StackRadar

CVE-2025-25724

High

Advisory

Published 2 Mar 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
75
of 17,781 indexed, latest versions
Container images
90
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: libarchive security update

Carried by container images the latest versions of 75 of 17,781 indexed charts deploy, on 90 images.

Affected packageAffected versionsFixed inImages
libarchivedeb3.1.2-11ubuntu0.16.04.3, 3.4.0-2ubuntu1, 3.4.0-2ubuntu1.2, 3.6.0-1ubuntu1+8 more3.1.2-11ubuntu0.16.04.8+esm2, 3.4.0-2ubuntu1.5, 3.6.0-1ubuntu1.4, 3.7.2-2ubuntu0.436
libarchiveapk3.7.6-r0, 3.7.7-r03.7.9-r02
libarchiverpm3.5.3-3.el9, 3.5.3-4.el9, 3.5.3-4.el9.0.10:3.5.3-5.el9_652
OSV records
ALPINE-CVE-2025-25724DEBIAN-CVE-2025-25724RHSA-2025:9431RLSA-2025:9431UBUNTU-CVE-2025-25724
Also known as
RHSA-2026:24383, USN-7454-1, USN-8147-1

Charts affected

75 by stars
ChartLatestAffected imagesRadar Score
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

2,507
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
libarchive@3.7.4-4
no fix listed

Open the chart page →

11,950
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5

Open the chart page →

22,658
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

4,626
bpjstk-serviceopenshift1.0.02 of 6See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
andrianrf/iso-server:latest7da47f525c7d
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

34,671
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

18,922
exporteropenshift1.0.472 of 3See more

exporter openshift 1.0.47

2 of the 3 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

13,000
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

8,599
openshift-integration-operatoropenshift-integration-operatorVerified publisher0.8.21 of 2See more

openshift-integration-operator openshift-integration-operator 0.8.2

1 of the 2 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

2,045
pumperlypumperlyVerified publisher0.1.21 of 3See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
postgis/postgis:17-3.4-alpine5a1dbedac34e
libarchive@3.7.6-r0
3.7.9-r0

Open the chart page →

2,854
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

21,211
kubecostradar-baseVerified publisher1.0.02 of 7See more

kubecost radar-base 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

9,355
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

4,219
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

1,951
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
libarchive@3.7.4-4
no fix listed

Open the chart page →

10,605
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
libarchive@3.7.7-r0
3.7.9-r0

Open the chart page →

2,817
shopwareshopware-storeVerified publisher2.1.11 of 5See more

shopware shopware-store 2.1.1

1 of the 5 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

4,876
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

5,201
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

3,014
cost-analyzersoftonic2.5.52 of 6See more

cost-analyzer softonic 2.5.5

2 of the 6 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6

Open the chart page →

7,901
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
libarchive@3.7.4-4+deb13u1
no fix listed

Open the chart page →

66,266
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5

Open the chart page →

10,006
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
libarchive@3.7.2-2
3.7.2-2ubuntu0.4

Open the chart page →

45,239
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-25724.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5

Open the chart page →

9,130

Container images carrying it

90 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
libarchive@3.7.4-4+deb13u1
no fix listed
7
apache/tika:2.9.2.1-fullae0b86d3c4d0
libarchive@3.7.2-2
3.7.2-2ubuntu0.4
2
infisical/infisical:latest:v0.165.602082bf13163
libarchive@3.7.4-4+deb13u1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libarchive@3.4.0-2ubuntu1
3.4.0-2ubuntu1.5
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5
2
quay.io/strimzi/operator:0.46.0ac434a48ac2b
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
2
andrianrf/backoffice-be:latest6036614803d4
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
andrianrf/iso-server:latest7da47f525c7d
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
cleveritcz/opencve:1.5.0c75c1636e0b7
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
codetogether/codetogether:latest4348c8a38752
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
fluent/fluent-bit:4.0-debuge76397ef3983
libarchive@3.6.2-1+deb12u3
no fix listed
1
foundationdb/fdb-kubernetes-operator:v2.3.07d7b6985291e
libarchive@3.5.3-4.el9.0.1
0:3.5.3-5.el9_6
1
haveagitgat/tdarr:2.00.181256348872ce
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
libarchive@3.4.0-2ubuntu1
3.4.0-2ubuntu1.5
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
libarchive@3.1.2-11ubuntu0.16.04.3
3.1.2-11ubuntu0.16.04.8+esm2
1
jordan/icinga2:latestf75025fe8ea8
libarchive@3.6.2-1+deb12u4
no fix listed
1
localstack/localstack:3.19d278167f2b7
libarchive@3.6.2-1
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5
1
mediagis/nominatim:4.2d0eae7b51374
libarchive@3.6.0-1ubuntu1
3.6.0-1ubuntu1.4
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
libarchive@3.7.4-4+deb13u1
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5
1
openproject/openproject:17.8.0-slim48952034215d
libarchive@3.7.4-4+deb13u1
no fix listed
1
owncloud/server:10.15.051d9b74fc2a8
libarchive@3.4.0-2ubuntu1.2
3.4.0-2ubuntu1.5
1
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
photoprism/photoprism:240711-cefc6fd632ca74
libarchive@3.7.2-2ubuntu0.1
3.7.2-2ubuntu0.4
1
postgis/postgis:17-3.4-alpine5a1dbedac34e
libarchive@3.7.6-r0
3.7.9-r0
1
rm3l/dev-feed-api:latest9a7f732245a3
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
rspamd/rspamd:4.1.4e870599c970d
libarchive@3.7.4-4+deb13u1
no fix listed
1
saidsef/scapy-containerised:v2025.02f17f7c435891
libarchive@3.7.7-r0
3.7.9-r0
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libarchive@3.6.2-1
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
libarchive@3.7.4-4+deb13u1
no fix listed
1
trinodb/trino:45038c6f24ab1a4
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
libarchive@3.5.3-4.el9
0:3.5.3-5.el9_6
1
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
libarchive@3.6.2-1+deb12u4
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
libarchive@3.6.2-1+deb12u1
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
libarchive@3.7.4-4+deb13u1
no fix listed
1
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
libarchive@3.5.3-3.el9
0:3.5.3-5.el9_6
1
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
libarchive@3.5.3-3.el9
0:3.5.3-5.el9_6
1
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
libarchive@3.5.3-3.el9
0:3.5.3-5.el9_6
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
libarchive@3.5.3-3.el9
0:3.5.3-5.el9_6
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
libarchive@3.5.3-3.el9
0:3.5.3-5.el9_6
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
libarchive@3.5.3-3.el9
0:3.5.3-5.el9_6
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
libarchive@3.5.3-3.el9
0:3.5.3-5.el9_6
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
libarchive@3.5.3-3.el9
0:3.5.3-5.el9_6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.