StackRadar

CVE-2025-23419

Medium

Advisory

Published 5 Feb 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.028
86th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
34
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
5 of 5
affected packages

TLS Session Resumption Vulnerability

Carried by container images the latest versions of 34 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
nginxapk1.26.2-r0, 1.26.2-r1, 1.26.2-r41.26.3-r014
nginxdeb1.4.6-1ubuntu3.8ppa1, 1.18.0-0ubuntu1.2, 1.18.0-0ubuntu1.3, 1.18.0-0ubuntu1.4+4 more1.18.0-0ubuntu1.7, 1.18.0-6ubuntu14.6, 1.22.1-9+deb12u1, 1.24.0-2ubuntu7.312
nginxbitnami1.25.5-0, 1.27.1-21.26.32
NGINX Open Sourcebitnami1.25.5-01.26.31
nginxrpm1:1.20.1-13.el9, 1:1.22.1-5.module+el9.3.0.z+20438+032561a0, 1:1.22.1-8.module+el9.5.0+22953+b175c265.1, 1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3+1 more2:1.20.1-22.el98
OSV records
ALPINE-CVE-2025-23419BIT-nginx-2025-23419DEBIAN-CVE-2025-23419RHSA-2025:7331UBUNTU-CVE-2025-23419
Also known as
BIT-nginx-gateway-2025-23419, USN-7285-1, USN-7285-2

Charts affected

34 by stars
ChartLatestAffected imagesRadar Score
k10kastenVerified publisher9.0.51 of 23See more

k10 kasten 9.0.5

1 of the 23 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
gcr.io/kasten-images/frontend:9.0.54b36f413cabb
nginx@1:1.22.1-8.module+el9.5.0+22953+b175c265.1
2:1.20.1-22.el9

Open the chart page →

1,880
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
nginx@1.22.1-9
1.22.1-9+deb12u1

Open the chart page →

10,622
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
nginx@1.26.2-r4
1.26.3-r0

Open the chart page →

2,811
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
nginx@1:1.26.1-2.el9.ngx
2:1.20.1-22.el9

Open the chart page →

7,450
zabbix-server-mysqlfermosit3.0.21 of 4See more

zabbix-server-mysql fermosit 3.0.2

1 of the 4 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
nginx@1.24.0-2ubuntu7.1
1.24.0-2ubuntu7.3

Open the chart page →

12,840
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
nginx@1.18.0-0ubuntu1.2
1.18.0-0ubuntu1.7

Open the chart page →

12,422
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift:v0.3.08fbbcd23b902
nginx@1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3
2:1.20.1-22.el9

Open the chart page →

2,902
deploy-uiappscodeVerified publisher2026.9.111 of 1See more

deploy-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
nginx@1.26.2-r1
1.26.3-r0

Open the chart page →

720
marketplace-uiappscodeVerified publisher2026.9.111 of 1See more

marketplace-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
nginx@1.26.2-r1
1.26.3-r0

Open the chart page →

720
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
galaxy/galaxy-stable:v18.018e577a626dfd
nginx@1.4.6-1ubuntu3.8ppa1
no fix listed

Open the chart page →

70,895
piwigocronce0.0.61 of 1See more

piwigo cronce 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
mathieuruellan/piwigo:latest04572c8a1b04
nginx@1.26.2-r0
1.26.3-r0

Open the chart page →

1,084
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
nginx@1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3
2:1.20.1-22.el9

Open the chart page →

1,885
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
nginx@1.22.1-9
1.22.1-9+deb12u1

Open the chart page →

14,627
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
nginx@1:1.20.1-13.el9
2:1.20.1-22.el9

Open the chart page →

55,666
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
nginx@1.18.0-0ubuntu1.4
1.18.0-0ubuntu1.7

Open the chart page →

25,122
dump1090fnzv0.2.81 of 1See more

dump1090 fnzv 0.2.8

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
fnzv/dump1090:latestb3079b95c336
nginx@1.18.0-6ubuntu14.4
1.18.0-6ubuntu14.6

Open the chart page →

4,077
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
nginx@1.18.0-0ubuntu1.2
1.18.0-0ubuntu1.7

Open the chart page →

24,293
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
bitnamilegacy/nginx:1.27.1934d1acd5ca8
nginx@1.27.1-2
1.26.3

Open the chart page →

12,105
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
nginx@1.18.0-0ubuntu1.3
1.18.0-0ubuntu1.7

