StackRadar

CVE-2025-21671

High

Advisory

Published 31 Jan 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
111
of 18,232 indexed, latest versions
Container images
110
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 111 of 18,232 indexed charts deploy, on 110 images.

Affected packageAffected versionsFixed inImages
linuxdeb6.1.27-1, 6.1.37-1, 6.1.38-4, 6.1.52-1+13 more6.1.128-1110
OSV records
DEBIAN-CVE-2025-21671

Charts affected

111 by stars
ChartLatestAffected imagesRadar Score
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
linux@6.1.76-1
6.1.128-1

Open the chart page →

83,601
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
linux@6.1.106-3
6.1.128-1

Open the chart page →

77,091
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
linux@6.1.115-1
6.1.128-1

Open the chart page →

74,288
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
linux@6.1.76-1
6.1.128-1

Open the chart page →

106,684
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
linux@6.1.76-1
6.1.128-1

Open the chart page →

106,203
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
linux@6.1.76-1
6.1.128-1

Open the chart page →

106,706
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
linux@6.1.69-1
6.1.128-1

Open the chart page →

95,315
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
linux@6.1.38-4
6.1.128-1

Open the chart page →

96,345
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
linux@6.1.124-1
6.1.128-1

Open the chart page →

69,516
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
linux@6.1.85-1
6.1.128-1

Open the chart page →

78,312
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-21671.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
linux@6.1.27-1
6.1.128-1

Open the chart page →

94,373

Container images carrying it

110 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.128-1
6
frinx/resource-manager:6.1.09cd0147a09bd
linux@6.1.76-1
6.1.128-1
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
linux@6.1.27-1
6.1.128-1
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
linux@6.1.27-1
6.1.128-1
2
library/phpmyadmin:5.2.16e75aa8f767c
linux@6.1.123-1
6.1.128-1
2
library/python:3.7eedf63967cdb
linux@6.1.52-1
6.1.128-1
2
library/redis:7.2.3a7cee7c8178f
linux@6.1.67-1
6.1.128-1
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
linux@6.1.55-1
6.1.128-1
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
linux@6.1.90-1
6.1.128-1
2
uffizzi/controller:latest0344805f267b
linux@6.1.69-1
6.1.128-1
2
vdiogov/glpi-conteiner:latest6945f84f0058
linux@6.1.99-1
6.1.128-1
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
linux@6.1.99-1
6.1.128-1
2
aboogie/login_test_backend:new9c41a4483ac8
linux@6.1.99-1
6.1.128-1
1
akaunting/akaunting:3.0.1552811b36ec3a
linux@6.1.37-1
6.1.128-1
1
allegroai/clearml:2.0.0-613713ae38f7daf
linux@6.1.119-1
6.1.128-1
1
apache/superset:4.0.1ab9467fd712c
linux@6.1.85-1
6.1.128-1
1
aristidetm/basic-notebook:3.6.5469dbc951224
linux@6.1.90-1
6.1.128-1
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
linux@6.1.99-1
6.1.128-1
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
linux@6.1.90-1
6.1.128-1
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
linux@6.1.76-1
6.1.128-1
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
linux@6.1.85-1
6.1.128-1
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
linux@6.1.52-1
6.1.128-1
1
avinash263/pyredis263:latestaa2b8727f1a6
linux@6.1.27-1
6.1.128-1
1
baserow/baserow:1.30.1df0c42eb67e8
linux@6.1.119-1
6.1.128-1
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
linux@6.1.76-1
6.1.128-1
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
linux@6.1.124-1
6.1.128-1
1
bmeares/meerschaum:2.8.48e9c5bacaa82
linux@6.1.124-1
6.1.128-1
1
bnjbvr/kresus:0.22.137e216b182c8
linux@6.1.119-1
6.1.128-1
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
linux@6.1.115-1
6.1.128-1
1
castopod/castopod:1.12.101fd37280cbb2
linux@6.1.106-3
6.1.128-1
1
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
linux@6.1.69-1
6.1.128-1
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
linux@6.1.76-1
6.1.128-1
1
ddosify/selfhosted_backend:3.2.93c11e3182652
linux@6.1.85-1
6.1.128-1
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
linux@6.1.76-1
6.1.128-1
1
dragonflyoss/client:v0.1.82edf3e921f4e0
linux@6.1.90-1
6.1.128-1
1
felipecs8/app-db-connection-test:v129e06c9c6385
linux@6.1.119-1
6.1.128-1
1
firefart/requesttracker:5.0.40d6249906d8c
linux@6.1.55-1
6.1.128-1
1
gulacedia/web-dvwa-new:v367b467d961ca
linux@6.1.27-1
6.1.128-1
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
linux@6.1.52-1
6.1.128-1
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
linux@6.1.27-1
6.1.128-1
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
linux@6.1.38-4
6.1.128-1
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
linux@6.1.52-1
6.1.128-1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
linux@6.1.69-1
6.1.128-1
1
knspar/phronetis-operator:0.1.60c4f0543ee58
linux@6.1.90-1
6.1.128-1
1
library/haproxy:2.9.6fc5748ff7c72
linux@6.1.76-1
6.1.128-1
1
library/matomo:5.1.2-apache2415789e1602
linux@6.1.119-1
6.1.128-1
1
library/python:3.8d41127070014
linux@6.1.106-3
6.1.128-1
1
library/wordpress:6.4.3-apache8ae66efb09a2
linux@6.1.76-1
6.1.128-1
1
logiqai/flash:v3.10.265b996bc7bdc
linux@6.1.106-3
6.1.128-1
1
microslac/auth:latest5c1eb1f5c64d
linux@6.1.38-4
6.1.128-1
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.