StackRadarChart IndexLive demo

CVE-2025-24528

High

Advisory

Published 31 Jan 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.1; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,461; of 17,792 indexed, latest versions
Container images: 1,615; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: krb5 security update

Carried by container images the latest versions of 1,461 of 17,792 indexed charts deploy, on 1,615 images.

Affected package	Affected versions	Fixed in	Images
krb5deb	1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+35 more	1.17-6ubuntu4.9, 1.18.3-6+deb11u6, 1.19.2-2ubuntu0.6, 1.20.1-2+deb12u3+1 more	1,349
krb5rpm	1.15.1-37.el7_6, 1.15.1-37.el7_7.2, 1.15.1-46.el7, 1.15.1-50.el7+29 more	0:1.15.1-55.el7_9.4, 0:1.18.2-31.el8_10, 0:1.21.1-6.el9, 1.21.3-2.1	266

OSV records: DEBIAN-CVE-2025-24528 UBUNTU-CVE-2025-24528 RHSA-2025:1352 RHSA-2025:2722 RHSA-2025:7067 RLSA-2025:2722 RLSA-2025:7067 DLA-4065-1 openSUSE-SU-2025:14736-1
Also known as: USN-7314-1

Charts affected

1,461 by stars

Chart

Latest

Affected images

Radar Score

marge-botwiremind

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u3

Open the chart page →

5,566

vaultwardenwitcom-gmbh

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6

Open the chart page →

1,586

wp-gats-helmwordpress-gatsby

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6

Open the chart page →

2,022

playwright-synthetic-monitoringwork-adventure

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.6

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	krb5@1.18.2-14.el8	0:1.18.2-31.el8_10

Open the chart page →

11,622

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u3

Open the chart page →

7,714

xkopsxkops

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3
hamzaarshad10/querypodpy :1.7	154f38e8668e	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3
murtazashah46/helmfile :latest	4d11726cf803	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3

Open the chart page →

13,813

xlinexline

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	krb5@1.20.1-6ubuntu2	1.20.1-6ubuntu2.5

Open the chart page →

2,152

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	krb5@1.18.2-22.el8_7	0:1.18.2-31.el8_10

Open the chart page →

6,017

enterprise-gatewayzeet

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6

Open the chart page →

1,838

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-24528.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	krb5@1.18.2-22.el8_7	0:1.18.2-31.el8_10

Open the chart page →

3,697

Container images carrying it

1,615 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6	1
ghcr.io/rodg/nodecg-base :latest	31be4bf87070	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6	1
ghcr.io/rodg/rtmp-controller :latest	67f99a5beab7	krb5@1.20.1-2	1.20.1-2+deb12u3	1
ghcr.io/savonet/liquidsoap :v2.0.1	9e08148e1055	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3	1
ghcr.io/serenita-org/vero :v0.8.3	e5a7ec714acc	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3	1
ghcr.io/sergelogvinov/keydb :6.3.3	76a19ddc3626	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6	1
ghcr.io/simoncaron/velero-notifications :1.0.0	d058963d4de7	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	krb5@1.17-6ubuntu4.7	1.17-6ubuntu4.9	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	krb5@1.17-6ubuntu4.7	1.17-6ubuntu4.9	1
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u3	1
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	krb5@1.19.2-2ubuntu0.4	1.19.2-2ubuntu0.6	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	krb5@1.20.1-6ubuntu2.2	1.20.1-6ubuntu2.5	1
ghcr.io/volosoft/eshoponabp/app-authserver :1.0.0	22ce496c67d7	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/volosoft/eshoponabp/app-publicweb :1.0.0	7e53010dda55	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/volosoft/eshoponabp/gateway-web :1.0.0	26465a2bf671	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/volosoft/eshoponabp/gateway-web-public :1.0.0	50cab15c80d9	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/volosoft/eshoponabp/service-administration :1.0.0	206a9bee17a8	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/volosoft/eshoponabp/service-basket :1.0.0	dd5ce454072e	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/volosoft/eshoponabp/service-catalog :1.0.0	7ecb00f53d99	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/volosoft/eshoponabp/service-identity :1.0.0	e53bf47b62d0	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/volosoft/eshoponabp/service-ordering :1.0.1	5e836b17337f	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/volosoft/eshoponabp/service-payment :1.0.0	2ca91145099c	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.6	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	krb5@1.19.2-2ubuntu0.3	1.19.2-2ubuntu0.6	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	krb5@1.19.2-2ubuntu0.4	1.19.2-2ubuntu0.6	1
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	krb5@1.20.1-2	1.20.1-2+deb12u3	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	krb5@1.18.3-6+deb11u2	1.18.3-6+deb11u6	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	krb5@1.18.3-6+deb11u1	1.18.3-6+deb11u6	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u3	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u3	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	krb5@1.16-2ubuntu0.2	no fix listed	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3	1
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3	1
ghcr.io/zoriya/kyoo_back :4.7.1	416e980f76a6	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	krb5@1.16-2ubuntu0.4	no fix listed	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	krb5@1.17-6ubuntu4.1	1.17-6ubuntu4.9	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	krb5@1.16-2ubuntu0.4	no fix listed	1
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6	1
public.ecr.aws/jtekt-corporation/annotation-tool :ef974ad9	abd817eb6845	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	krb5@1.20.1-2+deb12u2	1.20.1-2+deb12u3	1
public.ecr.aws/jtekt-corporation/polygonal-annotation-tool :a3fa9360	56efd38500d6	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u6	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	krb5@1.20.1-2+deb12u1	1.20.1-2+deb12u3	1