StackRadar

CVE-2025-26519

High

Advisory

Published 14 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,057
of 17,790 indexed, latest versions
Container images
1,128
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,057 of 17,790 indexed charts deploy, on 1,128 images.

Affected packageAffected versionsFixed inImages
musldeb1.2.2-4no fix listed1
muslapk1.2.3-r0, 1.2.3-r1, 1.2.3-r2, 1.2.3-r3+10 more1.2.3-r4, 1.2.3-r6, 1.2.4_git20230717-r5, 1.2.4-r3+2 more1,127
OSV records
ALPINE-CVE-2025-26519UBUNTU-CVE-2025-26519

Charts affected

1,057 by stars
ChartLatestAffected imagesRadar Score
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
musl@1.2.3-r0
1.2.3-r4

Open the chart page →

7,972
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
musl@1.2.3-r5
1.2.3-r6
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
musl@1.2.3-r5
1.2.3-r6

Open the chart page →

5,033
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
musl@1.2.4-r1
1.2.4-r3

Open the chart page →

448
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
musl@1.2.4-r0
1.2.4-r3

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
musl@1.2.3-r4
1.2.3-r6
zahoriaut/zahori-server:0.1.17b2de13916f3e
musl@1.2.3-r4
1.2.3-r6

Open the chart page →

5,847
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,588
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5

Open the chart page →

569

Container images carrying it

1,128 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
mintproject/model-catalog-explorer:0b2f9f0a9124076aeb492add2f123d0757066f6bdeb80c93b4a9
musl@1.2.3-r1
1.2.3-r4
1
mohameddev006/web-app:v50fbc7360ecf4
musl@1.2.3-r0
1.2.3-r4
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
musl@1.2.5-r0
1.2.5-r1
1
mpopoola1/nodejsapp:latest061fc532de7d
musl@1.2.3-r5
1.2.3-r6
1
muonsoft/openapi-mock:latestc9afe1295484
musl@1.2.3-r4
1.2.3-r6
1
mvisonneau/tailscale:v1.68.1fc45ad8abf10
musl@1.2.5-r0
1.2.5-r1
1
mziyabo/fargate-eks-sidecar-injector:latest3067dce17983
musl@1.2.5-r0
1.2.5-r1
1
n8nio/n8n:0.212.0a9195bc499a3
musl@1.2.3-r0
1.2.3-r4
1
n8nio/n8n:1.33.1dd171d45102a
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
natsio/nats-box:0.14.31cc420186664
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
natsio/nats-box:0.13.559cf2e949181
musl@1.2.3-r4
1.2.3-r6
1
natsio/nats-box:0.13.3c507bd7e3831
musl@1.2.3-r4
1.2.3-r6
1
natsio/nats-box:0.14.2e808e0644ce1
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
natsio/nats-kafka:1.4.2bb241956b0dc
musl@1.2.4-r1
1.2.4-r3
1
natsio/nats-server-config-reloader:0.14.10d50270fa374
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
natsio/nats-server-config-reloader:0.15.05b21830a9e9d
musl@1.2.5-r0
1.2.5-r1
1
natsio/nats-server-config-reloader:0.8.06bdaceb63aa5
musl@1.2.3-r1
1.2.3-r4
1
natsio/nats-server-config-reloader:0.14.08c28b75bc416
musl@1.2.4-r0
1.2.4-r3
1
natsio/nats-server-config-reloader:0.11.0c3a755eab2cc
musl@1.2.4-r0
1.2.4-r3
1
natsio/prometheus-nats-exporter:0.13.02adf791d9f9f
musl@1.2.4-r1
1.2.4-r3
1
neosu/kubebadges:v0.0.5256530d8e5c6
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
nginxinc/nginx-unprivileged:1.25-alpine8265b1df5a89
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
nginxinc/nginx-unprivileged8f14986c54fa
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
musl@1.2.3-r0
1.2.3-r4
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
musl@1.2.3-r0
1.2.3-r4
1
nocodb/nocodb:0.258.06779a4ddedf2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
nocodb/nocodb:0.301.5d9516f0bf546
musl@1.2.5-r8
1.2.5-r9
1
nodered/node-red:3.0.2-18e2632a7a35dd
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
nottiey/mynodejswebapp:latest9c35a24c9eb3
musl@1.2.3-r5
1.2.3-r6
1
nsqio/nsq:v1.3.01a369c146af7
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
musl@1.2.5-r0
1.2.5-r1
1
okaforuchena/uo-docker:V1.0.0004e81250f48
musl@1.2.3-r5
1.2.3-r6
1
ooghenekaro/hans-docker:v1.0.0d1f972aa844a
musl@1.2.3-r5
1.2.3-r6
1
ooghenekaro/nodejswebapp:latestea5b71588a76
musl@1.2.3-r4
1.2.3-r6
1
ooghenekaro/nodejswebappoct:lateste010f5fecbc7
musl@1.2.3-r5
1.2.3-r6
1
opea/chatqna-conversation-ui:v0.9bdb9ec215872
musl@1.2.5-r0
1.2.5-r1
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
musl@1.2.3-r5
1.2.3-r6
1
openkruise/kruise-state-metrics:v0.2.0a8108f771287
musl@1.2.3-r5
1.2.3-r6
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
opennode/waldur-site-agent:1.0.76d2e3b97c8d2
musl@1.2.5-r0
1.2.5-r1
1
openruntimes/executor:0.11.42228f186dcbb
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
musl@1.2.3-r5
1.2.3-r6
1
openverso/ueransim:3.2.6733f1232b7d3
musl@1.2.3-r0
1.2.3-r4
1
openzipkin/zipkin:2.24197a9692f6a9
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
oranhack7/solidproject:77c6453942223f
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
oryd/hydra:v2.3.0b94007e19a1f
musl@1.2.5-r0
1.2.5-r1
1
oryd/kratos:v1.1.08f15006a080d
musl@1.2.4-r2
1.2.4-r3
1
oryd/kratos-selfservice-ui-node:v26.2.046a7bac1ad0c
musl@1.2.3-r4
1.2.3-r6
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
musl@1.2.3-r4
1.2.3-r6
1
oryd/oathkeeper:v26.2.0467329abde34
musl@1.2.5-r8
1.2.5-r9
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.