StackRadarChart IndexLive demo

CVE-2025-21671

High

Advisory

Published 31 Jan 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.002; 11th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 111; of 18,232 indexed, latest versions
Container images: 110; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 111 of 18,232 indexed charts deploy, on 110 images.

Affected package	Affected versions	Fixed in	Images
linuxdeb	6.1.27-1, 6.1.37-1, 6.1.38-4, 6.1.52-1+13 more	6.1.128-1	110

OSV records: DEBIAN-CVE-2025-21671

Charts affected

111 by stars

Chart

Latest

Affected images

Radar Score

nagvissvtech-public-helm-charts

1 of 1 See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	linux@6.1.76-1	6.1.128-1

Open the chart page →

83,601

1 of 1 See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
library/python :3.8	d41127070014	linux@6.1.106-3	6.1.128-1

Open the chart page →

77,091

helm-testtest-helm-artifacthub

1 of 2 See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
carlosmz87/test_helm_backend :latest	8ffa63aa995d	linux@6.1.115-1	6.1.128-1

Open the chart page →

74,288

codegentest-opea

1 of 5 See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
opea/codegen-ui :1.0	2bee4eb66f3e	linux@6.1.76-1	6.1.128-1

Open the chart page →

106,684

codetranstest-opea

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
opea/codetrans-ui :1.0	3ef121f34610	linux@6.1.76-1	6.1.128-1

Open the chart page →

106,203

docsumtest-opea

1 of 5 See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
opea/docsum-ui :1.0	7f854e9bffaf	linux@6.1.76-1	6.1.128-1

Open the chart page →

106,706

tfy-distributortruefoundry

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	linux@6.1.69-1	6.1.128-1

Open the chart page →

95,315

demo-backendv2fly

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	linux@6.1.38-4	6.1.128-1

Open the chart page →

96,345

maybe-financevicsufer

1 of 3 See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	linux@6.1.124-1	6.1.128-1

Open the chart page →

69,516

supersetwbstack

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	linux@6.1.85-1	6.1.128-1

Open the chart page →

78,312

web-dvwaweb-dvwa

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-21671.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	linux@6.1.27-1	6.1.128-1

Open the chart page →

94,373

Container images carrying it

110 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	linux@6.1.124-1	6.1.128-1	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	linux@6.1.119-1	6.1.128-1	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	linux@6.1.119-1	6.1.128-1	1
public.ecr.aws/g4a0y2u8/unifie-store :staging-19925	a2057fabc948	linux@6.1.90-1	6.1.128-1	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	linux@6.1.112-1	6.1.128-1	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	linux@6.1.90-1	6.1.128-1	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	linux@6.1.55-1	6.1.128-1	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	linux@6.1.115-1	6.1.128-1	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	linux@6.1.69-1	6.1.128-1	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	linux@6.1.38-4	6.1.128-1	1