StackRadar

CVE-2025-26519

High

Advisory

Published 14 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,059
of 17,790 indexed, latest versions
Container images
1,130
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,059 of 17,790 indexed charts deploy, on 1,130 images.

Affected packageAffected versionsFixed inImages
musldeb1.2.2-4no fix listed1
muslapk1.2.3-r0, 1.2.3-r1, 1.2.3-r2, 1.2.3-r3+10 more1.2.3-r4, 1.2.3-r6, 1.2.4_git20230717-r5, 1.2.4-r3+2 more1,129
OSV records
ALPINE-CVE-2025-26519UBUNTU-CVE-2025-26519

Charts affected

1,059 by stars
ChartLatestAffected imagesRadar Score
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
musl@1.2.5-r0
1.2.5-r1

Open the chart page →

9,395
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,610
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
musl@1.2.3-r0
1.2.3-r4

Open the chart page →

7,998
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
musl@1.2.3-r5
1.2.3-r6
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
musl@1.2.3-r5
1.2.3-r6

Open the chart page →

5,047
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
musl@1.2.4-r1
1.2.4-r3

Open the chart page →

448
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
musl@1.2.4-r0
1.2.4-r3

Open the chart page →

3,487
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
musl@1.2.3-r4
1.2.3-r6
zahoriaut/zahori-server:0.1.17b2de13916f3e
musl@1.2.3-r4
1.2.3-r6

Open the chart page →

5,852
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,588
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5

Open the chart page →

569

Container images carrying it

1,130 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.61.2f04925fe1fa6
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
musl@1.2.4-r0
1.2.4-r3
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
musl@1.2.3-r5
1.2.3-r6
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/openclarity/kubeclarity-sbom-db:v2.23.3cef2b88bfc76
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/openfaas/cron-connector:0.7.0982498e8a41e
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/openfaasltd/federated-gateway:0.2.39066d7b3e6a1
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/openfaasltd/gcp-pubsub-connector:0.0.18df071f5b719
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/openfaasltd/jetstream-queue-worker:0.3.37d96366e208b1
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/openfaasltd/rabbitmq-connector:0.1.2349f7dca95ec
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/openfaasltd/sns-connector:0.2.0e9ab76a4ec77
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/openfaasltd/sqs-connector:0.3.4d44ed3b3128c
musl@1.2.5-r8
1.2.5-r9
1
ghcr.io/openfaas/nats-connector:0.3.0315e57c0a8d8
musl@1.2.3-r0
1.2.3-r4
1
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/open-telemetry/demo:1.12.0-cartservice89730afa0b5d
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/open-telemetry/demo:1.12.0-currencyservicedb69fdf22ec5
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/pascaliske/traefik-errors:1.1.00cf31753ce57
musl@1.2.3-r5
1.2.3-r6
1
ghcr.io/pascaliske/unbound:0.1.09009fbd2ef16
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/pschichtel/keycloak-webhook-router:main285e226fe7f6
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend:0.6.2c5f1e2ca5781
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/radar-base/radar-home/radar-home:0.1.71cfe3da9d812
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/radar-base/radar-rest-source-auth/radar-rest-source-authorizer:4.4.153e096497f7db
musl@1.2.5-r0
1.2.5-r1
1
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/rivals-space/rivals-nginx:1.6.1f376b96b82cc
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/riverqueue/riverui:0.5.32dc54179b25a
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/schildichat/schildichat-web:latesta87f57287805
musl@1.2.3-r4
1.2.3-r6
1
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
musl@1.2.4-r2
1.2.4-r3
1
ghcr.io/sergelogvinov/haproxy:2.8.6-alpine3.19b1c7063c66ac
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
ghcr.io/shaharia-lab/teredix:0.0.2ec727be4417a
musl@1.2.3-r3
1.2.3-r4
1
ghcr.io/smarter-project/pulseaudio:v0.0.4becfd364355b
musl@1.2.3-r0
1.2.3-r4
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
musl@1.2.4_git20230717-r5
1.2.5-r1
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
musl@1.2.3-r2
1.2.3-r4
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
musl@1.2.3-r2
1.2.3-r4
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.