StackRadar

CVE-2025-24813

CriticalKEV

Advisory

Published 10 Mar 2025In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
10.0
base score, highest
EPSS
0.999
100th percentile
CISA KEV
Listed
since 1 Apr 2025
Charts affected
242
of 17,781 indexed, latest versions
Container images
198
deployed by those charts
Fix available
3 of 4
affected packages

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Carried by container images the latest versions of 242 of 17,781 indexed charts deploy, on 198 images.

Affected packageAffected versionsFixed inImages
Apache Tomcatbitnami9.0.809.0.991
tomcatbitnami9.0.80-19.0.991
tomcat-embed-coremaven8.5.4, 8.5.11, 8.5.14, 8.5.15+64 more9.0.99, 10.1.35197
tomcat-catalinamaven8.5.38, 8.5.82no fix listed2
OSV records
BIT-tomcat-2025-24813GHSA-83qj-6fr2-vhqg

Charts affected

242 by stars
ChartLatestAffected imagesRadar Score
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
reportportalreportportal5.7.23 of 8See more

reportportal reportportal 5.7.2

3 of the 8 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
tomcat-embed-core@9.0.37
9.0.99
reportportal/service-authorization:5.7.09e73114dbd15
tomcat-embed-core@9.0.37
9.0.99
reportportal/service-jobs:5.7.2dc166c58485a
tomcat-embed-core@9.0.43
9.0.99

Open the chart page →

25,737
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
nacossaber0.1.111 of 1See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
tomcat-embed-core@9.0.38
9.0.99

Open the chart page →

3,978
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
seataseataVerified publisher0.1.01 of 1See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
seataio/seata-server:latest703b5de7f1a6
tomcat-embed-core@9.0.83
9.0.99

Open the chart page →

4,245
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
tomcat-embed-core@8.5.34
no fix listed

Open the chart page →

8,098
shenyushenyu0.6.31 of 2See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
tomcat-embed-core@9.0.63
9.0.99

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
tomcat-embed-core@9.0.29
9.0.99

Open the chart page →

12,513
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
hetzner-iroboslamdev0.0.51 of 1See more

hetzner-irobo slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
slamdev/hetzner-irobo:0.0.13ca20c184c55
tomcat-embed-core@9.0.53
9.0.99

Open the chart page →

3,754
smtp-fake-serversomeblackmagic0.1.01 of 1See more

smtp-fake-server someblackmagic 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
someblackmagic/smtp-fake-server:latest0d63ba37a560
tomcat-embed-core@9.0.41
9.0.99

Open the chart page →

4,278
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
umsappstacksimplifyVerified publisher1.0.01 of 3See more

umsapp stacksimplify 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
tomcat-embed-core@9.0.21
9.0.99

Open the chart page →

6,101
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
tomcat-embed-core@9.0.65
9.0.99

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
tomcat-embed-core@9.0.65
9.0.99

Open the chart page →

11,554
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
tomcat-embed-core@8.5.23
no fix listed

Open the chart page →

11,841
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
tomcat-embed-core@9.0.58
9.0.99

Open the chart page →

14,493
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.53 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

3 of the 6 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
fimperato/detected-info-notification:1.2.6-RELEASE6441f6545613
tomcat-embed-core@9.0.69
9.0.99
fimperato/detected-info-store:1.1.0-RELEASEe32920eedd3a
tomcat-embed-core@9.0.69
9.0.99
fimperato/static-src-people-detection:1.1.5-RELEASEc0cfaca070d9
tomcat-embed-core@9.0.69
9.0.99

Open the chart page →

13,646
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
tomcat-embed-core@8.5.11
no fix listed

Open the chart page →

8,554
student-producerstudentproducerVerified publisher2.0.01 of 1See more

student-producer studentproducer 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
aroralalit/student-producer:1.0.02a094f597b36
tomcat-embed-core@9.0.75
9.0.99

Open the chart page →

3,018
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
shenyutest-helm2.4.211 of 2See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
tomcat-embed-core@9.0.29
9.0.99

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
tomcat-embed-core@9.0.63
9.0.99
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
tomcat-embed-core@9.0.63
9.0.99
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
tomcat-embed-core@9.0.63
9.0.99
thingsboard/tb-node:3.4.1645f43b688f7
tomcat-embed-core@9.0.63
9.0.99

Open the chart page →

25,394
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
tomcat-embed-core@10.1.15
10.1.35

Open the chart page →

3,221
configservertwomartensVerified publisher0.2.01 of 1See more

configserver twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
2martens/configserver:latestbf1cdb80239d
tomcat-embed-core@10.1.28
10.1.35

Open the chart page →

2,144
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
tomcat-embed-core@9.0.50
9.0.99

Open the chart page →

7,885
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
tomcat-embed-core@8.5.46
no fix listed

Open the chart page →

9,397
webapp-db-javawebapp-db-java-repo0.1.01 of 2See more

webapp-db-java webapp-db-java-repo 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
arturisimo/webapp-db-java:v2c95524e90b57
tomcat-embed-core@9.0.56
9.0.99

