StackRadar

CVE-2025-21671

High

Advisory

Published 31 Jan 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
111
of 18,232 indexed, latest versions
Container images
110
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 111 of 18,232 indexed charts deploy, on 110 images.

Affected packageAffected versionsFixed inImages
linuxdeb6.1.27-1, 6.1.37-1, 6.1.38-4, 6.1.52-1+13 more6.1.128-1110
OSV records
DEBIAN-CVE-2025-21671

Charts affected

111 by stars
ChartLatestAffected imagesRadar Score
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
linux@6.1.119-1
6.1.128-1

Open the chart page →

72,628
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
linux@6.1.27-1
6.1.128-1

Open the chart page →

88,040
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
supabase/studio:20241021-9f9b08326d8070c55e9
linux@6.1.112-1
6.1.128-1

Open the chart page →

89,811
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
linux@6.1.90-1
6.1.128-1

Open the chart page →

79,137
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.128-1

Open the chart page →

119,877
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
linux@6.1.69-1
6.1.128-1

Open the chart page →

94,846
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
linux@6.1.99-1
6.1.128-1

Open the chart page →

79,146
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
linux@6.1.52-1
6.1.128-1

Open the chart page →

269,763
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
linux@6.1.69-1
6.1.128-1

Open the chart page →

101,608
convertigoconvertigoOfficialVerified publisher8.4.61 of 5See more

convertigo convertigo 8.4.6

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
linux@6.1.119-1
6.1.128-1

Open the chart page →

78,071
cosmocosmo-platformOfficialVerified publisher0.22.11 of 10See more

cosmo cosmo-platform 0.22.1

1 of the 10 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
linux@6.1.124-1
6.1.128-1

Open the chart page →

93,166
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
linux@6.1.85-1
6.1.128-1

Open the chart page →

98,495
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
linux@6.1.90-1
6.1.128-1

Open the chart page →

91,975
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
linux@6.1.99-1
6.1.128-1

Open the chart page →

79,213
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
linux@6.1.106-3
6.1.128-1

Open the chart page →

75,861
valkey-clusterinnagoVerified publisher1.1.01 of 2See more

valkey-cluster innago 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
valkey/valkey:8.0.1c5d4f082b76d
linux@6.1.106-3
6.1.128-1

Open the chart page →

67,970
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
linux@6.1.76-1
6.1.128-1

Open the chart page →

120,513
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
linux@6.1.119-1
6.1.128-1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
linux@6.1.119-1
6.1.128-1

Open the chart page →

154,648
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
linux@6.1.90-1
6.1.128-1

Open the chart page →

86,487
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
linux@6.1.123-1
6.1.128-1

Open the chart page →

72,049
anchore-admission-controlleranchore-charts0.9.41See more

anchore-admission-controller anchore-charts 0.9.4

1 container image this version deploys carries CVE-2025-21671.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
linux@6.1.69-1
6.1.128-1

Open the chart page →

—
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
linux@6.1.76-1
6.1.128-1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
linux@6.1.76-1
6.1.128-1

Open the chart page →

179,557
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
linux@6.1.76-1
6.1.128-1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
linux@6.1.85-1
6.1.128-1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
linux@6.1.52-1
6.1.128-1

Open the chart page →

275,742
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
linux@6.1.106-3
6.1.128-1

Open the chart page →

102,475
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latest70d5fa5a3fd8
linux@6.1.99-1
6.1.128-1

Open the chart page →

83,654
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
linux@6.1.123-1
6.1.128-1

Open the chart page →

64,711
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
linux@6.1.115-1
6.1.128-1

Open the chart page →

70,826
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
linux@6.1.55-1
6.1.128-1

Open the chart page →

94,750
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
linux@6.1.90-1
6.1.128-1

Open the chart page →

89,613
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
linux@6.1.119-1
6.1.128-1

Open the chart page →

71,166
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
linux@6.1.106-3
6.1.128-1

Open the chart page →

71,332
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.128-1

Open the chart page →

217,262
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.128-1

Open the chart page →

217,262
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.128-1

Open the chart page →

119,877
wizarrdjjudas21Verified publisher0.1.61 of 1See more

wizarr djjudas21 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
linux@6.1.55-1
6.1.128-1

Open the chart page →

92,757
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
linux@6.1.76-1
6.1.128-1

Open the chart page →

78,718
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
linux@6.1.119-1
6.1.128-1

Open the chart page →

65,980
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
linux@6.1.112-1
6.1.128-1

Open the chart page →

75,239
frinx-machinefrinx-helm-charts11.0.01 of 26See more

frinx-machine frinx-helm-charts 11.0.0

1 of the 26 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
linux@6.1.76-1
6.1.128-1

Open the chart page →

126,631
resource-managerfrinx-helm-charts2.3.11 of 4See more

resource-manager frinx-helm-charts 2.3.1

1 of the 4 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
linux@6.1.76-1
6.1.128-1

Open the chart page →

84,318
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
linux@6.1.99-1
6.1.128-1

Open the chart page →

79,176
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
linux@6.1.112-1
6.1.128-1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
linux@6.1.69-1
6.1.128-1

Open the chart page →

196,819
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
linux@6.1.52-1
6.1.128-1

Open the chart page →

156,754
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
linux@6.1.27-1
6.1.128-1

Open the chart page →

88,040
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
linux@6.1.90-1
6.1.128-1

Open the chart page →

83,122
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
linux@6.1.69-1
6.1.128-1

Open the chart page →

96,633
image-storage-servicejtektVerified publisher0.5.11 of 4See more

image-storage-service jtekt 0.5.1

1 of the 4 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
linux@6.1.112-1
6.1.128-1

Open the chart page →

88,967
shinsei-managerjtektVerified publisher0.2.02 of 8See more

shinsei-manager jtekt 0.2.0

2 of the 8 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
linux@6.1.55-1
6.1.128-1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
linux@6.1.90-1
6.1.128-1

Open the chart page →

314,894
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
linux@6.1.55-1
6.1.128-1

Open the chart page →

96,104
deployment-servicekrateo1.2.591 of 1See more

deployment-service krateo 1.2.59

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
linux@6.1.76-1
6.1.128-1

Open the chart page →

84,081

Container images carrying it

110 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
linux@6.1.124-1
6.1.128-1
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
linux@6.1.119-1
6.1.128-1
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
linux@6.1.119-1
6.1.128-1
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
linux@6.1.90-1
6.1.128-1
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
linux@6.1.112-1
6.1.128-1
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
linux@6.1.90-1
6.1.128-1
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
linux@6.1.55-1
6.1.128-1
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
linux@6.1.115-1
6.1.128-1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
linux@6.1.69-1
6.1.128-1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
linux@6.1.38-4
6.1.128-1
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.