StackRadar

CVE-2025-1767

Medium

Advisory

Published 13 Mar 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.006
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
438
of 17,787 indexed, latest versions
Container images
377
deployed by those charts
Fix available
None
affected package

Kubernetes GitRepo Volume Inadvertent Local Repository Access

Carried by container images the latest versions of 438 of 17,787 indexed charts deploy, on 377 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+135 moreno fix listed377
OSV records
GHSA-3wgm-2gw2-vh5mGO-2025-3521

Charts affected

438 by stars
ChartLatestAffected imagesRadar Score
oi-slurm-cluster-chartslurm-cluster-chart0.25.11 of 4See more

oi-slurm-cluster-chart slurm-cluster-chart 0.25.1

1 of the 4 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
bitnami/kubectl:latestb29d8c1665b7
k8s.io/kubernetes@v1.37.0
no fix listed

Open the chart page →

4,332
slurm-cluster-chartslurm-cluster-chart0.25.01 of 4See more

slurm-cluster-chart slurm-cluster-chart 0.25.0

1 of the 4 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
bitnami/kubectl:latestb29d8c1665b7
k8s.io/kubernetes@v1.37.0
no fix listed

Open the chart page →

4,332
slurm-operatorslurm-operator1.2.21 of 2See more

slurm-operator slurm-operator 1.2.2

1 of the 2 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
ghcr.io/slinkyproject/slurm-operator:1.2.20ce1930f20de
k8s.io/kubernetes@v1.36.2
no fix listed

Open the chart page →

91
kyvernosoftonic3.5.21 of 7See more

kyverno softonic 3.5.2

1 of the 7 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.32.73c5268158974
k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88
no fix listed

Open the chart page →

1,019
gloo-meshsolo-gloo-mesh1.1.21 of 1See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
no fix listed

Open the chart page →

3,257
spire-identity-exchangespiffeVerified publisher0.2.21 of 3See more

spire-identity-exchange spiffe 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.31.099b37df34bc4
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
no fix listed

Open the chart page →

1,427
ocean-admission-controllerspot1.0.31 of 3See more

ocean-admission-controller spot 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
bitnami/kubectl:latestb29d8c1665b7
k8s.io/kubernetes@v1.37.0
no fix listed

Open the chart page →

773
ocean-vpaspot1.0.71 of 4See more

ocean-vpa spot 1.0.7

1 of the 4 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
bitnami/kubectl:latestb29d8c1665b7
k8s.io/kubernetes@v1.37.0
no fix listed

Open the chart page →

1,195
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
k8s.io/kubernetes@v1.30.1
no fix listed

Open the chart page →

2,416
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
no fix listed

Open the chart page →

16,506
steadybit-agentsteadybit3.1.1621See more

steadybit-agent steadybit 3.1.162

1 container image this version deploys carries CVE-2025-1767.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-kubernetes:v2.6.34a024c2c48c03
k8s.io/kubernetes@v1.37.0
no fix listed

Open the chart page →

—
nfs-provisionersupporttools0.11.01 of 1See more

nfs-provisioner supporttools 0.11.0

1 of the 1 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
openebs/provisioner-nfs:0.11.04f41dd782761
k8s.io/kubernetes@v1.17.3
no fix listed

Open the chart page →

2,671
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
bitnami/kubectl:latestb29d8c1665b7
k8s.io/kubernetes@v1.37.0
no fix listed

Open the chart page →

4,661
traefik-secrets-exportertraefik-secrets-exporter0.0.21 of 1See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
k8s.io/kubernetes@v1.35.0
no fix listed

Open the chart page →

1,675
tfy-inferentia-operatortruefoundryVerified publisher0.2.81 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
k8s.io/kubernetes@v0.0.0-20250108021927-cd1e1306b0ba
no fix listed

Open the chart page →

2,902
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6
no fix listed

Open the chart page →

8,607
shiftleft-nexusupwind1.0.41 of 2See more

shiftleft-nexus upwind 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
bitnami/kubectl:latestb29d8c1665b7
k8s.io/kubernetes@v1.37.0
no fix listed

