StackRadar

CVE-2025-26519

High

Advisory

Published 14 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,059
of 17,790 indexed, latest versions
Container images
1,130
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,059 of 17,790 indexed charts deploy, on 1,130 images.

Affected packageAffected versionsFixed inImages
musldeb1.2.2-4no fix listed1
muslapk1.2.3-r0, 1.2.3-r1, 1.2.3-r2, 1.2.3-r3+10 more1.2.3-r4, 1.2.3-r6, 1.2.4_git20230717-r5, 1.2.4-r3+2 more1,129
OSV records
ALPINE-CVE-2025-26519UBUNTU-CVE-2025-26519

Charts affected

1,059 by stars
ChartLatestAffected imagesRadar Score
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
musl@1.2.5-r0
1.2.5-r1

Open the chart page →

9,395
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,610
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
musl@1.2.3-r0
1.2.3-r4

Open the chart page →

7,998
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
musl@1.2.3-r5
1.2.3-r6
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
musl@1.2.3-r5
1.2.3-r6

Open the chart page →

5,047
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
musl@1.2.4-r1
1.2.4-r3

Open the chart page →

448
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
musl@1.2.4-r0
1.2.4-r3

Open the chart page →

3,487
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
musl@1.2.3-r4
1.2.3-r6
zahoriaut/zahori-server:0.1.17b2de13916f3e
musl@1.2.3-r4
1.2.3-r6

Open the chart page →

5,852
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,588
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5

Open the chart page →

569

Container images carrying it

1,130 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/k8s-at-home/pod-gateway:v1.6.1dcb2d814a4f7
musl@1.2.3-r0
1.2.3-r4
1
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
musl@1.2.3-r0
1.2.3-r4
1
ghcr.io/keel-hq/keel:0.22.3315e188a07c2
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/kluster-manager/fluxcd-addon:v0.0.23acba3df8827
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/kubeshop/k8s-sidecar:ignore-initial-events7f583a36a764
musl@1.2.3-r0
1.2.3-r4
1
ghcr.io/lablabs/cloudflare_exporter:0.0.1670d74ec46602
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/layr-labs/eigenda/opr-node:0.8.46650119a385f
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/layr-labs/eigenda/opr-nodeplugin:0.8.4e459ad3ae758
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/lbi22/trivy-webhook-elasticsearch:v0.1.4b51b824e4f19
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/leoquote/tencentcloud-exporter:masterca51b6bb15dd
musl@1.2.4-r1
1.2.4-r3
1
ghcr.io/leprechaun/lgtv2mqtt:latestac2e11c41ffb
musl@1.2.4-r1
1.2.4-r3
1
ghcr.io/linuxoid69/school-bot:v0.3.3c8872438f1e0
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/liubin/toml-cli:v0.0.734a1da9f0f83
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
musl@1.2.4-r1
1.2.4-r3
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
musl@1.2.4-r1
1.2.4-r3
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
musl@1.2.4-r1
1.2.4-r3
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
musl@1.2.4-r1
1.2.4-r3
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/marthydavid/kafka-keda-golang-consumer:0.0.4e07644865dd1
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/marthydavid/kafka-keda-golang-producer:0.0.454b242c7bf2b
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/matrix-org/dendrite-monolith:v0.9.43267d27d392f
musl@1.2.3-r0
1.2.3-r4
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/mgumz/mtr-exporter:0.4.0f4691c8fe8eb
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/mjohnson9/docker-pleroma:v0.1.44f08e2823756
musl@1.2.3-r2
1.2.3-r4
1
ghcr.io/mmontes11/echoperator:v0.0.4a544a71c6e3b
musl@1.2.3-r0
1.2.3-r4
1
ghcr.io/mmontes11/iot-mosquitto:v3.11.0d5cc1a76966c
musl@1.2.3-r2
1.2.3-r4
1
ghcr.io/mrprimate/ddb-proxy:0.0.258dc2d7fb460f
musl@1.2.4-r1
1.2.4-r3
1
ghcr.io/mruoss/kompost:0.3.2292d9a8d67c5
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/mshade/kronic:v0.1.466e3043851cd
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/mt190502/docker-anki-sync-server:25.09.2824245fd5a57
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/nabokihms/events_exporter:latest68d44646e8b2
musl@1.2.3-r4
1.2.3-r6
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.