StackRadar

CVE-2025-21794

High

Advisory

Published 27 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
118
of 18,232 indexed, latest versions
Container images
116
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 118 of 18,232 indexed charts deploy, on 116 images.

Affected packageAffected versionsFixed inImages
linuxdeb6.1.27-1, 6.1.37-1, 6.1.38-4, 6.1.52-1+14 more6.1.129-1116
OSV records
DEBIAN-CVE-2025-21794

Charts affected

118 by stars
ChartLatestAffected imagesRadar Score
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
linux@6.1.123-1
6.1.129-1

Open the chart page →

64,728
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
linux@6.1.76-1
6.1.129-1

Open the chart page →

90,433
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
linux@6.1.106-3
6.1.129-1

Open the chart page →

79,446
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
linux@6.1.52-1
6.1.129-1

Open the chart page →

104,791
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
linux@6.1.124-1
6.1.129-1

Open the chart page →

66,671
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
linux@6.1.85-1
6.1.129-1

Open the chart page →

86,137
icinga2svtech-public-helm-charts1.0.01 of 4See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
linux@6.1.67-1
6.1.129-1

Open the chart page →

83,062
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
linux@6.1.76-1
6.1.129-1

Open the chart page →

84,631
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
linux@6.1.106-3
6.1.129-1

Open the chart page →

78,300
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
linux@6.1.115-1
6.1.129-1

Open the chart page →

75,471
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
linux@6.1.76-1
6.1.129-1

Open the chart page →

108,485
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
linux@6.1.76-1
6.1.129-1

Open the chart page →

108,010
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
linux@6.1.76-1
6.1.129-1

Open the chart page →

108,512
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
linux@6.1.69-1
6.1.129-1

Open the chart page →

96,471
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
linux@6.1.38-4
6.1.129-1

Open the chart page →

97,326
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
linux@6.1.124-1
6.1.129-1

Open the chart page →

70,771
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
linux@6.1.85-1
6.1.129-1

Open the chart page →

79,276
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
linux@6.1.27-1
6.1.129-1

Open the chart page →

95,117

Container images carrying it

116 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
logiqai/flash:v3.10.265b996bc7bdc
linux@6.1.106-3
6.1.129-1
1
microslac/auth:latest5c1eb1f5c64d
linux@6.1.38-4
6.1.129-1
1
microslac/conversations:latest1b24afcd71ff
linux@6.1.38-4
6.1.129-1
1
microslac/teams:latest0f75997fcbe5
linux@6.1.38-4
6.1.129-1
1
microslac/users:latest216ea6832a56
linux@6.1.38-4
6.1.129-1
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
linux@6.1.55-1
6.1.129-1
1
muhammedgamal/fp23:latest74b4cd69b6fa
linux@6.1.90-1
6.1.129-1
1
opea/codegen-ui:1.02bee4eb66f3e
linux@6.1.76-1
6.1.129-1
1
opea/codetrans-ui:1.03ef121f34610
linux@6.1.76-1
6.1.129-1
1
opea/docsum-ui:1.07f854e9bffaf
linux@6.1.76-1
6.1.129-1
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
linux@6.1.99-1
6.1.129-1
1
santisbon/evwatcher:latestc4e994ca4540
linux@6.1.38-4
6.1.129-1
1
santisbon/evworker:lateste807283f8d69
linux@6.1.38-4
6.1.129-1
1
santisbon/speedtest:latest8ee3a1697227
linux@6.1.38-4
6.1.129-1
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
linux@6.1.106-3
6.1.129-1
1
sissbruecker/linkding:1.35.00c5dddf0b37c
linux@6.1.106-3
6.1.129-1
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
linux@6.1.52-1
6.1.129-1
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
linux@6.1.38-4
6.1.129-1
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
linux@6.1.38-4
6.1.129-1
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
linux@6.1.38-4
6.1.129-1
1
substratusai/verba:v0.4.0-baseURL261695be635eb
linux@6.1.85-1
6.1.129-1
1
supabase/studio:20241021-9f9b08326d8070c55e9
linux@6.1.112-1
6.1.129-1
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
linux@6.1.76-1
6.1.129-1
1
teknas09/bird-pod:latest12a1fa85c4aa
linux@6.1.76-1
6.1.129-1
1
theradius/loggia:0.463ba348546ec
linux@6.1.69-1
6.1.129-1
1
thongngo3301/stakefish:latesta341af5976e3
linux@6.1.52-1
6.1.129-1
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
linux@6.1.128-1
6.1.129-1
1
valkey/valkey:8.0.1c5d4f082b76d
linux@6.1.106-3
6.1.129-1
1
vlebediantsev/notes-admin-front:latest007c6670ff48
linux@6.1.38-4
6.1.129-1
1
vlebediantsev/notes-project-front:latest945675fd2636
linux@6.1.38-4
6.1.129-1
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
linux@6.1.38-4
6.1.129-1
1
voska/hass-mcp:latest7142a431e2c5
linux@6.1.128-1
6.1.129-1
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
linux@6.1.99-1
6.1.129-1
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
linux@6.1.99-1
6.1.129-1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
linux@6.1.106-3
6.1.129-1
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
linux@6.1.106-3
6.1.129-1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
linux@6.1.99-1
6.1.129-1
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
linux@6.1.128-1
6.1.129-1
1
ghcr.io/caninehq/canine:latest70d5fa5a3fd8
linux@6.1.99-1
6.1.129-1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
linux@6.1.67-1
6.1.129-1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
linux@6.1.99-1
6.1.129-1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
linux@6.1.128-1
6.1.129-1
1
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
linux@6.1.76-1
6.1.129-1
1
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
linux@6.1.90-1
6.1.129-1
1
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
linux@6.1.76-1
6.1.129-1
1
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
linux@6.1.99-1
6.1.129-1
1
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
linux@6.1.99-1
6.1.129-1
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
linux@6.1.112-1
6.1.129-1
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
linux@6.1.124-1
6.1.129-1
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
linux@6.1.99-1
6.1.129-1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.