Open the chart page →

13
upwind-shiftleft-gitlab-automatedupwind1.4.21 of 2See more

upwind-shiftleft-gitlab-automated upwind 1.4.2

1 of the 2 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
bitnami/kubectl:latestb29d8c1665b7
k8s.io/kubernetes@v1.37.0
no fix listed

Open the chart page →

13
velero-clientvelero-clientVerified publisher1.4.21 of 1See more

velero-client velero-client 1.4.2

1 of the 1 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
k8s.io/kubernetes@v1.36.2
no fix listed

Open the chart page →

513
vineyard-operatorvineyardVerified publisher0.24.21 of 2See more

vineyard-operator vineyard 0.24.2

1 of the 2 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
k8s.io/kubernetes@v1.19.3
no fix listed

Open the chart page →

4,525
volcanovolcano-sh1.15.23 of 3See more

volcano volcano-sh 1.15.2

3 of the 3 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
volcanosh/vc-controller-manager:v1.15.26a6bc2560d51
k8s.io/kubernetes@v1.35.3
no fix listed
volcanosh/vc-scheduler:v1.15.2afab36286a17
k8s.io/kubernetes@v1.35.3
no fix listed
volcanosh/vc-webhook-manager:v1.15.22fff65aad011
k8s.io/kubernetes@v1.35.0
no fix listed

Open the chart page →

1,533
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
k8s.io/kubernetes@v1.37.0
no fix listed

Open the chart page →

3,911
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
no fix listed

Open the chart page →

1,122
argocd-image-updaterwenerme1.3.11 of 1See more

argocd-image-updater wenerme 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
k8s.io/kubernetes@v1.36.1
no fix listed

Open the chart page →

718
argo-rolloutswenerme2.43.11 of 1See more

argo-rollouts wenerme 2.43.1

1 of the 1 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
k8s.io/kubernetes@v1.34.5
no fix listed

Open the chart page →

115
argo-workflowswenerme2.0.61 of 3See more

argo-workflows wenerme 2.0.6

1 of the 3 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-workflows-crdinstaller:v4.1.394a031823f2a
k8s.io/kubernetes@v1.36.3
no fix listed

Open the chart page →

259
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
k8s.io/kubernetes@v1.30.3
no fix listed

Open the chart page →

10,843
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
k8s.io/kubernetes@v1.18.19
no fix listed

Open the chart page →

15,230
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/kubernetes@v1.18.0
no fix listed

Open the chart page →

2,743
rancherwenerme2.15.11 of 2See more

rancher wenerme 2.15.1

1 of the 2 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
k8s.io/kubernetes@v1.33.7
no fix listed

Open the chart page →

1,456
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
bitnami/kubectl:latestb29d8c1665b7
k8s.io/kubernetes@v1.37.0
no fix listed

Open the chart page →

14,983
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
no fix listed

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
k8s.io/kubernetes@v1.24.4
no fix listed

Open the chart page →

11,784
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
no fix listed

Open the chart page →

12,606
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.36.2b0d792e0d8df
k8s.io/kubernetes@v1.36.2
no fix listed

Open the chart page →

3,990
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
no fix listed

Open the chart page →

13,677
xonodepoolsxonodepoolsOfficialVerified publisher1.0.71 of 1See more

xonodepools xonodepools 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
xosphere/xonodepools:1.0.71458097b6f85
k8s.io/kubernetes@v1.36.1
no fix listed

Open the chart page →

388
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-1767.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
k8s.io/kubernetes@v1.36.3
no fix listed

