StackRadar

CVE-2025-27144

High

Advisory

Published 24 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
191
of 17,781 indexed, latest versions
Container images
179
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 191 of 17,781 indexed charts deploy, on 179 images.

Affected packageAffected versionsFixed inImages
skopeorpm2:1.11.2-0.1.el92:1.18.1-1.el9_61
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.2+1 more3.0.4124
github.com/go-jose/go-jose/v4golangv4.0.1, v4.0.2, v4.0.44.0.568
github.com/go-jose/go-josegolangv2.6.3+incompatible3.0.44
OSV records
RHSA-2025:7397GHSA-c6gw-w398-hv78
Also known as
GO-2025-3485

Charts affected

191 by stars
ChartLatestAffected imagesRadar Score
parcaparca4.19.01 of 2See more

parca parca 4.19.0

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

1,978
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

4,120
vikunjapascaliskeVerified publisher5.1.01 of 1See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5

Open the chart page →

1,342
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

1,326
firehose-corepinaxVerified publisher0.1.11 of 2See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

3,488
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

7,062
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

4,889
planectlplanectlVerified publisher0.7.02 of 10See more

planectl planectl 0.7.0

2 of the 10 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5

Open the chart page →

25,934
cloudflare-tunnelportefaix-hub0.4.01 of 1See more

cloudflare-tunnel portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.8.314d9c6b01b29
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5

Open the chart page →

1,306
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

4,416
hydraradar-baseVerified publisher0.48.01 of 1See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

1,524
kratosradar-baseVerified publisher0.43.11 of 1See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
oryd/kratos:v1.1.08f15006a080d
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

1,776
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

9,355
radar-hydraradar-baseVerified publisher0.3.41 of 2See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
oryd/hydra:v2.3.0b94007e19a1f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

2,177
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.4
4.0.5

Open the chart page →

1,561
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

16,047
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

4,038
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5

Open the chart page →

2,620
saml-exportersaml-exporter0.5.01 of 2See more

saml-exporter saml-exporter 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
github.com/go-jose/go-jose@v2.6.3+incompatible
3.0.4

Open the chart page →

1,507
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

4,744
harborsb-helm-charts0.3.01 of 2See more

harbor sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.11.1c017dd84ee96
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5

Open the chart page →

1,680
mimirsb-helm-charts0.3.01 of 1See more

mimir sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
grafana/mimir:2.15.085f55510e0d3
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5

Open the chart page →

888
cert-manager-webhook-cloudnsschichtelVerified publisher1.2.01 of 1See more

cert-manager-webhook-cloudns schichtel 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

1,396
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5

Open the chart page →

4,070
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
github.com/go-jose/go-jose/v3@v3.0.2
3.0.4

Open the chart page →

3,337
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

2,314
mimirskyloud-helm-chartsVerified publisher5.5.11 of 5See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
grafana/mimir:r292-5f018727476e456c738
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

10,651
snspingsnsping1.2.91 of 1See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
udhos/snsping:1.2.96ae70677b6a3
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

1,326
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

7,901
ipfsstakewise2.2.01 of 2See more

ipfs stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

1,239
v3-backendstakewise3.6.01 of 5See more

v3-backend stakewise 3.6.0

1 of the 5 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

1,239
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

10,134
stunner-prometheusstunner0.2.11 of 4See more

stunner-prometheus stunner 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
github.com/go-jose/go-jose@v2.6.3+incompatible
3.0.4

Open the chart page →

3,025
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

2,991
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

10,902
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5

Open the chart page →

10,006
typhoontyphoonVerified publisher0.2.31 of 2See more

typhoon typhoon 0.2.3

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

1,672
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

6,232
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

14,983
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

9,381

Container images carrying it

179 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
grafana/agent:v0.40.3f6cbec9409be
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
grafana/alloy:v1.5.101a63f4e032c
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
grafana/alloy:v1.4.306bdcbb51fc2
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
grafana/alloy:v1.1.1c3dac4e26471
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
grafana/grafana:10.1.50679e877ba20
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
grafana/grafana:9.5.239c849cebccc
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
grafana/grafana:11.2.2-security-01464eac539793
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
grafana/grafana:11.5.15781759b3d27
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
grafana/grafana:10.2.36b5b37eb35bb
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
grafana/grafana:10.3.38640e5038e83
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
grafana/grafana:11.5.28b37a2f028f1
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
grafana/grafana:11.1.3b23b588cf7cb
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
grafana/grafana:10.4.0f9811e4e687f
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
grafana/grafana:11.3.1fa801ab6e1ae
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
grafana/mimir:r292-5f018727476e456c738
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
grafana/mimir:2.15.085f55510e0d3
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5
1
gresearch/fasttrackml:latest16d1228220fc
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5
1
hashicorp/boundary:0.15.3339b78b61750
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
hashicorp/vault:1.15.40b01ed3924e6
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
hashicorp/vault:1.14.0b2177a8bfe85
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
headscale/headscale:0.25.1a7a8ae9616bb
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.4
4.0.5
1
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
istio/install-cni:1.23.6ab34c4740f44
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
istio/pilot:1.23.69c3d6a218181
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.4
4.0.5
1
istio/pilot:1.17.1ce9d87606701
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
library/caddy:2.9-alpineb4e3952384eb
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
library/traefik:v2.11.00a5157f742d2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
library/traefik:v2.10.11489caffaedb
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
library/traefik:2.10.61957e3314f43
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
library/vault:1.13.3f98ac9dd97b0
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
livekit/ingress:v1.2.21ab01641b366
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
louislam/uptime-kuma:1.23.1396510915e6be
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
minio/minio:RELEASE.2025-01-20T14-49-07Z-cpuv114b7076ca85a
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5
1
opennms/sentinel:36.0.288869082a14f
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5
1
oryd/hydra:v2.3.0b94007e19a1f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
oryd/kratos:v1.1.08f15006a080d
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
1
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
1
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
1
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
1
owncloud/ocis:7.1.388e7c854517d
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.4
4.0.5
1
owncloud/server:10.15.051d9b74fc2a8
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
1
photoprism/photoprism:240711-cefc6fd632ca74
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.