StackRadar

CVE-2025-26519

High

Advisory

Published 14 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,059
of 17,790 indexed, latest versions
Container images
1,130
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,059 of 17,790 indexed charts deploy, on 1,130 images.

Affected packageAffected versionsFixed inImages
musldeb1.2.2-4no fix listed1
muslapk1.2.3-r0, 1.2.3-r1, 1.2.3-r2, 1.2.3-r3+10 more1.2.3-r4, 1.2.3-r6, 1.2.4_git20230717-r5, 1.2.4-r3+2 more1,129
OSV records
ALPINE-CVE-2025-26519UBUNTU-CVE-2025-26519

Charts affected

1,059 by stars
ChartLatestAffected imagesRadar Score
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
musl@1.2.5-r0
1.2.5-r1

Open the chart page →

9,395
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,610
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
musl@1.2.3-r0
1.2.3-r4

Open the chart page →

7,998
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
musl@1.2.3-r5
1.2.3-r6
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
musl@1.2.3-r5
1.2.3-r6

Open the chart page →

5,047
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
musl@1.2.4-r1
1.2.4-r3

Open the chart page →

448
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
musl@1.2.4-r0
1.2.4-r3

Open the chart page →

3,487
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
musl@1.2.3-r4
1.2.3-r6
zahoriaut/zahori-server:0.1.17b2de13916f3e
musl@1.2.3-r4
1.2.3-r6

Open the chart page →

5,852
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,588
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5

Open the chart page →

569

Container images carrying it

1,130 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
wallarm/node-next:0.5.24314f3d2b918
musl@1.2.5-r0
1.2.5-r1
1
wallarm/sysbindings:v0.9.9c527865df85d
musl@1.2.3-r0
1.2.3-r4
1
wistefan/vcbackend:0.0.13bd436164b51
musl@1.2.3-r0
1.2.3-r4
1
wmbusmeters/wmbusmeters:release-1.18.0d82715d9ae22
musl@1.2.5-r0
1.2.5-r1
1
xvilo/php:8.2-composera138e57d3204
musl@1.2.3-r4
1.2.3-r6
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
musl@1.2.4-r0
1.2.4-r3
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
musl@1.2.3-r4
1.2.3-r6
1
zedeus/nitter:bc219aa792cc0e4117888b2036a969559f4f26893dd3d5ea33be
musl@1.2.3-r4
1.2.3-r6
1
zurdi15/romm:2.3.12db88fe44c89
musl@1.2.3-r5
1.2.3-r6
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
musl@1.2.3-r3
1.2.3-r4
1
gcr.io/kubecost1/frontend:prod-1.108.14c6df805bbf2
musl@1.2.4-r2
1.2.4-r3
1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
gcr.io/ml-pipeline/viewer-crd-controller:2.0.0-alpha.534403f9f94be
musl@1.2.3-r0
1.2.3-r4
1
gcr.io/ml-pipeline/viewer-crd-controller:2.3.08cf8213d69e4
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
musl@1.2.4-r1
1.2.4-r3
1
ghcr.io/akhilrex/podgrab:1.0.0bce133f3f511
musl@1.2.3-r0
1.2.3-r4
1
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/appscode/capi-ops-manager:v0.0.57465f35b684c
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/appscode/license-proxyserver:v0.0.8d6c2532ea386
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
musl@1.2.4-r1
1.2.4-r3
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
musl@1.2.3-r1
1.2.3-r4
1
ghcr.io/arpa-network/node-shell:latest6b359ace1408
musl@1.2.3-r1
1.2.3-r4
1
ghcr.io/astriaorg/ria-faucet:0.0.1a06c8ebef427
musl@1.2.4-r0
1.2.4-r3
1
ghcr.io/astriaorg/seq-faucet:0.9.0bf3cb9b505b6
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/autobrr/autobrr:v1.10.0d4022cd32df5
musl@1.2.3-r0
1.2.3-r4
1
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/bakito/sealed-secrets-web:v3.0.574aff24d4b97
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/bastienwirtz/homer:v25.02.1cf4ae752adbb
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/beluga-cloud/actual/actualserver:23.12.1c8a0d5ec5a12
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/bryopsida/redis:main5ef6bdb63604
musl@1.2.4-r1
1.2.4-r3
1
ghcr.io/caarlos0/domain_exporter:v1.18.0-arm64c852606428cf
musl@1.2.3-r0
1.2.3-r4
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/chronicleprotocol/oracles-updates-exporter:0.0.4992d0e793af6
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/clusterpedia-io/clusterpedia/apiserver:v0.6.03d089d9078f8
musl@1.2.3-r1
1.2.3-r4
1
ghcr.io/clusterpedia-io/clusterpedia/clustersynchro-manager:v0.6.082cc9a77f6d6
musl@1.2.3-r1
1.2.3-r4
1
ghcr.io/clusterpedia-io/clusterpedia/controller-manager:v0.6.081669df338e0
musl@1.2.3-r1
1.2.3-r4
1
ghcr.io/conductionnl/commonground-gateway-frontend:dev3b3fbb57cae8
musl@1.2.3-r0
1.2.3-r4
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.