Open the chart page →

7,849

Container images carrying it

377 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
k8s.io/kubernetes@v1.34.0
no fix listed
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
k8s.io/kubernetes@v1.33.3
no fix listed
1
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
k8s.io/kubernetes@v1.27.3
no fix listed
1
ghcr.io/k10app/businit:latest94c9a3e799c2
k8s.io/kubernetes@v1.25.4
no fix listed
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
k8s.io/kubernetes@v1.13.0
no fix listed
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
k8s.io/kubernetes@v1.34.1
no fix listed
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
k8s.io/kubernetes@v1.29.3
no fix listed
1
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
k8s.io/kubernetes@v1.25.13
no fix listed
1
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
no fix listed
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
k8s.io/kubernetes@v1.29.2
no fix listed
1
ghcr.io/kubelauncher/kubectl7280594a2f18
k8s.io/kubernetes@v1.36.3
no fix listed
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
k8s.io/kubernetes@v1.34.3
no fix listed
1
ghcr.io/kubewall/kubewall:0.0.23d9a03cfb557b
k8s.io/kubernetes@v1.37.0
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
no fix listed
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
k8s.io/kubernetes@v1.29.0
no fix listed
1
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
k8s.io/kubernetes@v1.25.3
no fix listed
1
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
k8s.io/kubernetes@v1.14.10
no fix listed
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
k8s.io/kubernetes@v1.20.4
no fix listed
1
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
k8s.io/kubernetes@v1.16.10
no fix listed
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
k8s.io/kubernetes@v1.29.2
no fix listed
1
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
k8s.io/kubernetes@v1.35.0
no fix listed
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
k8s.io/kubernetes@v1.28.0
no fix listed
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
k8s.io/kubernetes@v1.29.2
no fix listed
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
k8s.io/kubernetes@v1.36.4
no fix listed
1
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
no fix listed
1
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
k8s.io/kubernetes@v1.34.2
no fix listed
1
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
k8s.io/kubernetes@v1.35.1
no fix listed
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
k8s.io/kubernetes@v0.0.0-20240611201706-062798d53d83
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
k8s.io/kubernetes@v1.23.1
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
k8s.io/kubernetes@v1.34.1
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
k8s.io/kubernetes@v1.33.3
no fix listed
1
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
k8s.io/kubernetes@v1.33.1
no fix listed
1
ghcr.io/quenchworks/images/kubectlb98289383cc7
k8s.io/kubernetes@v1.34.11+dirty
no fix listed
1
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
k8s.io/kubernetes@v1.35.0
no fix listed
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
k8s.io/kubernetes@v1.35.0
no fix listed
1
ghcr.io/slinkyproject/slurm-bridge-controllers:1.2.2a3b40cd202e4
k8s.io/kubernetes@v1.36.0
no fix listed
1
ghcr.io/slinkyproject/slurm-bridge-scheduler:1.2.2d0eec33ab53e
k8s.io/kubernetes@v1.36.0
no fix listed
1
ghcr.io/slinkyproject/slurm-operator:1.2.20ce1930f20de
k8s.io/kubernetes@v1.36.2
no fix listed
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
k8s.io/kubernetes@v1.29.0
no fix listed
1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
k8s.io/kubernetes@v1.29.0
no fix listed
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
k8s.io/kubernetes@v1.32.8
no fix listed
1
ghcr.io/steadybit/extension-kubernetes:v2.6.34a024c2c48c03
k8s.io/kubernetes@v1.37.0
no fix listed
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
no fix listed
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
k8s.io/kubernetes@v0.0.0-20241119134819-c83cbee114dd
no fix listed
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
k8s.io/kubernetes@v1.34.3
no fix listed
1
ghcr.io/zapier/kubechecks:latest60cea46ce830
k8s.io/kubernetes@v1.36.1
no fix listed
1
mcr.microsoft.com/acstor/local-csi-driver:v0.3.0f9af53a79fd1
k8s.io/kubernetes@v1.36.3
no fix listed
1
mcr.microsoft.com/acstor/local-csi-manager:v0.3.04f464b52ba85
k8s.io/kubernetes@v1.36.3
no fix listed
1
mcr.microsoft.com/application-lb/images/alb-controller-crds:1.12.14dcf198fcb7c
k8s.io/kubernetes@v1.37.0
no fix listed
1
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
k8s.io/kubernetes@v1.21.0-alpha.0.0.20201210005053-f58c4d8cd725
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.