StackRadar

CVE-2025-2361

Medium

Advisory

Published 17 Mar 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
121
of 17,781 indexed, latest versions
Container images
130
deployed by those charts
Fix available
1 of 1
affected package

mercurial - security update

Carried by container images the latest versions of 121 of 17,781 indexed charts deploy, on 130 images.

Affected packageAffected versionsFixed inImages
mercurialdeb5.6.1-4, 6.3.2-1, 6.7.2-1ubuntu2.25.6.1-4+deb11u1, 6.3.2-1+deb12u1130
OSV records
DEBIAN-CVE-2025-2361UBUNTU-CVE-2025-2361DLA-4094-1
Also known as
DSA-5883-1

Charts affected

121 by stars
ChartLatestAffected imagesRadar Score
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

32,902
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

16,620
seataseataVerified publisher0.1.01 of 1See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
seataio/seata-server:latest703b5de7f1a6
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

4,245
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

7,574
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

11,888
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

20,223
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

6,779
student-producerstudentproducerVerified publisher2.0.01 of 1See more

student-producer studentproducer 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
aroralalit/student-producer:1.0.02a094f597b36
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

3,018
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

13,390
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

11,199
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

11,648
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

28,814
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

28,385
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

28,858
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

17,323
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

14,358
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

3,392
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

9,397
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

1,838

Container images carrying it

130 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
macropower/twitch_predictions_recorder:v0.21e9c4fb89787
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
maissacrement/pock8snodejs:0.0.16da0db1159da
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
mnaggar3396/python-app:latest371d8ed84b15
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
muhammedgamal/fp23:latest74b4cd69b6fa
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
ntakashi/gitana:1.4.04171ec641120
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
opea/codegen-ui:1.02bee4eb66f3e
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
opea/codetrans-ui:1.03ef121f34610
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
opea/docsum-ui:1.07f854e9bffaf
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
phntom/email-manager:0.1.22d8e2a9f2f085
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
phntom/external-dns-host-network:0.0.123adadbac8443
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
robmarkcole/deepstack-ui:latest410275726459
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
robotshop/rs-dispatch:latestde81f1d07b02
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
robotshop/rs-payment:latest774b52c6180d
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
robotshop/rs-shipping:latest89753ab48919
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
seataio/seata-server:latest703b5de7f1a6
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
socialmediamacroscope/classification_split:0.1.24bfda60829fe
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
socialmediamacroscope/classification_train:0.1.207477060bba8
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
socialmediamacroscope/clowder_list:0.1.051cb17626519
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
stratospire/activityrelay:0.2.3a4c34cb01117
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
substratusai/verba:v0.4.0-baseURL261695be635eb
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
teknas09/bird-pod:latest12a1fa85c4aa
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
theradius/loggia:0.463ba348546ec
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
thongngo3301/stakefish:latesta341af5976e3
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
tksky1/cubeuniverse:0.1alphaec7b889f380f
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
vlebediantsev/config-server-another:lateste7f20450d2ae
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
vlebediantsev/logic-ms:latestdf8bf38c535b
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
vlebediantsev/notes-admin-front:latest007c6670ff48
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
vlebediantsev/notes-project-front:latest945675fd2636
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
vlebediantsev/registration-ms-final:latest427af418b75e
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
mercurial@6.3.2-1
6.3.2-1+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.