StackRadar

CVE-2025-2361

Medium

Advisory

Published 17 Mar 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
121
of 17,781 indexed, latest versions
Container images
130
deployed by those charts
Fix available
1 of 1
affected package

mercurial - security update

Carried by container images the latest versions of 121 of 17,781 indexed charts deploy, on 130 images.

Affected packageAffected versionsFixed inImages
mercurialdeb5.6.1-4, 6.3.2-1, 6.7.2-1ubuntu2.25.6.1-4+deb11u1, 6.3.2-1+deb12u1130
OSV records
DEBIAN-CVE-2025-2361UBUNTU-CVE-2025-2361DLA-4094-1
Also known as
DSA-5883-1

Charts affected

121 by stars
ChartLatestAffected imagesRadar Score
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

32,902
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

16,620
seataseataVerified publisher0.1.01 of 1See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
seataio/seata-server:latest703b5de7f1a6
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

4,245
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

7,574
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

11,888
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

20,223
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

6,779
student-producerstudentproducerVerified publisher2.0.01 of 1See more

student-producer studentproducer 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
aroralalit/student-producer:1.0.02a094f597b36
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

3,018
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

13,390
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

11,199
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

11,648
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

28,814
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

28,385
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

28,858
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

17,323
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
mercurial@6.3.2-1
6.3.2-1+deb12u1

Open the chart page →

14,358
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

3,392
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

9,397
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-2361.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
mercurial@5.6.1-4
5.6.1-4+deb11u1

Open the chart page →

1,838

Container images carrying it

130 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
ghcr.io/0xemma/reddark:main2a115e991894
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
mercurial@6.3.2-1
6.3.2-1+deb12u1
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
mercurial@5.6.1-4
5.6.1-4+deb11u1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
mercurial@6.3.2-1
6.3.2-1+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.