StackRadar

CVE-2025-1647

Medium

Advisory

Published 15 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
16
of 17,781 indexed, latest versions
Container images
23
deployed by those charts
Fix available
None
affected package

Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components

Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 23 images.

Affected packageAffected versionsFixed inImages
bootstrapnpm3.4.1no fix listed23
OSV records
GHSA-q58r-hwc8-rm9j

Charts affected

16 by stars
ChartLatestAffected imagesRadar Score
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
bootstrap@3.4.1
no fix listed

Open the chart page →

7,894
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
bootstrap@3.4.1
no fix listed
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
bootstrap@3.4.1
no fix listed

Open the chart page →

52,919
daskhubdask2024.1.12 of 9See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
bootstrap@3.4.1
no fix listed
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
bootstrap@3.4.1
no fix listed

Open the chart page →

14,094
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
bootstrap@3.4.1
no fix listed

Open the chart page →

2,519
copshalkeye1.0.11 of 1See more

cops halkeye 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
linuxserver/cops:1.1.3-ls86e299a5a4f1f2
bootstrap@3.4.1
no fix listed

Open the chart page →

122
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
bootstrap@3.4.1
no fix listed
countly/frontend:25.05.42acbc11499b6
bootstrap@3.4.1
no fix listed

Open the chart page →

7,295
jupyterhubd4nVerified publisher3.3.72 of 7See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
bootstrap@3.4.1
no fix listed
aristidetm/k8s-hub:3.3.7ccb516cb8474
bootstrap@3.4.1
no fix listed

Open the chart page →

16,604
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
bootstrap@3.4.1
no fix listed

Open the chart page →

18,813
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
bootstrap@3.4.1
no fix listed

Open the chart page →

37,671
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
bootstrap@3.4.1
no fix listed
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
bootstrap@3.4.1
no fix listed

Open the chart page →

7,356
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
bootstrap@3.4.1
no fix listed
lsstsqre/sciplat-hub:latest5e0ade6bed1c
bootstrap@3.4.1
no fix listed
lsstsqre/wfdispatcher:lateste9feb99f524d
bootstrap@3.4.1
no fix listed

Open the chart page →

5,786
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
bootstrap@3.4.1
no fix listed

Open the chart page →

17,779
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
bootstrap@3.4.1
no fix listed

Open the chart page →

8,303
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
bootstrap@3.4.1
no fix listed

Open the chart page →

27,465
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
bootstrap@3.4.1
no fix listed

Open the chart page →

6,524
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-1647.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
bootstrap@3.4.1
no fix listed

Open the chart page →

8,607

Container images carrying it

23 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
aristidetm/basic-notebook:3.6.5469dbc951224
bootstrap@3.4.1
no fix listed
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
bootstrap@3.4.1
no fix listed
1
countly/api:25.05.4f4cc7447c4f5
bootstrap@3.4.1
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
bootstrap@3.4.1
no fix listed
1
countly/frontend:25.05.42acbc11499b6
bootstrap@3.4.1
no fix listed
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
bootstrap@3.4.1
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
bootstrap@3.4.1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
bootstrap@3.4.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
bootstrap@3.4.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
bootstrap@3.4.1
no fix listed
1
linuxserver/codimd:latestb801bbcf6386
bootstrap@3.4.1
no fix listed
1
linuxserver/cops:1.1.3-ls86e299a5a4f1f2
bootstrap@3.4.1
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
bootstrap@3.4.1
no fix listed
1
lsstsqre/prepuller:latest19c2dfc4e4ff
bootstrap@3.4.1
no fix listed
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
bootstrap@3.4.1
no fix listed
1
lsstsqre/wfdispatcher:lateste9feb99f524d
bootstrap@3.4.1
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
bootstrap@3.4.1
no fix listed
1
pangeo/base-notebook:2024.01.155fbe688a4f80
bootstrap@3.4.1
no fix listed
1
phntom/codimd:2.4.31b9aafbb62e6
bootstrap@3.4.1
no fix listed
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
bootstrap@3.4.1
no fix listed
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
bootstrap@3.4.1
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
bootstrap@3.4.1
no fix listed
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
bootstrap@3.4.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.