StackRadar

CVE-2025-15367

Medium

Advisory

Published 20 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
676
of 17,787 indexed, latest versions
Container images
655
deployed by those charts
Fix available
9 of 15
affected packages

POP3 command injection in user-controlled commands

Carried by container images the latest versions of 676 of 17,787 indexed charts deploy, on 655 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 more3.11.0~rc1-1~22.04.1~esm9181
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more3.8.10-0ubuntu1~20.04.18+esm6100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3+12 more3.12.3-1ubuntu0.1289
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 more3.10.12-1~22.04.1580
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.5-2+deb13u5+1 more3.13.7-1ubuntu0.476
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more3.6.9-1~18.04ubuntu1.13+esm944
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.13+esm2225
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r2, 3.13.15_git20260912-r0+4 moreno fix listed14
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r0, 3.14.7-r1+2 moreno fix listed9
python-3.12apk3.12.0-r1, 3.12.9-r1, 3.12.14-r2, 3.12.14-r6no fix listed8
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm207
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.15.03
python-3.11apk3.11.16-r5no fix listed1
python3rpm3.12.9-13.azl3no fix listed1
OSV records
BIT-python-2025-15367CGA-3h86-qrh3-64w8CGA-5336-j8mr-r6g4CGA-8fx3-25f8-fh5xCGA-c39r-w42m-w4vjDEBIAN-CVE-2025-15367UBUNTU-CVE-2025-15367AZL-75038
Also known as
BIT-libpython-2025-15367, BIT-python-min-2025-15367, CGA-ch3p-52mr-p765, CGA-ffmr-pm2v-8xqw, CGA-fhp9-r9rg-wpv2, CGA-wx55-qrwh-xc7r, PSF-2026-4, USN-8018-1, USN-8018-2

Charts affected

676 by stars
ChartLatestAffected imagesRadar Score
nextcloudquench-nextcloudVerified publisher0.0.121 of 2See more

nextcloud quench-nextcloud 0.0.12

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/nextclouddigest-pinneda113d014a824
python-3.13@3.13.15-r1
no fix listed

Open the chart page →

195
pgbouncerquench-pgbouncerVerified publisher0.0.161 of 2See more

pgbouncer quench-pgbouncer 0.0.16

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
python-3.13@3.13.15-r4
no fix listed

Open the chart page →

78
pgpoolquench-pgpoolVerified publisher0.0.71 of 2See more

pgpool quench-pgpool 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
python-3.13@3.13.15-r4
no fix listed

Open the chart page →

78
postgresqlquench-postgresqlVerified publisher0.0.211 of 1See more

postgresql quench-postgresql 0.0.21

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned601897da3768
python-3.13@3.13.15-r7
no fix listed

Open the chart page →

45
postgrestquench-postgrestVerified publisher0.0.41 of 2See more

postgrest quench-postgrest 0.0.4

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
python-3.13@3.13.15-r4
no fix listed

Open the chart page →

65
temporalquench-temporalVerified publisher0.0.201 of 2See more

temporal quench-temporal 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
python-3.13@3.13.15-r4
no fix listed

Open the chart page →

69
timescaledbquench-timescaledbVerified publisher0.0.151 of 1See more

timescaledb quench-timescaledb 0.0.15

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/timescaledbdigest-pinned0b9a82dd686b
python-3.13@3.13.15-r7
no fix listed

Open the chart page →

63
wordpressquench-wordpressVerified publisher0.0.141 of 2See more

wordpress quench-wordpress 0.0.14

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/wordpressdigest-pinned35cb31c7fd2b
python-3.13@3.13.15-r1
no fix listed

Open the chart page →

222
zitadelquench-zitadelVerified publisher0.0.161 of 2See more

zitadel quench-zitadel 0.0.16

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/postgresqldigest-pinned919b69c5c86b
python-3.13@3.13.15-r4
no fix listed

