StackRadar

CVE-2025-26519

High

Advisory

Published 14 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,058
of 17,787 indexed, latest versions
Container images
1,129
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,058 of 17,787 indexed charts deploy, on 1,129 images.

Affected packageAffected versionsFixed inImages
musldeb1.2.2-4no fix listed1
muslapk1.2.3-r0, 1.2.3-r1, 1.2.3-r2, 1.2.3-r3+10 more1.2.3-r4, 1.2.3-r6, 1.2.4_git20230717-r5, 1.2.4-r3+2 more1,128
OSV records
ALPINE-CVE-2025-26519UBUNTU-CVE-2025-26519

Charts affected

1,058 by stars
ChartLatestAffected imagesRadar Score
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,610
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
musl@1.2.3-r0
1.2.3-r4

Open the chart page →

7,972
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
musl@1.2.3-r5
1.2.3-r6
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
musl@1.2.3-r5
1.2.3-r6

Open the chart page →

5,033
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
musl@1.2.4-r1
1.2.4-r3

Open the chart page →

448
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
musl@1.2.4-r0
1.2.4-r3

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
musl@1.2.3-r4
1.2.3-r6
zahoriaut/zahori-server:0.1.17b2de13916f3e
musl@1.2.3-r4
1.2.3-r6

Open the chart page →

5,847
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
musl@1.2.4-r2
1.2.4-r3

Open the chart page →

1,588
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-26519.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5

Open the chart page →

569

Container images carrying it

1,129 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ethereum/client-go:v1.10.23cce21b423165
musl@1.2.3-r0
1.2.3-r4
1
ethersphere/etherproxy:1.0.056029b0985f4
musl@1.2.4-r1
1.2.4-r3
1
ethpandaops/blob-me-baby:latestad26158420dd
musl@1.2.4-r1
1.2.4-r3
1
ethpandaops/blobscan-indexer:latestc58eb9ffe446
musl@1.2.3-r4
1.2.3-r6
1
evgkrsk/postgres-controller:0.6.237f0e1f435c3
musl@1.2.3-r4
1.2.3-r6
1
fabioformosa/hello-world-api:latest063873af085c
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
factly/mande-studio:0.34.19db4bee30e63
musl@1.2.3-r5
1.2.3-r6
1
factly/mande-web:0.34.1742355964b0e
musl@1.2.4-r1
1.2.4-r3
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
musl@1.2.3-r0
1.2.3-r4
1
featureformcom/quickstart-loader:latest82396f8fb5e8
musl@1.2.5-r0
1.2.5-r1
1
fedodo/fedodo.be.activitypub:14728dada8e3216
musl@1.2.3-r4
1.2.3-r6
1
fedodo/fedodo.be.auth:208f8eb7a1207e
musl@1.2.3-r4
1.2.3-r6
1
fedodo/fedodo.ui.home:3c69413c4d690
musl@1.2.3-r5
1.2.3-r6
1
fedodo/fedodo.ui.micro:12b2b540081c21
musl@1.2.3-r5
1.2.3-r6
1
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
musl@1.2.4-r2
1.2.4-r3
1
felddy/foundryvtt:12.343.06c5e3e9ffbb0
musl@1.2.4-r2
1.2.4-r3
1
felipecs8/app-movies-series:v14e51693fcdf5
musl@1.2.3-r4
1.2.3-r6
1
felipecs8/qrcode-generator:v1d5f4f17cb066
musl@1.2.3-r4
1.2.3-r6
1
firefart/requesttracker:nginx-nightly-202307101028236b42a0
musl@1.2.3-r5
1.2.3-r6
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
musl@1.2.3-r0
1.2.3-r4
1
flanksource/vcluster-sync-host-secrets:v0.1.6bd3294c20a60
musl@1.2.4-r0
1.2.4-r3
1
flashbots/mev-boost:1.8.07c486b5789da
musl@1.2.5-r0
1.2.5-r1
1
flomesh/pipy-repo:0.90.3-3874975c50e3d9
musl@1.2.3-r0
1.2.3-r4
1
flowable/flowable-rest:7.1.0b7ae287502cd
musl@1.2.5-r0
1.2.5-r1
1
fluidtrendslab/platform:latestbf49de7a4100
musl@1.2.3-r0
1.2.3-r4
1
flyway/flyway:9.14.1-alpine80f12c80502b
musl@1.2.3-r4
1.2.3-r6
1
folioci/mod-aes:latest6d67e9564270
musl@1.2.3-r0
1.2.3-r4
1
folioci/mod-agreements:latest29c3f233a498
musl@1.2.5-r0
1.2.5-r1
1
folioci/mod-codex-ekb:latest235a3fa4adc9
musl@1.2.3-r0
1.2.3-r4
1
folioci/mod-codex-inventory:latest6d53ed758fd1
musl@1.2.3-r0
1.2.3-r4
1
folioci/mod-codex-mux:latestd4138abfd30d
musl@1.2.3-r0
1.2.3-r4
1
folioci/mod-data-import-converter-storage:latest3028f333778f
musl@1.2.3-r4
1.2.3-r6
1
folioci/mod-licenses:latestcfd6109bf477
musl@1.2.5-r0
1.2.5-r1
1
folioci/mod-oa:latestae3b069d4ba5
musl@1.2.5-r0
1.2.5-r1
1
folioci/mod-serials-management:latest571fa1ffe8c9
musl@1.2.5-r0
1.2.5-r1
1
folioci/mod-service-interaction:latestf53c327a48e8
musl@1.2.5-r0
1.2.5-r1
1
fonoster/routr-connect:2.13.6e8c84b5eaa67
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
fonoster/routr-dispatcher:2.13.65f8f380dc174
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
fonoster/routr-edgeport:2.13.6d08a8a574a50
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
fonoster/routr-location:2.13.6051ba9c34ef5
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
fonoster/routr-pgdata:2.13.6e4d5f5ff1945
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
fonoster/routr-pgdata-migrations:2.13.6c7b1dba81eb3
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
fonoster/routr-registry:2.13.6e27001f2813c
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
fonoster/routr-requester:2.13.6e0c823506eb2
musl@1.2.4_git20230717-r4
1.2.4_git20230717-r5
1
foxcpp/maddy:0.7.16ab538e2f28b
musl@1.2.4-r2
1.2.4-r3
1
fydeinc/envoyproxy:1.13.8.29fadb0a491db
musl@1.2.4-r1
1.2.4-r3
1
fydeinc/fydeproxy:1.3.1780e7c00bc9e7
musl@1.2.4-r2
1.2.4-r3
1
gcarrarom/landing:0.0.0769d19e441d9
musl@1.2.3-r0
1.2.3-r4
1
genseb/rabbitmq-producer-randomizer:0.0.6cb7599641099
musl@1.2.4-r1
1.2.4-r3
1
getmeili/meilisearch:v1.11.0b9be3d2d4251
musl@1.2.5-r0
1.2.5-r1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.