StackRadar

CVE-2025-24070

High

Advisory

Published 11 Mar 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
17
of 17,781 indexed, latest versions
Container images
35
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 35 images.

Affected packageAffected versionsFixed inImages
dotnet8.0rpm8.0.12-1.el8_100:8.0.14-1.el8_103
dotnet9.0rpm9.0.1-1.el8_100:9.0.3-1.el8_103
Microsoft.AspNetCore.App.Runtime.linux-x64nuget6.0.4, 6.0.7, 6.0.8, 6.0.11+7 more8.0.1432
dotnet6deb6.0.136-0ubuntu1~22.04.1no fix listed1
OSV records
GHSA-2865-hh9g-w894RHSA-2025:2667RHSA-2025:2670UBUNTU-CVE-2025-24070
Also known as
BIT-aspnet-core-2025-24070

Charts affected

17 by stars
ChartLatestAffected imagesRadar Score
eshoponabpabp-charts1.0.010 of 15See more

eshoponabp abp-charts 1.0.0

10 of the 15 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed

Open the chart page →

19,799
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.14

Open the chart page →

7,190
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.14

Open the chart page →

7,190
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.14

Open the chart page →

30,234
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.14

Open the chart page →

7,190
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.14 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

4 of the 7 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
no fix listed
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
no fix listed
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
no fix listed
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
no fix listed

Open the chart page →

10,091
sftpemberstackVerified publisher5.1.711 of 1See more

sftp emberstack 5.1.71

1 of the 1 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
emberstack/sftp:5.1.711d81a5df909b
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.31
no fix listed

Open the chart page →

680
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.11
no fix listed

Open the chart page →

4,920
archisteamfarmg0dscookie0.3.01 of 2See more

archisteamfarm g0dscookie 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.4
no fix listed

Open the chart page →

966
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.14

Open the chart page →

49,025
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.4
8.0.14

Open the chart page →

3,192
session-scalermiqm0.1.01 of 1See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.3
8.0.14

Open the chart page →

3,179
myweatherhelmmyweather1.3.113 of 7See more

myweatherhelm myweather 1.3.11

3 of the 7 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
hecrom/myweathergatewayservice:1.3.1192e5588d55f3
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.32
no fix listed
hecrom/myweatherprocessingservice:1.3.11203ee6853a27
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.32
no fix listed
hecrom/myweatherservice:1.3.11c502a4b758f0
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.32
no fix listed

Open the chart page →

17,929
nfl-walletnfl-walletVerified publisher0.1.33 of 4See more

nfl-wallet nfl-wallet 0.1.3

3 of the 4 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
dotnet8.0@8.0.12-1.el8_10
dotnet9.0@9.0.1-1.el8_10
0:8.0.14-1.el8_10
0:9.0.3-1.el8_10
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
dotnet8.0@8.0.12-1.el8_10
dotnet9.0@9.0.1-1.el8_10
0:8.0.14-1.el8_10
0:9.0.3-1.el8_10
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
dotnet8.0@8.0.12-1.el8_10
dotnet9.0@9.0.1-1.el8_10
0:8.0.14-1.el8_10
0:9.0.3-1.el8_10

Open the chart page →

13,041
cyclonedxopenshift-bootstrapsVerified publisher1.0.121 of 1See more

cyclonedx openshift-bootstraps 1.0.12

1 of the 1 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed

Open the chart page →

726
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
dotnet6@6.0.136-0ubuntu1~22.04.1
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.13
no fix listed
8.0.14

Open the chart page →

8,619
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2025-24070.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.14
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.14
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.14

Open the chart page →

7,440

Container images carrying it

35 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
no fix listed
1
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
no fix listed
1
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
no fix listed
1
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.7
no fix listed
1
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
emberstack/sftp:5.1.711d81a5df909b
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.31
no fix listed
1
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.14
1
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.14
1
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.14
1
hecrom/myweathergatewayservice:1.3.1192e5588d55f3
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.32
no fix listed
1
hecrom/myweatherprocessingservice:1.3.11203ee6853a27
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.32
no fix listed
1
hecrom/myweatherservice:1.3.11c502a4b758f0
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.32
no fix listed
1
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.3
8.0.14
1
nethermind/nethermind:1.14.615517708c3b6
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.11
no fix listed
1
rnwood/smtp4dev:3.6.1912304153668
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.4
8.0.14
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
dotnet6@6.0.136-0ubuntu1~22.04.1
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.13
no fix listed
8.0.14
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.14
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.14
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.14
1
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.4
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.14
1
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
Microsoft.AspNetCore.App.Runtime.linux-x64@6.0.8
no fix listed
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.14
1
quay.io/maximilianopizarro/nfl-api-bills:1.0.1b596a4687bb0
dotnet8.0@8.0.12-1.el8_10
dotnet9.0@9.0.1-1.el8_10
0:8.0.14-1.el8_10
0:9.0.3-1.el8_10
1
quay.io/maximilianopizarro/nfl-wallet-api-customers:1.0.1d50c80a85b35
dotnet8.0@8.0.12-1.el8_10
dotnet9.0@9.0.1-1.el8_10
0:8.0.14-1.el8_10
0:9.0.3-1.el8_10
1
quay.io/maximilianopizarro/nfl-wallet-api-raiders:1.0.1f9c71dc2bc5f
dotnet8.0@8.0.12-1.el8_10
dotnet9.0@9.0.1-1.el8_10
0:8.0.14-1.el8_10
0:9.0.3-1.el8_10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.