Open the chart page →

2,566
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
tomcat-embed-core@8.5.41
no fix listed

Open the chart page →

5,460
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
tomcat-embed-core@10.1.10
10.1.35

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
zahoriaut/zahori-server:0.1.17b2de13916f3e
tomcat-embed-core@9.0.71
9.0.99

Open the chart page →

5,846

Container images carrying it

198 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
beastob/url-shortener:1.0.299a49885ab33
tomcat-embed-core@9.0.53
9.0.99
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
tomcat-embed-core@9.0.36
9.0.99
1
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
tomcat-embed-core@9.0.53
9.0.99
1
choerodon/event-store-service:0.8.03c94c97f6f69
tomcat-embed-core@8.5.14
no fix listed
1
cnieg/gantt:1.1.2d4b478d76f2a
tomcat-embed-core@9.0.65
9.0.99
1
dannielkil/book-backend:lateste3b479a55a69
tomcat-embed-core@9.0.65
9.0.99
1
dellcloud/category:distributed02fc234353a9
tomcat-embed-core@9.0.36
9.0.99
1
dellcloud/pages:1.04d2eb25b9225
tomcat-embed-core@9.0.43
9.0.99
1
dniel/forwardauth:latestf67129ea1c64
tomcat-embed-core@9.0.21
9.0.99
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
tomcat-embed-core@10.1.19
10.1.35
1
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
tomcat-embed-core@10.1.19
10.1.35
1
elastictranscoder/media:627e21dc963ab3858c6b
tomcat-embed-core@9.0.46
9.0.99
1
elastictranscoder/media-storage:f6d861a026208b8c2359
tomcat-embed-core@9.0.46
9.0.99
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
tomcat-embed-core@9.0.46
9.0.99
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
tomcat-embed-core@9.0.46
9.0.99
1
fimperato/detected-info-notification:1.2.6-RELEASE6441f6545613
tomcat-embed-core@9.0.69
9.0.99
1
fimperato/detected-info-store:1.1.0-RELEASEe32920eedd3a
tomcat-embed-core@9.0.69
9.0.99
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
tomcat-embed-core@9.0.38
9.0.99
1
fimperato/static-src-people-detection:1.1.5-RELEASEc0cfaca070d9
tomcat-embed-core@9.0.69
9.0.99
1
flofree/base-project:2.1.16b6486c5f81e
tomcat-embed-core@9.0.78
9.0.99
1
flowable/flowable-rest:7.1.0b7ae287502cd
tomcat-embed-core@10.1.30
10.1.35
1
folioci/mod-ldp:latestb55696fd9065
tomcat-embed-core@10.1.19
10.1.35
1
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
tomcat-embed-core@10.1.15
10.1.35
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
tomcat-embed-core@9.0.41
9.0.99
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
tomcat-embed-core@9.0.37
9.0.99
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
tomcat-embed-core@9.0.37
9.0.99
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
tomcat-embed-core@9.0.37
9.0.99
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
tomcat-embed-core@9.0.37
9.0.99
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
tomcat-embed-core@9.0.37
9.0.99
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
tomcat-embed-core@10.1.31
10.1.35
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
tomcat-embed-core@10.1.31
10.1.35
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
tomcat-embed-core@10.1.31
10.1.35
1
gotson/komga:0.99.49b15ea6bfc30
tomcat-embed-core@9.0.46
9.0.99
1
gotson/komga:1.22.0ba892ab3e082
tomcat-embed-core@10.1.33
10.1.35
1
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
tomcat-embed-core@9.0.68
9.0.99
1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
tomcat-embed-core@9.0.68
9.0.99
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
tomcat-embed-core@9.0.60
9.0.99
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
tomcat-embed-core@9.0.60
9.0.99
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
tomcat-embed-core@9.0.60
9.0.99
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
tomcat-embed-core@9.0.60
9.0.99
1
gurolakman/ussigw-core:1.0.48739565c3ea2
tomcat-embed-core@9.0.60
9.0.99
1
housewrecker/gaps:latestf417dd0a7547
tomcat-embed-core@9.0.60
9.0.99
1
huajuan6848/env-view-server:0.0.1-SNAPSHOTa303f3d9f6e0
tomcat-embed-core@10.1.11
10.1.35
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
tomcat-embed-core@8.5.15
no fix listed
1
ibmcom/microclimate-theia:lateste17bdccc5030
tomcat-embed-core@8.5.15
no fix listed
1
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
tomcat-embed-core@10.1.19
10.1.35
1
j4ckhunter/consumer:1.00bb7a429e3e75
tomcat-embed-core@9.0.65
9.0.99
1
j4ckhunter/producer:1.006ba447609b12
tomcat-embed-core@9.0.65
9.0.99
1
jacobalberty/unifi:v7.1.664a3616625dda
tomcat-embed-core@9.0.58
9.0.99
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
tomcat-embed-core@9.0.65
9.0.99
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.