StackRadar

CVE-2025-14813

Critical

Advisory

Published 15 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.3
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
139
of 17,781 indexed, latest versions
Container images
137
deployed by those charts
Fix available
2 of 4
affected packages

Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks

Carried by container images the latest versions of 139 of 17,781 indexed charts deploy, on 137 images.

Affected packageAffected versionsFixed inImages
bcprov-jdk18onmaven1.71, 1.72, 1.73, 1.74+10 more1.80.2, 1.81.1, 1.84124
bcprov-jdk15to18maven1.63, 1.65, 1.70, 1.72+8 more1.8422
bcprov-ext-jdk18onmaven1.75, 1.78no fix listed7
bouncycastledeb1.61-1no fix listed1
OSV records
GHSA-574f-3g2m-x479UBUNTU-CVE-2025-14813

Charts affected

139 by stars
ChartLatestAffected imagesRadar Score
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

4,257
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
bcprov-jdk15to18@1.83
1.84

Open the chart page →

1,261
resource-processormicroservices-learningVerified publisher1.2.01 of 1See more

resource-processor microservices-learning 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
bcprov-jdk18on@1.76
1.80.2

Open the chart page →

3,683
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
bcprov-jdk18on@1.73
1.80.2

Open the chart page →

5,129
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
bcprov-jdk18on@1.73
1.80.2

Open the chart page →

4,599
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
bcprov-jdk18on@1.82
1.84

Open the chart page →

2,901
myappmyapp-helm-charts0.4.01 of 1See more

myapp myapp-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
adityaprasadpathak/myapp:3.07e3b9777362c
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,141
nacosnacos-yunyeVerified publisher1.0.31 of 1See more

nacos nacos-yunye 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
nacos/nacos-server:v3.0.130a39cb0c54d
bcprov-jdk18on@1.79
1.80.2

Open the chart page →

1,783
datawolfncsaVerified publisher1.1.01 of 3See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
ncsa/datawolf:4.7.0af6649d59150
bcprov-jdk18on@1.72
1.80.2

Open the chart page →

4,989
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
bcprov-jdk18on@1.77
1.80.2

Open the chart page →

15,369
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
bcprov-jdk18on@1.77
1.80.2

Open the chart page →

5,826
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
bcprov-ext-jdk18on@1.75
bcprov-jdk18on@1.75
no fix listed
1.80.2

Open the chart page →

9,005
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
bcprov-jdk18on@1.74
1.80.2

Open the chart page →

6,037
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

6,338
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
bcprov-ext-jdk18on@1.75
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.77
no fix listed
no fix listed
1.80.2

Open the chart page →

1,190
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.1.0474ea3fdf25d
bcprov-jdk18on@1.81
1.81.1

Open the chart page →

71,208
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
bcprov-ext-jdk18on@1.75
bcprov-jdk15to18@1.75
bcprov-jdk18on@1.78
no fix listed
no fix listed
1.80.2

Open the chart page →

1,753
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,097
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
bcprov-jdk18on@1.77
1.80.2

Open the chart page →

5,269
radar-gatewayradar-baseVerified publisher1.9.01 of 2See more

radar-gateway radar-base 1.9.0

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,284
radar-outputradar-baseVerified publisher1.2.101 of 1See more

radar-output radar-base 1.2.10

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,465
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
bcprov-jdk18on@1.76
1.80.2

Open the chart page →

4,203
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,590
keycloaksikalabs0.1.01 of 1See more

keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.3.36a7217a100bd
bcprov-jdk18on@1.81
1.81.1

Open the chart page →

1,690
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
bcprov-jdk15to18@1.75
no fix listed

Open the chart page →

4,946
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
bcprov-jdk18on@1.80
1.80.2

Open the chart page →

3,153
sn-consolestreamnative1.13.01 of 1See more

sn-console streamnative 1.13.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
streamnative/private-cloud-console:v2.3.27-all91e54375e154
bcprov-jdk18on@1.79
1.80.2

Open the chart page →

1,827
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.009a381c715ab
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

5,063
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

4,674
configservertwomartensVerified publisher0.2.01 of 1See more

configserver twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
2martens/configserver:latestbf1cdb80239d
bcprov-jdk18on@1.78
1.80.2

Open the chart page →

2,144
timetabletwomartensVerified publisher0.2.01 of 1See more

timetable twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
2martens/timetable:latestbd1ba6ab84c9
bcprov-jdk18on@1.80
1.80.2

Open the chart page →

1,527
wahlrechttwomartensVerified publisher0.3.01 of 1See more

wahlrecht twomartens 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
2martens/wahlrecht:latestba2c3040dab0
bcprov-jdk18on@1.80
1.80.2

Open the chart page →

1,689
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

45,239
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.14.49c344d2b1757
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.82
no fix listed
1.84

Open the chart page →

5,484
hazelcastwenerme5.10.21 of 2See more

hazelcast wenerme 5.10.2

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
hazelcast/management-center:5.5.2991ddb27c251
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

2,634
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
bcprov-jdk18on@1.79
1.80.2