Open the chart page →

11,069
wjh-rechnerit-at-mOfficialVerified publisher1.0.41 of 1See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
nginx@1:1.22.1-5.module+el9.3.0.z+20438+032561a0
2:1.20.1-22.el9

Open the chart page →

3,460
webdavlinuxoid690.1.01 of 1See more

webdav linuxoid69 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
nginx@1.26.2-r0
1.26.3-r0

Open the chart page →

1,081
neurofaceneurofaceVerified publisher1.4.21 of 3See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
nginx@1:1.22.1-8.module+el9.5.0+22953+b175c265.1
2:1.20.1-22.el9

Open the chart page →

7,310
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
nginx@1.18.0-0ubuntu1.3
1.18.0-0ubuntu1.7

Open the chart page →

22,084
k8s-node-image9-1-24pnnl-miscscripts0.2.1492 of 2See more

k8s-node-image9-1-24 pnnl-miscscripts 0.2.149

2 of the 2 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
nginx@1.26.2-r1
1.26.3-r0
pnnlmiscscripts/k8s-node-image9:1.24.17-nginx-882c8dc938b2f9
nginx@1.26.2-r1
1.26.3-r0

Open the chart page →

1,491
k8s-node-image9-1-25pnnl-miscscripts0.2.1052 of 2See more

k8s-node-image9-1-25 pnnl-miscscripts 0.2.105

2 of the 2 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
nginx@1.26.2-r1
1.26.3-r0
pnnlmiscscripts/k8s-node-image9:1.25.16-nginx-772c202c43c0aa
nginx@1.26.2-r1
1.26.3-r0

Open the chart page →

1,491
k8s-node-image9-1-26pnnl-miscscripts0.2.922 of 2See more

k8s-node-image9-1-26 pnnl-miscscripts 0.2.92

2 of the 2 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
nginx@1.26.2-r1
1.26.3-r0
pnnlmiscscripts/k8s-node-image9:1.26.15-nginx-579785e5b82334
nginx@1.26.2-r1
1.26.3-r0

Open the chart page →

1,491
k8s-node-image9-1-27pnnl-miscscripts0.2.902 of 2See more

k8s-node-image9-1-27 pnnl-miscscripts 0.2.90

2 of the 2 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
nginx@1.26.2-r1
1.26.3-r0
pnnlmiscscripts/k8s-node-image9:1.27.16-nginx-306e1a36d646a3
nginx@1.26.2-r1
1.26.3-r0

Open the chart page →

1,491
k8s-node-image9-1-28pnnl-miscscripts0.2.1022 of 2See more

k8s-node-image9-1-28 pnnl-miscscripts 0.2.102

2 of the 2 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
nginx@1.26.2-r1
1.26.3-r0
pnnlmiscscripts/k8s-node-image9:1.28.15-nginx-72b91d6a46e06
nginx@1.26.2-r1
1.26.3-r0

Open the chart page →

1,491
k8s-node-image9-1-29pnnl-miscscripts0.2.642 of 2See more

k8s-node-image9-1-29 pnnl-miscscripts 0.2.64

2 of the 2 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
nginx@1.26.2-r1
1.26.3-r0
pnnlmiscscripts/k8s-node-image9:1.29.10-nginx-7fcd82530bc8b
nginx@1.26.2-r1
1.26.3-r0

Open the chart page →

1,491
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
nginx@1.25.5-0
NGINX Open Source@1.25.5-0
1.26.3
1.26.3

Open the chart page →

6,282
rhbk-neurofacerhbk-neurofaceVerified publisher1.0.01 of 4See more

rhbk-neuroface rhbk-neuroface 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
nginx@1:1.22.1-8.module+el9.5.0+22953+b175c265.1
2:1.20.1-22.el9

Open the chart page →

3,781
wallosrm3lVerified publisher0.1.01 of 1See more

wallos rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
nginx@1.26.2-r4
1.26.3-r0

Open the chart page →

1,529
tensor_apptensor-app0.2.22 of 3See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
nginx@1.18.0-6ubuntu14
1.18.0-6ubuntu14.6
xeladock/nginx2:latestc259a67b1dff
nginx@1.18.0-6ubuntu14
1.18.0-6ubuntu14.6

Open the chart page →

17,461
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-23419.