Open the chart page →

291
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

7,691
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

20,812
rawfile-localpvrawfile0.15.21 of 6See more

rawfile-localpv rawfile 0.15.2

1 of the 6 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

2,794
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
python3.8@3.8.10-0ubuntu1~20.04.4
3.8.10-0ubuntu1~20.04.18+esm6

Open the chart page →

15,583
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

4,252
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
python3.11@3.11.2-6
no fix listed

Open the chart page →

6,562
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
python3.5@3.5.2-2ubuntu0~16.04.1
3.5.2-2ubuntu0~16.04.13+esm22

Open the chart page →

11,437
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

15,623
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
beanbag/reviewboard:latest6b840f546e1c
python3.10@3.10.12-1~22.04.17
python3.11@3.11.0~rc1-1~22.04.1
no fix listed
no fix listed

Open the chart page →

6,154
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
python3.10@3.10.6-1~22.04.2
3.10.12-1~22.04.15

Open the chart page →

12,999
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

66,542
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed

Open the chart page →

31,447
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm6

Open the chart page →

11,957
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
python3.10@3.10.12-1~22.04.15
no fix listed

Open the chart page →

7,491
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
python3.12@3.12.3-1ubuntu0.12
no fix listed

Open the chart page →

6,293
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

29,870
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

3,673
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
python3.10@3.10.12-1~22.04.9
3.10.12-1~22.04.15

Open the chart page →

8,720
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
python3.13@3.13.5-2
no fix listed

Open the chart page →

9,421
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
python3.10@3.10.12-1~22.04.15
no fix listed

Open the chart page →

7,385
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
python3.11@3.11.2-6
no fix listed

Open the chart page →

17,736
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
python3.11@3.11.2-6
no fix listed

Open the chart page →

14,792
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
python3.11@3.11.2-6
no fix listed
santisbon/evworker:lateste807283f8d69
python3.11@3.11.2-6
no fix listed

Open the chart page →

12,090
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
python3.11@3.11.2-6
no fix listed

Open the chart page →

11,314
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
python3.11@3.11.2-6
no fix listed

Open the chart page →

9,340
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
python3.13@3.13.5-2
no fix listed

Open the chart page →

9,687
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
python3.11@3.11.2-6
no fix listed

Open the chart page →

12,009
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
python3.12@3.12.3-1ubuntu0.15
no fix listed

Open the chart page →

2,865
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

3,019
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
python3.12@3.12.3-1ubuntu0.8
3.12.3-1ubuntu0.12

Open the chart page →

6,154
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

2,196
wyoming-piperschoolguys-helmcharts0.1.41 of 1See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.3.169b7f797ae3a
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

1,770
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
python2.7@2.7.12-1ubuntu0~16.04.4
no fix listed

Open the chart page →

23,022
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
python-3.13@3.13.12-r2
no fix listed

Open the chart page →

5,230
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

10,972
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
3.5.2-2ubuntu0~16.04.13+esm22

Open the chart page →

25,793
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
3.5.2-2ubuntu0~16.04.13+esm22

Open the chart page →

25,827
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
3.5.2-2ubuntu0~16.04.13+esm22

Open the chart page →

28,494
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
3.5.2-2ubuntu0~16.04.13+esm22

Open the chart page →

25,793
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
python2.7@2.7.12-1ubuntu0~16.04.4
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
3.5.2-2ubuntu0~16.04.13+esm22

Open the chart page →

24,800
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2025-15367.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
3.5.2-2ubuntu0~16.04.13+esm22

Open the chart page →

29,244

Container images carrying it

655 by charts deploying them

A fixed version is listed for 9 of the 15 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
python3.12@3.12.3-1ubuntu0.15
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
python3.11@3.11.2-6+deb12u7
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python3.8@3.8.5-1~20.04.2
3.8.10-0ubuntu1~20.04.18+esm6
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
python3.11@3.11.2-6+deb12u7
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
python3.11@3.11.2-6+deb12u5
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.