CVE-2025-26519
HighAdvisory
Published 14 Feb 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.003
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,059
- of 17,790 indexed, latest versions
- Container images
- 1,130
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 1,059 of 17,790 indexed charts deploy, on 1,130 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| musldeb | 1.2.2-4 | no fix listed | 1 |
| muslapk | 1.2.3-r0, 1.2.3-r1, 1.2.3-r2, 1.2.3-r3+10 more | 1.2.3-r4, 1.2.3-r6, 1.2.4_git20230717-r5, 1.2.4-r3+2 more | 1,129 |
- OSV records
- ALPINE-CVE-2025-26519UBUNTU-CVE-2025-26519
Charts affected
1,059 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 9,395 |
| prometheusalertygqygq2Verified publisher | 1.0.0 | 1 of 1See more | 1,610 |
| rawfile-csiymatrixVerified publisher | 0.2.1 | 1 of 4See more | 7,998 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,047 |
| zahori-postgresqlzahoriVerified publisher | 1.0.1 | 1 of 1See more | 448 |
| zahori-processzahoriVerified publisher | 1.0.1 | 1 of 1See more | 3,487 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,852 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,588 |
| zerossl-cert-managerzerossl-cert-manager | 0.1.0 | 1 of 2See more | 569 |
Container images carrying it
1,130 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| reportportal/ | dc166c58485a | musl | 1.2.3-r4 | 1 |
| reportportal/ | 0a08784eb901 | musl | 1.2.3-r4 | 1 |
| restic/ | 579e4e6a4931 | musl | 1.2.3-r6 | 1 |
| rss3/ | e8adc09d9c07 | musl | 1.2.4-r3 | 1 |
| rss3/ | 45b91380bbe7 | musl | 1.2.4-r3 | 1 |
| rss3/ | 96672897ba9e | musl | 1.2.4-r3 | 1 |
| rss3/ | 865a0a6bdf4c | musl | 1.2.4-r3 | 1 |
| rss3/ | 8d9a44c650fa | musl | 1.2.4-r3 | 1 |
| safeglobal/ | 12ccfd93fcaf | musl | 1.2.5-r1 | 1 |
| sealio/ | a326a2f03660 | musl | 1.2.4_git20230717-r5 | 1 |
| sealio/ | b0389d9848a5 | musl | 1.2.4-r3 | 1 |
| semaphoreui/ | 5b50bc11833f | musl | 1.2.4-r3 | 1 |
| semitechnologies/ | 7a00d226f063 | musl | 1.2.4-r3 | 1 |
| shadowrhyder/ | 4aae9270356a | musl | 1.2.4-r3 | 1 |
| shyim/ | a951c0e6b836 | musl | 1.2.3-r4 | 1 |
| signoz/ | c10fa03e103c | musl | 1.2.5-r1 | 1 |
| sinhasaurabh09/ | c0d08847ddbb | musl | 1.2.5-r1 | 1 |
| sky5367/ | d51bf68d4b26 | musl | 1.2.4_git20230717-r5 | 1 |
| sky5367/ | d3150f201471 | musl | 1.2.4-r3 | 1 |
| skylenet/ | 8698903e379f | musl | 1.2.3-r6 | 1 |
| skylenet/ | d757cc016198 | musl | 1.2.3-r4 | 1 |
| solidproject/ | ccc4acb7e9a1 | musl | 1.2.4-r3 | 1 |
| springhack/ | 4aceb821da88 | musl | 1.2.3-r4 | 1 |
| srini78/ | 5d1cbdc6833a | musl | 1.2.3-r6 | 1 |
| stain/ | b1d0c96f19ad | musl | 1.2.5-r1 | 1 |
| stubin87/ | 2e5c42e92ec8 | musl | 1.2.3-r4 | 1 |
| su541/ | 371ee33f83c1 | musl | 1.2.4-r3 | 1 |
| subsquid/ | 0889a857f192 | musl | 1.2.3-r6 | 1 |
| subsquid/ | fa549779e9b1 | musl | 1.2.3-r6 | 1 |
| sumuduliya/ | b7788a2984a3 | musl | 1.2.4_git20230717-r5 | 1 |
| supabase/ | 7174d551d720 | musl | 1.2.3-r6 | 1 |
| supabase/ | ba4ddc594b0b | musl | 1.2.5-r1 | 1 |
| supabase/ | f983fb50bd95 | musl | 1.2.5-r1 | 1 |
| supermq/ | 944a0be3563e | musl | 1.2.4_git20230717-r5 | 1 |
| svtechnmaa/ | 6d91c2e4e882 | musl | 1.2.4_git20230717-r5 | 1 |
| svtechnmaa/ | 8e8abe71a46d | musl | 1.2.4_git20230717-r5 | 1 |
| svtechnmaa/ | 1a75d88031fe | musl | 1.2.4_git20230717-r5 | 1 |
| swaggerapi/ | 11b20aebb92c | musl | 1.2.3-r4 | 1 |
| swaggerapi/ | 342808e22de4 | musl | 1.2.4-r3 | 1 |
| swaggerapi/ | 7ff9a86f35ff | musl | 1.2.3-r4 | 1 |
| sysintelligent/ | 77fb30df847d | musl | 1.2.3-r6 | 1 |
| tailscale/ | 8edd06cf5bac | musl | 1.2.4-r3 | 1 |
| tailwarden/ | 3f68c8ae7993 | musl | 1.2.3-r4 | 1 |
| tawfiq58/ | c707555f6853 | musl | 1.2.3-r6 | 1 |
| tdeutsch/ | b67186f4c9a5 | musl | 1.2.3-r4 | 1 |
| tektonops/ | c2198746cf8f | musl | 1.2.5-r1 | 1 |
| temporalio/ | 258958fe2ff2 | musl | 1.2.4-r3 | 1 |
| temporalio/ | 37e2e33dbd7b | musl | 1.2.5-r1 | 1 |
| temporalio/ | 836af062af30 | musl | 1.2.4-r3 | 1 |
| temporalio/ | cda4901bab53 | musl | 1.2.4_git20230717-r5 | 1 |