StackRadar

CVE-2025-26519

High

Advisory

Published 14 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,057
of 17,790 indexed, latest versions
Container images
1,128
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,057 of 17,790 indexed charts deploy, on 1,128 images.

Affected packageAffected versionsFixed inImages
musldeb1.2.2-4no fix listed1
muslapk1.2.3-r0, 1.2.3-r1, 1.2.3-r2, 1.2.3-r3+10 more1.2.3-r4, 1.2.3-r6, 1.2.4_git20230717-r5, 1.2.4-r3+2 more1,127
OSV records
ALPINE-CVE-2025-26519UBUNTU-CVE-2025-26519

Charts affected

1,057 by stars
ChartLatestAffected imagesRadar Score
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
musl@1.2.3-r0
1.2.3-r4

Open the chart page →

7,972
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
musl@1.2.3-r5
1.2.3-r6
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
musl@1.2.3-r5
1.2.3-r6

Open the chart page →

5,033
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
musl@1.2.4-r1
1.2.4-r3

Open the chart page →

448
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
musl@1.2.4-r0
1.2.4-r3

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
musl@1.2.3-r4
1.2.3-r6
zahoriaut/zahori-server:0.1.17b2de13916f3e
musl@1.2.3-r4
1.2.3-r6

Open the chart page →

5,847
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,588
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5

Open the chart page →

569

Container images carrying it

1,128 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
jlesage/handbrake:v24.01.20752dcb72bd1
musl@1.2.3-r5
1.2.3-r6
1
jlesage/jdownloader-2:v24.01.1b020fd3132a1
musl@1.2.3-r3
1.2.3-r4
1
josepht05/nodejs-feb24:latest36cb0c618c94
musl@1.2.3-r5
1.2.3-r6
1
josepht05/titajo-docker:v1.0.0d94024965d78
musl@1.2.3-r5
1.2.3-r6
1
juicedata/csi-dashboard:v0.23.03e4daf9626d5
musl@1.2.4-r1
1.2.4-r3
1
jupyterhub/configurable-http-proxy:4.5.67adeeed34a36
musl@1.2.4-r1
1.2.4-r3
1
jupyterhub/configurable-http-proxy:4.5.39e2c0107c7a3
musl@1.2.3-r0
1.2.3-r4
1
jupyterhub/k8s-network-tools:3.0.1-0.dev.git.6287.hbfb05cd691f8f833fc1d
musl@1.2.4-r1
1.2.4-r3
1
justusbunsi/gitea-sonarqube-bot:v0.4.018dd43b470d9
musl@1.2.5-r0
1.2.5-r1
1
kaushaln1/helm_node_app:lateste9f2d5dfdba0
musl@1.2.5-r0
1.2.5-r1
1
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
musl@1.2.5-r8
1.2.5-r9
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
musl@1.2.4-r2
1.2.4-r3
1
kfirfer/king:latestc05d9fc7ae77
musl@1.2.3-r5
1.2.3-r6
1
kfirfer/mysql-client:0.0.4d23d173f333f
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
kfirfer/slackgpt:0.0.15461331bd838e
musl@1.2.4-r2
1.2.4-r3
1
khaliq/drl-exporter:latestf63cf53166f8
musl@1.2.5-r0
1.2.5-r1
1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
musl@1.2.5-r0
1.2.5-r1
1
kiwigrid/k8s-sidecar:1.26.2e271016441af
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ktitilayo2/nodejswebapp:latest8bac28058688
musl@1.2.3-r5
1.2.3-r6
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
musl@1.2.4-r0
1.2.4-r3
1
kubebb/component-store:latestfd8ecbd73213
musl@1.2.4-r0
1.2.4-r3
1
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
musl@1.2.3-r0
1.2.3-r4
1
kubebb/mesh-operator:v5.7.0163ebbfc7a82
musl@1.2.4-r0
1.2.4-r3
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
musl@1.2.4-r1
1.2.4-r3
1
kubegems/alertproxy:v0.4.2eaee03055329
musl@1.2.3-r3
1.2.3-r4
1
kubegems/chatgpt-api-feishubot:latest7c93c84b2055
musl@1.2.3-r4
1.2.3-r6
1
kubegems/chatgpt-api-proxy:latest8905c9dbbb5d
musl@1.2.3-r4
1.2.3-r6
1
kubegems/kubectl:latestc3b4be9a54f5
musl@1.2.3-r4
1.2.3-r6
1
kubesec/kubesec:latest025a365d9f18
musl@1.2.5-r0
1.2.5-r1
1
kubesec/kubesec:v2.13.0c0f3b0673578
musl@1.2.3-r4
1.2.3-r6
1
kubeshop/kusk-gateway-dashboard:v1.2.6ff9b5aa1258d
musl@1.2.3-r0
1.2.3-r4
1
kubeshop/testkube-dashboard:1.16.748958b4126a4
musl@1.2.4-r2
1.2.4-r3
1
kubeshop/tracetest:v1.7.173d7e3a2db43
musl@1.2.5-r0
1.2.5-r1
1
kubesphere/ks-extensions-museum:latest29681958f220
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
kubesphere/kubectl:v1.27.1649b445b1b732
musl@1.2.4-r2
1.2.4-r3
1
kubestar/event-exporter:latest656606941255
musl@1.2.4-r2
1.2.4-r3
1
kubesuite/kubereport:latest0262424ee702
musl@1.2.4-r0
1.2.4-r3
1
kubevious/backend:1.2.22d9ba6eb46b6
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
kubevious/collector:1.2.1f58226f9d84e
musl@1.2.4-r0
1.2.4-r3
1
kubevious/guard:1.2.19bf567704de2
musl@1.2.3-r4
1.2.3-r6
1
kubevious/parser:1.0.151acf1a1f0b47
musl@1.2.3-r0
1.2.3-r4
1
kubevious/parser:1.2.299ae7a5168c2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
kubevious/ui:1.2.16233e84bdd59
musl@1.2.3-r0
1.2.3-r4
1
kubevious/workload-operator:1.0.20b0f4c507eb6
musl@1.2.3-r4
1.2.3-r6
1
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
musl@1.2.4-r2
1.2.4-r3
1
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
musl@1.2.3-r0
1.2.3-r4
1
kusionstack/karpor:v0.6.4b707d3bf0abd
musl@1.2.3-r4
1.2.3-r6
1
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
musl@1.2.3-r5
1.2.3-r6
1
kusionstack/operating:v0.5.0c28bd96b986b
musl@1.2.3-r5
1.2.3-r6
1
kvalitetsit/metadoc-app:maine89e351733ad
musl@1.2.3-r4
1.2.3-r6
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.