StackRadar

CVE-2025-25186

Medium

Advisory

Published 10 Feb 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
10
of 17,781 indexed, latest versions
Container images
9
deployed by those charts
Fix available
1 of 2
affected packages

Possible DoS by memory exhaustion in net-imap

Carried by container images the latest versions of 10 of 17,781 indexed charts deploy, on 9 images.

Affected packageAffected versionsFixed inImages
net-imapgem0.3.4, 0.3.4.1, 0.3.6, 0.3.7+2 more0.3.8, 0.4.19, 0.5.68
ruby3.1deb3.1.2-7+deb12u1no fix listed1
OSV records
DEBIAN-CVE-2025-25186GHSA-7fc5-f82f-cx69

Charts affected

10 by stars
ChartLatestAffected imagesRadar Score
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2025-25186.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
net-imap@0.3.4
0.3.8

Open the chart page →

5,056
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2025-25186.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
net-imap@0.3.7
0.3.8

Open the chart page →

5,940
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-25186.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
net-imap@0.3.4.1
0.3.8

Open the chart page →

5,886
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2025-25186.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
net-imap@0.4.9.1
0.4.19

Open the chart page →

14,130
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-25186.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
ruby3.1@3.1.2-7+deb12u1
no fix listed

Open the chart page →

9,077
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-25186.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
net-imap@0.3.6
0.3.8

Open the chart page →

49,025
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2025-25186.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
net-imap@0.3.7
0.3.8

Open the chart page →

5,940
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-25186.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
net-imap@0.3.4
0.3.8

Open the chart page →

6,026
fluentd-operatorstatcan0.5.11 of 1See more

fluentd-operator statcan 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-25186.

Container imageDigestPackageFixed in
vmware/kube-fluentd-operator:latestf028c138a5f4
net-imap@0.3.7
0.3.8

Open the chart page →

1,955
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-25186.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
net-imap@0.5.4
0.5.6

Open the chart page →

10,795

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
chatwoot/chatwoot:v3.1.0d530ab8c1753
net-imap@0.3.7
0.3.8
2
jordan/icinga2:latestf75025fe8ea8
ruby3.1@3.1.2-7+deb12u1
no fix listed
1
vmware/kube-fluentd-operator:latestf028c138a5f4
net-imap@0.3.7
0.3.8
1
ghcr.io/caninehq/canine:latesta058034ca006
net-imap@0.4.9.1
0.4.19
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
net-imap@0.3.4
0.3.8
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
net-imap@0.5.4
0.5.6
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
net-imap@0.3.6
0.3.8
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
net-imap@0.3.4
0.3.8
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
net-imap@0.3.4.1
0.3.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.