StackRadar

CVE-2025-21671

High

Advisory

Published 31 Jan 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
111
of 18,232 indexed, latest versions
Container images
110
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 111 of 18,232 indexed charts deploy, on 110 images.

Affected packageAffected versionsFixed inImages
linuxdeb6.1.27-1, 6.1.37-1, 6.1.38-4, 6.1.52-1+13 more6.1.128-1110
OSV records
DEBIAN-CVE-2025-21671

Charts affected

111 by stars
ChartLatestAffected imagesRadar Score
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
linux@6.1.76-1
6.1.128-1

Open the chart page →

83,601
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
linux@6.1.106-3
6.1.128-1

Open the chart page →

77,091
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
linux@6.1.115-1
6.1.128-1

Open the chart page →

74,288
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
linux@6.1.76-1
6.1.128-1

Open the chart page →

106,684
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
linux@6.1.76-1
6.1.128-1

Open the chart page →

106,203
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
linux@6.1.76-1
6.1.128-1

Open the chart page →

106,706
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
linux@6.1.69-1
6.1.128-1

Open the chart page →

95,315
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
linux@6.1.38-4
6.1.128-1

Open the chart page →

96,345
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
linux@6.1.124-1
6.1.128-1

Open the chart page →

69,516
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
linux@6.1.85-1
6.1.128-1

Open the chart page →

78,312
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
linux@6.1.27-1
6.1.128-1

Open the chart page →

94,373

Container images carrying it

110 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
microslac/conversations:latest1b24afcd71ff
linux@6.1.38-4
6.1.128-1
1
microslac/teams:latest0f75997fcbe5
linux@6.1.38-4
6.1.128-1
1
microslac/users:latest216ea6832a56
linux@6.1.38-4
6.1.128-1
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
linux@6.1.55-1
6.1.128-1
1
muhammedgamal/fp23:latest74b4cd69b6fa
linux@6.1.90-1
6.1.128-1
1
opea/codegen-ui:1.02bee4eb66f3e
linux@6.1.76-1
6.1.128-1
1
opea/codetrans-ui:1.03ef121f34610
linux@6.1.76-1
6.1.128-1
1
opea/docsum-ui:1.07f854e9bffaf
linux@6.1.76-1
6.1.128-1
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
linux@6.1.99-1
6.1.128-1
1
santisbon/evwatcher:latestc4e994ca4540
linux@6.1.38-4
6.1.128-1
1
santisbon/evworker:lateste807283f8d69
linux@6.1.38-4
6.1.128-1
1
santisbon/speedtest:latest8ee3a1697227
linux@6.1.38-4
6.1.128-1
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
linux@6.1.106-3
6.1.128-1
1
sissbruecker/linkding:1.35.00c5dddf0b37c
linux@6.1.106-3
6.1.128-1
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
linux@6.1.52-1
6.1.128-1
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
linux@6.1.38-4
6.1.128-1
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
linux@6.1.38-4
6.1.128-1
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
linux@6.1.38-4
6.1.128-1
1
substratusai/verba:v0.4.0-baseURL261695be635eb
linux@6.1.85-1
6.1.128-1
1
supabase/studio:20241021-9f9b08326d8070c55e9
linux@6.1.112-1
6.1.128-1
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
linux@6.1.76-1
6.1.128-1
1
teknas09/bird-pod:latest12a1fa85c4aa
linux@6.1.76-1
6.1.128-1
1
theradius/loggia:0.463ba348546ec
linux@6.1.69-1
6.1.128-1
1
thongngo3301/stakefish:latesta341af5976e3
linux@6.1.52-1
6.1.128-1
1
valkey/valkey:8.0.1c5d4f082b76d
linux@6.1.106-3
6.1.128-1
1
vlebediantsev/notes-admin-front:latest007c6670ff48
linux@6.1.38-4
6.1.128-1
1
vlebediantsev/notes-project-front:latest945675fd2636
linux@6.1.38-4
6.1.128-1
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
linux@6.1.38-4
6.1.128-1
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
linux@6.1.99-1
6.1.128-1
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
linux@6.1.99-1
6.1.128-1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
linux@6.1.106-3
6.1.128-1
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
linux@6.1.106-3
6.1.128-1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
linux@6.1.99-1
6.1.128-1
1
ghcr.io/caninehq/canine:latest70d5fa5a3fd8
linux@6.1.99-1
6.1.128-1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
linux@6.1.67-1
6.1.128-1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
linux@6.1.99-1
6.1.128-1
1
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
linux@6.1.76-1
6.1.128-1
1
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
linux@6.1.90-1
6.1.128-1
1
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
linux@6.1.76-1
6.1.128-1
1
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
linux@6.1.99-1
6.1.128-1
1
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
linux@6.1.99-1
6.1.128-1
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
linux@6.1.112-1
6.1.128-1
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
linux@6.1.124-1
6.1.128-1
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
linux@6.1.99-1
6.1.128-1
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
linux@6.1.124-1
6.1.128-1
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
linux@6.1.112-1
6.1.128-1
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
linux@6.1.69-1
6.1.128-1
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
linux@6.1.27-1
6.1.128-1
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
linux@6.1.123-1
6.1.128-1
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
linux@6.1.55-1
6.1.128-1
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.