StackRadar

CVE-2025-15661

Medium

Advisory

Published 18 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
510
of 17,787 indexed, latest versions
Container images
509
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 510 of 17,787 indexed charts deploy, on 509 images.

Affected packageAffected versionsFixed inImages
libssh2deb1.5.0-2ubuntu0.1, 1.8.0-2.1build1, 1.10.0-3, 1.10.0-3+b1+6 more1.10.0-3+deb12u1, 1.11.0-4.1ubuntu0.24.04.2, 1.11.1-1+deb13u1, 1.11.1-1+e4+2 more509
OSV records
DEBIAN-CVE-2025-15661UBUNTU-CVE-2025-15661ECHO-16dd-65e4-250c
Also known as
USN-8486-1

Charts affected

510 by stars
ChartLatestAffected imagesRadar Score
cosmocosmo-platformOfficialVerified publisher0.20.02 of 10See more

cosmo cosmo-platform 0.20.0

2 of the 10 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

28,839
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

9,316
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

10,530
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
libssh2@1.11.1-1
1.11.1-1+deb13u1
instill/mgmt-backend:d0933d4ebe12f77a3f9
libssh2@1.11.1-1
1.11.1-1+deb13u1
instill/model-backend:611f0f2e980125e5ba5
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

30,816
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

17,693
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,218
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

107,811
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,327
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,435
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

2,355
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,052
agentareaagentareaVerified publisher0.0.181 of 16See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
agentarea/agentarea-mcp-runner:latestd3c209a5d531
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

14,914
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,604
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

12,037
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,222
aramid-indexerbiatec-repoVerified publisher3.9.03 of 5See more

aramid-indexer biatec-repo 3.9.0

3 of the 5 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
libssh2@1.11.0-4.1build2
1.11.0-4.1ubuntu0.24.04.2
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
libssh2@1.11.1-1ubuntu0.26.04.1
1.11.1-1ubuntu0.26.04.2
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
libssh2@1.11.1-1ubuntu0.26.04.1
1.11.1-1ubuntu0.26.04.2

Open the chart page →

13,357
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
libssh2@1.10.0-3
no fix listed

Open the chart page →

7,190
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
libssh2@1.11.0-4.1build2
1.11.0-4.1ubuntu0.24.04.2

Open the chart page →

5,059
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
libssh2@1.10.0-3
no fix listed

Open the chart page →

7,190
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

10,817
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,971
typo3christianhuthVerified publisher7.7.01 of 2See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
martinhelmich/typo3:12.4c83a4f3fd7ae
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

8,466
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

9,724
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

13,761
dbrepodbrepo1.13.34 of 25See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

52,635
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

18,376
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libssh2@1.11.1-1
1.11.1-1+deb13u1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

31,510
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

11,458
zabbix-server-mysqlfermosit3.0.21 of 4See more

zabbix-server-mysql fermosit 3.0.2

1 of the 4 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
libssh2@1.11.0-4.1build2
1.11.0-4.1ubuntu0.24.04.2

Open the chart page →

12,840
rss-bridgegabe565Verified publisher0.5.21 of 1See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/rss-bridge/rss-bridge:latest606896116558
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

2,186
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

4,879
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,123
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

10,072
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

6,374
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

16,514
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

15,712
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

11,764
jellyfinjellyfinVerified publisher0.3.301 of 1See more

jellyfin jellyfin 0.3.30

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,604
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,387
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,508
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,789
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

5,228
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

20,403
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,544
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

3,980
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

35,050
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1

Open the chart page →

7,201
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
libssh2@1.11.1-1
1.11.1-1+deb13u1

Open the chart page →

2,753
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-15661.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
libssh2@1.11.1-1build1
1.11.1-1ubuntu0.25.10.2

Open the chart page →

11,103

Container images carrying it

509 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
libssh2@1.11.1-1
1.11.1-1+deb13u1
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
libssh2@1.10.0-3+b1
1.10.0-3+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.