ad
bcprov-ext-jdk18on@1.75
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.77
no fix listed
no fix listed
1.80.2
1
opensearchproject/opensearch:2.19.269588c664014
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.80
no fix listed
1.80.2
1
opensearchproject/opensearch:2.19.68690b204fe91
bcprov-jdk15to18@1.79
no fix listed
1
opensearchproject/opensearch:2.10.0c8f3ebd2a934
bcprov-ext-jdk18on@1.75
bcprov-jdk15to18@1.75
no fix listed
no fix listed
1
openzipkin/zipkin-slim:3.6.0a69e1057df36
bcprov-jdk18on@1.78.1
1.80.2
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
bcprov-jdk18on@1.71
1.80.2
1
razzy10/product-service:latest702e411956db
bcprov-jdk18on@1.80
1.80.2
1
siakhooi/query:1.0.0f1f4b5b1b870
bcprov-jdk18on@1.80
1.80.2
1
sonatype/nexus3:3.58.1586060431b64
bcprov-jdk15to18@1.75
no fix listed
1
streamnative/private-cloud-console:v2.3.27-all91e54375e154
bcprov-jdk18on@1.79
1.80.2
1
structurizr/onpremises:2025.11.094b5ffb5119c8
bcprov-jdk18on@1.78.1
1.80.2
1
thingsboard/tb-postgres:latest2d17e4e36edc
bcprov-jdk18on@1.78.1
1.80.2
1
treskon/portrait:DEV-latest88e813f22347
bcprov-jdk18on@1.76
1.80.2
1
vespaengine/vespa:8.526.1569b160f58211
bcprov-jdk18on@1.78.1
1.80.2
1
wazuh/wazuh-indexer:4.14.49c344d2b1757
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.82
no fix listed
1.84
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.