CVE-2025-15649
MediumAdvisory
Published 27 May 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.001
- 3rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,416
- of 17,805 indexed, latest versions
- Container images
- 2,370
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 2,416 of 17,805 indexed charts deploy, on 2,370 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| perldeb | 5.18.2-2ubuntu1, 5.18.2-2ubuntu1.1, 5.18.2-2ubuntu1.4, 5.18.2-2ubuntu1.7+44 more | 5.38.2-3.2ubuntu0.4, 5.40.1-6+deb13u1, 5.40.1-6+e8 | 2,370 |
- OSV records
- DEBIAN-CVE-2025-15649UBUNTU-CVE-2025-15649ECHO-6de8-d6d9-d48a
- Also known as
- USN-8684-1
Charts affected
2,416 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| workshop-pipelinesworkshop-pipelines | 0.1.6 | 1 of 2See more | 11,647 |
| tabbyxdVerified publisher | 1.0.6 | 1 of 2See more | 7,679 |
| xkopsxkops | 0.1.0 | 4 of 5See more | 13,895 |
| xlinexline | 0.0.1 | 1 of 1See more | 2,166 |
| cloudeye-exporterxxl-job-adminVerified publisher | 0.1.2 | 1 of 1See more | 2,693 |
| dingtalk-botxxl-job-adminVerified publisher | 0.1.2 | 1 of 2See more | 3,180 |
| nightingalexxl-job-adminVerified publisher | 0.2.11 | 3 of 6See more | 9,730 |
| pgcatxxl-job-adminVerified publisher | 0.3.3 | 1 of 1See more | 3,192 |
| nginx-chartxxoznge-nginx | 0.1.0 | 1 of 1See more | 1,885 |
| helm-demoyahoon-helm-demoVerified publisher | 1.0.0 | 1 of 1See more | 1,334 |
| my-nginx-appyasser-nginx-app | 0.1.0 | 1 of 1See more | 1,885 |
| api-snapyoukadevVerified publisher | 0.1.1 | 1 of 1See more | 2,714 |
| changedetection-iozekker6Verified publisher | 1.102.0 | 1 of 1See more | 2,687 |
| NEW_APPzekker6Verified publisher | 0.0.0 | 1 of 1See more | 1,885 |
| clickhousezloi-space | 1.2.0 | 2 of 3See more | 9,296 |
| zoo-project-druzoo-projectOfficialVerified publisher | 0.10.4 | 1 of 6See more | 7,964 |
Container images carrying it
2,370 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| sslhep/ | 0e4175a4e1eb | perl | 5.40.1-6+deb13u1 | 1 |
| sslhep/ | 671980005c57 | perl | 5.40.1-6+deb13u1 | 1 |
| sslhep/ | 596db2abdd09 | perl | 5.40.1-6+deb13u1 | 1 |
| sslhep/ | 54aaf1721d03 | perl | 5.40.1-6+deb13u1 | 1 |
| sslhep/ | 2cb88ceab5bb | perl | 5.40.1-6+deb13u1 | 1 |
| sslhep/ | c284442b44e3 | perl | 5.40.1-6+deb13u1 | 1 |
| stackstorm/ | 88235ba70cad | perl | no fix listed | 1 |
| stackstorm/ | 6f56d239d280 | perl | no fix listed | 1 |
| stackstorm/ | 33ecfda16608 | perl | no fix listed | 1 |
| stackstorm/ | 4e3f8c7ca52d | perl | no fix listed | 1 |
| stackstorm/ | f190a6212195 | perl | no fix listed | 1 |
| stackstorm/ | 259503496ff9 | perl | no fix listed | 1 |
| stackstorm/ | b1de2055c362 | perl | no fix listed | 1 |
| stackstorm/ | b1a338f64773 | perl | no fix listed | 1 |
| stackstorm/ | 1c8904a3bf67 | perl | no fix listed | 1 |
| stackstorm/ | 1bf35bfaf00c | perl | no fix listed | 1 |
| stackstorm/ | 09989a26c8b7 | perl | no fix listed | 1 |
| stackstorm/ | 19fdfffdbba8 | perl | no fix listed | 1 |
| stalwartlabs/ | 25001929f36a | perl | 5.40.1-6+deb13u1 | 1 |
| stalwartlabs/ | 388dcb75a707 | perl | 5.40.1-6+deb13u1 | 1 |
| stalwartlabs/ | 74ca4f7f6885 | perl | 5.40.1-6+deb13u1 | 1 |
| stalwartlabs/ | dcf575db2d53 | perl | 5.40.1-6+deb13u1 | 1 |
| stashapp/ | 24dbd7607174 | perl | no fix listed | 1 |
| stashapp/ | a534c8afdf39 | perl | 5.38.2-3.2ubuntu0.4 | 1 |
| statcan/ | 3921305425b8 | perl | no fix listed | 1 |
| statusim/ | 6ccd9d382885 | perl | no fix listed | 1 |
| steamcmd/ | 5028a25268e7 | perl | no fix listed | 1 |
| strangebee/ | a7f7b05fba24 | perl | no fix listed | 1 |
| streamnative/ | 11bceacec8fb | perl | no fix listed | 1 |
| structurizr/ | 4b5ffb5119c8 | perl | 5.38.2-3.2ubuntu0.4 | 1 |
| substratusai/ | 61695be635eb | perl | no fix listed | 1 |
| supabase/ | 2781daf92394 | perl | no fix listed | 1 |
| supabase/ | eff9c554d649 | perl | no fix listed | 1 |
| supabase/ | 49bfe526f1b4 | perl | 5.40.1-6+deb13u1 | 1 |
| supabase/ | a84cc713585e | perl | no fix listed | 1 |
| supabase/ | d0a96973e9f1 | perl | no fix listed | 1 |
| supabase/ | aa1c92c0cf32 | perl | no fix listed | 1 |
| supabase/ | d207e6e23ad3 | perl | no fix listed | 1 |
| supabase/ | d3aa0c86c7b3 | perl | 5.40.1-6+deb13u1 | 1 |
| supabase/ | 26d8070c55e9 | perl | no fix listed | 1 |
| supabase/ | 606aca9fdaa7 | perl | no fix listed | 1 |
| supabase/ | 94a2a9d2906e | perl | no fix listed | 1 |
| svtechnmaa/ | a934ffd63d25 | perl | no fix listed | 1 |
| svtechnmaa/ | 1d71314424aa | perl | no fix listed | 1 |
| svtechnmaa/ | 410a25b51f9f | perl | no fix listed | 1 |
| svtechnmaa/ | 18394b08e6c3 | perl | no fix listed | 1 |
| svtechnmaa/ | 6e368ace0977 | perl | no fix listed | 1 |
| swimmwatch/ | d48c705a58c8 | perl | no fix listed | 1 |
| sysnet4admin/ | bc25b152d88e | perl | no fix listed | 1 |
| sysnet4admin/ | e74b43c7f492 | perl | no fix listed | 1 |