StackRadar

CVE-2025-26519

High

Advisory

Published 14 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,057
of 17,790 indexed, latest versions
Container images
1,128
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,057 of 17,790 indexed charts deploy, on 1,128 images.

Affected packageAffected versionsFixed inImages
musldeb1.2.2-4no fix listed1
muslapk1.2.3-r0, 1.2.3-r1, 1.2.3-r2, 1.2.3-r3+10 more1.2.3-r4, 1.2.3-r6, 1.2.4_git20230717-r5, 1.2.4-r3+2 more1,127
OSV records
ALPINE-CVE-2025-26519UBUNTU-CVE-2025-26519

Charts affected

1,057 by stars
ChartLatestAffected imagesRadar Score
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
musl@1.2.3-r0
1.2.3-r4

Open the chart page →

7,972
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
musl@1.2.3-r5
1.2.3-r6
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
musl@1.2.3-r5
1.2.3-r6

Open the chart page →

5,033
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
musl@1.2.4-r1
1.2.4-r3

Open the chart page →

448
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
musl@1.2.4-r0
1.2.4-r3

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
musl@1.2.3-r4
1.2.3-r6
zahoriaut/zahori-server:0.1.17b2de13916f3e
musl@1.2.3-r4
1.2.3-r6

Open the chart page →

5,847
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,588
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5

Open the chart page →

569

Container images carrying it

1,128 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/python:3.8-alpine3d93b1f77efc
musl@1.2.5-r0
1.2.5-r1
1
library/rabbitmq:3.12-management-alpine0b44fbcc3a4b
musl@1.2.5-r0
1.2.5-r1
1
library/rabbitmq:3.13.1-alpine4bcec9fde55c
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
library/rabbitmq:3.8.34-alpine711d76bc8d98
musl@1.2.3-r0
1.2.3-r4
1
library/rabbitmq:3.12-alpine97907aceae0a
musl@1.2.5-r0
1.2.5-r1
1
library/rabbitmq:3.13.0-alpineb4abd8d41c68
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
library/rabbitmq:3.8-management-alpinec3e526769bfd
musl@1.2.3-r0
1.2.3-r4
1
library/redis:6.0.16-alpine0f0e2fa71653
musl@1.2.3-r4
1.2.3-r6
1
library/redis:alpine3.162700d5097763
musl@1.2.3-r1
1.2.3-r4
1
library/redis:7.2.5-alpine6aaf3f5e6bc8
musl@1.2.5-r0
1.2.5-r1
1
library/redis:7.4.1-alpinec1e88455c852
musl@1.2.5-r0
1.2.5-r1
1
library/redis:7.0-alpinec9d92d840fd0
musl@1.2.5-r0
1.2.5-r1
1
library/traefik:v2.11.00a5157f742d2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
library/traefik:v2.10.11489caffaedb
musl@1.2.3-r5
1.2.3-r6
1
library/traefik:2.10.61957e3314f43
musl@1.2.4-r2
1.2.4-r3
1
library/varnish:7.3-alpine6db2c9e4c2dd
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
library/vault:1.13.3f98ac9dd97b0
musl@1.2.4-r2
1.2.4-r3
1
librenms/librenms:24.11.00920bc9117a8
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
linuxserver/grocy:4.0.1f8f5f96b6ea8
musl@1.2.4-r1
1.2.4-r3
1
linuxserver/healthchecks:2.7.2023033194696dab3c50
musl@1.2.3-r4
1.2.3-r6
1
linuxserver/openssh-server:9.7_p1-r4-ls17153ea39d2485c
musl@1.2.5-r0
1.2.5-r1
1
linuxserver/yq:3.2.26f5b9586a93e
musl@1.2.4-r1
1.2.4-r3
1
lishimeng/hufu:v1.2.13d5752dac834
musl@1.2.3-r4
1.2.3-r6
1
lishimeng/owl-console:v0.11.2c79a67657baf
musl@1.2.3-r4
1.2.3-r6
1
lishimeng/owl-messager:v0.11.23d00485e64dc
musl@1.2.3-r4
1.2.3-r6
1
lishimeng/passport:v0.2.163e7d05ded625
musl@1.2.3-r4
1.2.3-r6
1
lishimeng/passport-profile:v0.2.160970dfe5dc8f
musl@1.2.3-r4
1.2.3-r6
1
lishimeng/tabby:v1.0.48145c3dc83c8
musl@1.2.3-r4
1.2.3-r6
1
lishimeng/tree:v0.2.89b2f8be6c7d3
musl@1.2.3-r4
1.2.3-r6
1
lishimeng/zoo:v0.4.0e0b8d2d8ca28
musl@1.2.3-r4
1.2.3-r6
1
litestream/litestream:0.3c5a1e1b01916
musl@1.2.3-r4
1.2.3-r6
1
liukunup/jmeter:5.59c079617a81b
musl@1.2.3-r0
1.2.3-r4
1
logiqai/flash-discovery:v2.0.3f5b551bca98e
musl@1.2.3-r1
1.2.3-r4
1
lukasreining/open-api-schema-collector:0.1.050e021c42e33
musl@1.2.3-r4
1.2.3-r6
1
maildev/maildev:2.2.1180ef51f65ee
musl@1.2.5-r8
1.2.5-r9
1
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
musl@1.2.4-r1
1.2.4-r3
1
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
musl@1.2.4-r1
1.2.4-r3
1
maksimkavalenka/microservices-learning.song-service:latest2bcdac368b07
musl@1.2.4-r1
1.2.4-r3
1
marnixjanssen/ssl-checker-bot:latest81c97351ea2e
musl@1.2.4-r2
1.2.4-r3
1
marnixjanssen/telgram-pepperbot:latest0a4c9cf1fe5e
musl@1.2.4-r2
1.2.4-r3
1
mathieuruellan/piwigo:latest04572c8a1b04
musl@1.2.5-r0
1.2.5-r1
1
matrixdb/rawfile-csi:v0.2.195b2e38e913d
musl@1.2.3-r0
1.2.3-r4
1
matthiasluedtke/iconserver:v3.16.0661d607b0fbc
musl@1.2.4-r1
1.2.4-r3
1
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
musl@1.2.4-r0
1.2.4-r3
1
metabase/metabase:v0.46.09ebdc664a6b2
musl@1.2.3-r4
1.2.3-r6
1
mher/flower:2.051c3c3db5be3
musl@1.2.4-r1
1.2.4-r3
1
mikefarah/yq:4.45.12c100efaca06
musl@1.2.5-r8
1.2.5-r9
1
mintproject/data-catalog-db:9be70359feabe03ed55bfdbf92c20a7e43ab928b9bf26fedd848
musl@1.2.3-r2
1.2.3-r4
1
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
musl@1.2.4-r0
1.2.4-r3
1
mintproject/mint-ui-lit:246a8771e8c043f8c1840d3c32262d3d6a9a553208c1a13c3397
musl@1.2.3-r1
1.2.3-r4
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.