StackRadarChart IndexLive demo

CVE-2025-14936

High

Advisory

Published 23 Dec 2025In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.004; 29th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 23; of 17,781 indexed, latest versions
Container images: 21; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 21 images.

Affected package	Affected versions	Fixed in	Images
netcdfdeb	1:4.6.0-2build1, 1:4.7.3-1, 1:4.8.1-1, 1:4.9.0-3+b1+3 more	no fix listed	21

OSV records: DEBIAN-CVE-2025-14936 UBUNTU-CVE-2025-14936

Charts affected

23 by stars

Chart

Latest

Affected images

Radar Score

photoprismandrenarchy

1 of 1 See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260728	958642220223	netcdf@1:4.9.3-1build2	no fix listed

Open the chart page →

8,825

nominatimrobjuz

1 of 4 See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
mediagis/nominatim :5.3.2	7923a8e67197	netcdf@1:4.9.2-5ubuntu4	no fix listed

Open the chart page →

8,690

routehub-client-hubroutehub-helm

1 of 3 See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg16	d7db8f1085a3	netcdf@1:4.8.1-1	no fix listed

Open the chart page →

12,930

astrotrekastria

1 of 4 See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	netcdf@1:4.8.1-1	no fix listed

Open the chart page →

32,501

kube-acp-stackcloudentity

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	netcdf@1:4.8.1-1	no fix listed

Open the chart page →

20,900

opencloudcommunity-opencloud

1 of 11 See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
apache/tika :latest-full	80072bb73dd3	netcdf@1:4.9.3-1build2	no fix listed

Open the chart page →

3,773

datacubedatacube-charts

1 of 1 See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
opendatacube/wms :latest	1b90cdf68831	netcdf@1:4.6.0-2build1	no fix listed

Open the chart page →

27,728

datacube-datadatacube-charts

1 of 1 See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	netcdf@1:4.6.0-2build1	no fix listed

Open the chart page →

18,863

datacube-processingdatacube-charts

1 of 2 See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
opendatacube/pipelines :wofs-1.22	5d810e8504b8	netcdf@1:4.6.0-2build1	no fix listed

Open the chart page →

22,405

restcubedatacube-charts

1 of 1 See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
opendatacube/restcube :latest	91870111837c	netcdf@1:4.6.0-2build1	no fix listed

Open the chart page →

24,335

adventurelogdjjudas21

1 of 3 See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	netcdf@1:4.9.3-1	no fix listed

Open the chart page →

7,459

1 of 8 See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	netcdf@1:4.8.1-1	no fix listed

Open the chart page →

24,917

drogue-cloud-examplesdrogue-iot

1 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	netcdf@1:4.8.1-1	no fix listed

Open the chart page →

30,699

dawarichhelmforge

1 of 4 See more

dawarich helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
postgis/postgis :18-3.6	7e00e8c3539f	netcdf@1:4.9.3-1	no fix listed

Open the chart page →

4,742

nominatimheywood8-helm-charts

1 of 3 See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
mediagis/nominatim :4.2	d0eae7b51374	netcdf@1:4.8.1-1	no fix listed

Open the chart page →

14,290

opencloudjacobcolvin

1 of 13 See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	netcdf@1:4.9.2-5ubuntu4	no fix listed

Open the chart page →

45,239

nominatimnominatim-chart

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	netcdf@1:4.7.3-1	no fix listed

Open the chart page →

22,658

photoprismschoolguys-helmcharts

1 of 1 See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
photoprism/photoprism :260601	650c6ad5a651	netcdf@1:4.9.3-1build2	no fix listed

Open the chart page →

10,348

backendsignalen

1 of 4 See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
signalen/backend :2.50.14	760256000738	netcdf@1:4.9.0-3+b1	no fix listed

Open the chart page →

11,636

kurento_webrtc_demostunner

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	netcdf@1:4.9.2-5ubuntu4	no fix listed

Open the chart page →

12,460

stunner-kurento-one2one-callstunner

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	netcdf@1:4.9.2-5ubuntu4	no fix listed

Open the chart page →

12,460

opencloudunxwares

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	netcdf@1:4.9.2-5ubuntu4	no fix listed

Open the chart page →

45,239

zoo-project-druzoo-project

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-14936.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	netcdf@1:4.8.1-1	no fix listed

Open the chart page →

7,849

Container images carrying it

21 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/tika :2.9.2.1-full	ae0b86d3c4d0	netcdf@1:4.9.2-5ubuntu4	no fix listed	2
kurento/kurento-media-server :latest	03c0d34d0828	netcdf@1:4.9.2-5ubuntu4	no fix listed	2
apache/tika :latest-full	80072bb73dd3	netcdf@1:4.9.3-1build2	no fix listed	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	netcdf@1:4.6.0-2build1	no fix listed	1
mediagis/nominatim :5.3.2	7923a8e67197	netcdf@1:4.9.2-5ubuntu4	no fix listed	1
mediagis/nominatim :3.7	c15e941485ef	netcdf@1:4.7.3-1	no fix listed	1
mediagis/nominatim :4.2	d0eae7b51374	netcdf@1:4.8.1-1	no fix listed	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	netcdf@1:4.6.0-2build1	no fix listed	1
opendatacube/restcube :latest	91870111837c	netcdf@1:4.6.0-2build1	no fix listed	1
opendatacube/wms :latest	1b90cdf68831	netcdf@1:4.6.0-2build1	no fix listed	1
photoprism/photoprism :260601	650c6ad5a651	netcdf@1:4.9.3-1build2	no fix listed	1
photoprism/photoprism :260728	958642220223	netcdf@1:4.9.3-1build2	no fix listed	1
postgis/postgis :18-3.6	7e00e8c3539f	netcdf@1:4.9.3-1	no fix listed	1
signalen/backend :2.50.14	760256000738	netcdf@1:4.9.0-3+b1	no fix listed	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	netcdf@1:4.8.1-1	no fix listed	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	netcdf@1:4.8.1-1	no fix listed	1
timescale/timescaledb-ha :pg16	d7db8f1085a3	netcdf@1:4.8.1-1	no fix listed	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	netcdf@1:4.8.1-1	no fix listed	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	netcdf@1:4.8.1-1	no fix listed	1
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	netcdf@1:4.8.1-1	no fix listed	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	netcdf@1:4.9.3-1	no fix listed	1