Open the chart page →

2,191
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
bcprov-jdk18on@1.82
1.84

Open the chart page →

7,624
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.18.07f6fa1efee8f
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.78.1
no fix listed
1.80.2

Open the chart page →

9,381
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-14813.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
bcprov-jdk18on@1.78.1
1.80.2

Open the chart page →

1,159

Container images carrying it

137 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
guacamole/guacamole:1.6.0f344085e618b
bcprov-jdk15to18@1.80
no fix listed
3
jacobalberty/unifi:v10.0.162896c0ab82d33
bcprov-jdk18on@1.78.1
1.80.2
3
airbyte/workload-launcher:2.2.0119be7bfb719
bcprov-jdk18on@1.79
1.80.2
2
apache/druid:37.0.00116fb802786
bcprov-jdk18on@1.82
1.84
2
apache/nifi-registry:1.26.07cdfd8deec92
bcprov-jdk18on@1.78.1
1.80.2
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
bcprov-jdk18on@1.78.1
1.80.2
2
hazelcast/management-center:5.5.2991ddb27c251
bcprov-jdk18on@1.78.1
1.80.2
2
inaccel/coral:2.18c53744ed70b
bcprov-jdk18on@1.77
1.80.2
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
bcprov-jdk18on@1.73
1.80.2
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
bcprov-jdk18on@1.82
1.84
2
library/elasticsearch:8.19.1289729a95066a
bcprov-jdk18on@1.79
1.80.2
2
nacos/nacos-server:latest1c191c30c8cd
bcprov-jdk18on@1.79
1.80.2
2
opensearchproject/opensearch:2.18.07f6fa1efee8f
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.78.1
no fix listed
1.80.2
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
bcprov-jdk18on@1.82
1.84
2
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly7752874e71d8
bcprov-jdk18on@1.79
1.80.2
2
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly900e2b88bd08
bcprov-jdk18on@1.79
1.80.2
2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly2a797804f08c
bcprov-jdk18on@1.79
1.80.2
2
ghcr.io/janssenproject/jans/scim:0.0.0-nightly096b8bcbbe45
bcprov-jdk18on@1.79
1.80.2
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
bcprov-jdk18on@1.78.1
1.80.2
2
1dev/server:11.9.0cd5b12fe5471
bcprov-jdk18on@1.74
1.80.2
1
2martens/configserver:latestbf1cdb80239d
bcprov-jdk18on@1.78
1.80.2
1
2martens/timetable:latestbd1ba6ab84c9
bcprov-jdk18on@1.80
1.80.2
1
2martens/wahlrecht:latestba2c3040dab0
bcprov-jdk18on@1.80
1.80.2
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
bcprov-jdk18on@1.83
1.84
1
adityaprasadpathak/myapp:3.07e3b9777362c
bcprov-jdk18on@1.78.1
1.80.2
1
apache/activemq-artemis:2.37.0bae523439ee3
bcprov-jdk18on@1.78.1
1.80.2
1
apache/druid:29.0.10cef139b6bf1
bcprov-jdk18on@1.76
1.80.2
1
apache/nifi-registry:1.27.063b8e3e40742
bcprov-jdk18on@1.78.1
1.80.2
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
bcprov-ext-jdk18on@1.75
bcprov-jdk18on@1.75
no fix listed
1.80.2
1
apachepulsar/pulsar:3.0.79c9947de139d
bcprov-jdk18on@1.78.1
1.80.2
1
apache/skywalking-oap-server:9.2.0133d35d2c263
bcprov-jdk18on@1.71
1.80.2
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
bcprov-jdk18on@1.76
1.80.2
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
bcprov-jdk18on@1.76
1.80.2
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
bcprov-jdk18on@1.78.1
1.80.2
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
bcprov-jdk18on@1.77
1.80.2
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
bcprov-jdk18on@1.81
1.81.1
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.78
no fix listed
1.80.2
1
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
bcprov-jdk18on@1.72
1.80.2
1
bluerange/bluerange:26.1.307c8f73b55df
bcprov-jdk18on@1.79
1.80.2
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
bouncycastle@1.61-1
no fix listed
1
camunda/zeebe:8.4.5ab5abc09e407
bcprov-jdk18on@1.77
1.80.2
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
bcprov-jdk18on@1.78
1.80.2
1
conductoross/conductor:3.31.09fba127693e6
bcprov-jdk18on@1.78.1
1.80.2
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
bcprov-jdk18on@1.77
1.80.2
1
consensys/teku:25.4.1bf6ecd2ea716
bcprov-jdk18on@1.80
1.80.2
1
drpcorg/dshackle:0.54.08858fae1859d
bcprov-jdk15to18@1.63
no fix listed
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
bcprov-jdk18on@1.77
1.80.2
1
emeraldpay/dshackle:0.14.0126f0ae0b388
bcprov-jdk15to18@1.63
no fix listed
1
emeraldpay/dshackle:0.12ac2a4bc66ab6
bcprov-jdk15to18@1.63
no fix listed
1
flowable/flowable-rest:7.1.0b7ae287502cd
bcprov-jdk18on@1.77
1.80.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.