StackRadar

CVE-2025-21794

High

Advisory

Published 27 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
118
of 18,232 indexed, latest versions
Container images
116
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 118 of 18,232 indexed charts deploy, on 116 images.

Affected packageAffected versionsFixed inImages
linuxdeb6.1.27-1, 6.1.37-1, 6.1.38-4, 6.1.52-1+14 more6.1.129-1116
OSV records
DEBIAN-CVE-2025-21794

Charts affected

118 by stars
ChartLatestAffected imagesRadar Score
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
linux@6.1.123-1
6.1.129-1

Open the chart page →

64,728
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
linux@6.1.76-1
6.1.129-1

Open the chart page →

90,433
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
linux@6.1.106-3
6.1.129-1

Open the chart page →

79,446
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
linux@6.1.52-1
6.1.129-1

Open the chart page →

104,791
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
linux@6.1.124-1
6.1.129-1

Open the chart page →

66,671
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
linux@6.1.85-1
6.1.129-1

Open the chart page →

86,137
icinga2svtech-public-helm-charts1.0.01 of 4See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
linux@6.1.67-1
6.1.129-1

Open the chart page →

83,062
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
linux@6.1.76-1
6.1.129-1

Open the chart page →

84,631
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
linux@6.1.106-3
6.1.129-1

Open the chart page →

78,300
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
linux@6.1.115-1
6.1.129-1

Open the chart page →

75,471
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
linux@6.1.76-1
6.1.129-1

Open the chart page →

108,485
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
linux@6.1.76-1
6.1.129-1

Open the chart page →

108,010
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
linux@6.1.76-1
6.1.129-1

Open the chart page →

108,512
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
linux@6.1.69-1
6.1.129-1

Open the chart page →

96,471
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
linux@6.1.38-4
6.1.129-1

Open the chart page →

97,326
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
linux@6.1.124-1
6.1.129-1

Open the chart page →

70,771
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
linux@6.1.85-1
6.1.129-1

Open the chart page →

79,276
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-21794.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
linux@6.1.27-1
6.1.129-1

Open the chart page →

95,117

Container images carrying it

116 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.129-1
6
frinx/resource-manager:6.1.09cd0147a09bd
linux@6.1.76-1
6.1.129-1
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
linux@6.1.27-1
6.1.129-1
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
linux@6.1.27-1
6.1.129-1
2
library/phpmyadmin:5.2.16e75aa8f767c
linux@6.1.123-1
6.1.129-1
2
library/python:3.7eedf63967cdb
linux@6.1.52-1
6.1.129-1
2
library/redis:7.2.3a7cee7c8178f
linux@6.1.67-1
6.1.129-1
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
linux@6.1.55-1
6.1.129-1
2
openbas/caldera-server:5.1.0a277796d9724
linux@6.1.128-1
6.1.129-1
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
linux@6.1.90-1
6.1.129-1
2
uffizzi/controller:latest0344805f267b
linux@6.1.69-1
6.1.129-1
2
vdiogov/glpi-conteiner:latest6945f84f0058
linux@6.1.99-1
6.1.129-1
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
linux@6.1.99-1
6.1.129-1
2
aboogie/login_test_backend:new9c41a4483ac8
linux@6.1.99-1
6.1.129-1
1
akaunting/akaunting:3.0.1552811b36ec3a
linux@6.1.37-1
6.1.129-1
1
allegroai/clearml:2.0.0-613713ae38f7daf
linux@6.1.119-1
6.1.129-1
1
apache/superset:4.0.1ab9467fd712c
linux@6.1.85-1
6.1.129-1
1
aristidetm/basic-notebook:3.6.5469dbc951224
linux@6.1.90-1
6.1.129-1
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
linux@6.1.99-1
6.1.129-1
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
linux@6.1.90-1
6.1.129-1
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
linux@6.1.76-1
6.1.129-1
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
linux@6.1.85-1
6.1.129-1
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
linux@6.1.52-1
6.1.129-1
1
avinash263/pyredis263:latestaa2b8727f1a6
linux@6.1.27-1
6.1.129-1
1
baserow/backend:1.31.1e0b3c8130b91
linux@6.1.128-1
6.1.129-1
1
baserow/baserow:1.30.1df0c42eb67e8
linux@6.1.119-1
6.1.129-1
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
linux@6.1.76-1
6.1.129-1
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
linux@6.1.124-1
6.1.129-1
1
bmeares/meerschaum:2.8.48e9c5bacaa82
linux@6.1.124-1
6.1.129-1
1
bnjbvr/kresus:0.22.137e216b182c8
linux@6.1.119-1
6.1.129-1
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
linux@6.1.115-1
6.1.129-1
1
castopod/castopod:1.12.101fd37280cbb2
linux@6.1.106-3
6.1.129-1
1
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
linux@6.1.69-1
6.1.129-1
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
linux@6.1.76-1
6.1.129-1
1
ddosify/selfhosted_backend:3.2.93c11e3182652
linux@6.1.85-1
6.1.129-1
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
linux@6.1.76-1
6.1.129-1
1
dragonflyoss/client:v0.1.82edf3e921f4e0
linux@6.1.90-1
6.1.129-1
1
felipecs8/app-db-connection-test:v129e06c9c6385
linux@6.1.119-1
6.1.129-1
1
firefart/requesttracker:5.0.40d6249906d8c
linux@6.1.55-1
6.1.129-1
1
gulacedia/web-dvwa-new:v367b467d961ca
linux@6.1.27-1
6.1.129-1
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
linux@6.1.52-1
6.1.129-1
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
linux@6.1.27-1
6.1.129-1
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
linux@6.1.38-4
6.1.129-1
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
linux@6.1.52-1
6.1.129-1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
linux@6.1.69-1
6.1.129-1
1
knspar/phronetis-operator:0.1.60c4f0543ee58
linux@6.1.90-1
6.1.129-1
1
library/haproxy:2.9.6fc5748ff7c72
linux@6.1.76-1
6.1.129-1
1
library/matomo:5.1.2-apache2415789e1602
linux@6.1.119-1
6.1.129-1
1
library/python:3.8d41127070014
linux@6.1.106-3
6.1.129-1
1
library/wordpress:6.4.3-apache8ae66efb09a2
linux@6.1.76-1
6.1.129-1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.