Container imageDigestPackageFixed in
carlosmz87/test_helm_frontend:latest79f4b528f42a
nginx@1.26.2-r1
1.26.3-r0

Open the chart page →

11,648

Container images carrying it

36 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
nginx@1.26.2-r1
1.26.3-r0
6
allegroai/clearml:2.0.0-613713ae38f7daf
nginx@1.22.1-9
1.22.1-9+deb12u1
1
bitnamilegacy/nginx:1.27.1934d1acd5ca8
nginx@1.27.1-2
1.26.3
1
carlosmz87/test_helm_frontend:latest79f4b528f42a
nginx@1.26.2-r1
1.26.3-r0
1
codetogether/codetogether:latest4348c8a38752
nginx@1:1.26.1-2.el9.ngx
2:1.20.1-22.el9
1
fnzv/dump1090:latestb3079b95c336
nginx@1.18.0-6ubuntu14.4
1.18.0-6ubuntu14.6
1
galaxy/galaxy-stable:v18.018e577a626dfd
nginx@1.4.6-1ubuntu3.8ppa1
no fix listed
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
nginx@1.18.0-0ubuntu1.3
1.18.0-0ubuntu1.7
1
mathieuruellan/piwigo:latest04572c8a1b04
nginx@1.26.2-r0
1.26.3-r0
1
pnnlmiscscripts/k8s-node-image9:1.28.15-nginx-72b91d6a46e06
nginx@1.26.2-r1
1.26.3-r0
1
pnnlmiscscripts/k8s-node-image9:1.25.16-nginx-772c202c43c0aa
nginx@1.26.2-r1
1.26.3-r0
1
pnnlmiscscripts/k8s-node-image9:1.24.17-nginx-882c8dc938b2f9
nginx@1.26.2-r1
1.26.3-r0
1
pnnlmiscscripts/k8s-node-image9:1.27.16-nginx-306e1a36d646a3
nginx@1.26.2-r1
1.26.3-r0
1
pnnlmiscscripts/k8s-node-image9:1.26.15-nginx-579785e5b82334
nginx@1.26.2-r1
1.26.3-r0
1
pnnlmiscscripts/k8s-node-image9:1.29.10-nginx-7fcd82530bc8b
nginx@1.26.2-r1
1.26.3-r0
1
seafileltd/seafile-mc:9.0.106693911bcc40
nginx@1.18.0-0ubuntu1.4
1.18.0-0ubuntu1.7
1
seafileltd/seafile-mc:9.0.97ac833196f60
nginx@1.18.0-0ubuntu1.3
1.18.0-0ubuntu1.7
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
nginx@1.18.0-0ubuntu1.2
1.18.0-0ubuntu1.7
1
xeladock/mysql_dns:latest4baf531453f1
nginx@1.18.0-6ubuntu14
1.18.0-6ubuntu14.6
1
xeladock/nginx2:latestc259a67b1dff
nginx@1.18.0-6ubuntu14
1.18.0-6ubuntu14.6
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
nginx@1.24.0-2ubuntu7.1
1.24.0-2ubuntu7.3
1
gcr.io/kasten-images/frontend:9.0.54b36f413cabb
nginx@1:1.22.1-8.module+el9.5.0+22953+b175c265.1
2:1.20.1-22.el9
1
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
nginx@1.26.2-r1
1.26.3-r0
1
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
nginx@1.26.2-r1
1.26.3-r0
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
nginx@1:1.20.1-13.el9
2:1.20.1-22.el9
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
nginx@1.26.2-r4
1.26.3-r0
1
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
nginx@1:1.22.1-5.module+el9.3.0.z+20438+032561a0
2:1.20.1-22.el9
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
nginx@1.18.0-0ubuntu1.2
1.18.0-0ubuntu1.7
1
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
nginx@1.26.2-r0
1.26.3-r0
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
nginx@1.26.2-r4
1.26.3-r0
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
nginx@1.22.1-9
1.22.1-9+deb12u1
1
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
nginx@1.25.5-0
NGINX Open Source@1.25.5-0
1.26.3
1.26.3
1
quay.io/everythingascode/apishift:v0.3.08fbbcd23b902
nginx@1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3
2:1.20.1-22.el9
1
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
nginx@1:1.24.0-7.module+el9.8.0+24502+c9b9ab67.3
2:1.20.1-22.el9
1
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
nginx@1:1.22.1-8.module+el9.5.0+22953+b175c265.1
2:1.20.1-22.el9
1
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
nginx@1:1.22.1-8.module+el9.5.0+22953+b175c265.1
2:1.20.1-22.el9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.