StackRadar

CVE-2025-27144

High

Advisory

Published 24 Feb 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
191
of 17,781 indexed, latest versions
Container images
179
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 191 of 17,781 indexed charts deploy, on 179 images.

Affected packageAffected versionsFixed inImages
skopeorpm2:1.11.2-0.1.el92:1.18.1-1.el9_61
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.2+1 more3.0.4124
github.com/go-jose/go-jose/v4golangv4.0.1, v4.0.2, v4.0.44.0.568
github.com/go-jose/go-josegolangv2.6.3+incompatible3.0.44
OSV records
RHSA-2025:7397GHSA-c6gw-w398-hv78
Also known as
GO-2025-3485

Charts affected

191 by stars
ChartLatestAffected imagesRadar Score
parcaparca4.19.01 of 2See more

parca parca 4.19.0

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

1,978
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

4,120
vikunjapascaliskeVerified publisher5.1.01 of 1See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5

Open the chart page →

1,342
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

1,326
firehose-corepinaxVerified publisher0.1.11 of 2See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

3,488
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

7,062
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

4,889
planectlplanectlVerified publisher0.7.02 of 10See more

planectl planectl 0.7.0

2 of the 10 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5

Open the chart page →

25,934
cloudflare-tunnelportefaix-hub0.4.01 of 1See more

cloudflare-tunnel portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.8.314d9c6b01b29
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5

Open the chart page →

1,306
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

4,416
hydraradar-baseVerified publisher0.48.01 of 1See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

1,524
kratosradar-baseVerified publisher0.43.11 of 1See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
oryd/kratos:v1.1.08f15006a080d
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

1,776
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

9,355
radar-hydraradar-baseVerified publisher0.3.41 of 2See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
oryd/hydra:v2.3.0b94007e19a1f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

2,177
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.4
4.0.5

Open the chart page →

1,561
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

16,047
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

4,038
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5

Open the chart page →

2,620
saml-exportersaml-exporter0.5.01 of 2See more

saml-exporter saml-exporter 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
github.com/go-jose/go-jose@v2.6.3+incompatible
3.0.4

Open the chart page →

1,507
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

4,744
harborsb-helm-charts0.3.01 of 2See more

harbor sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.11.1c017dd84ee96
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5

Open the chart page →

1,680
mimirsb-helm-charts0.3.01 of 1See more

mimir sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
grafana/mimir:2.15.085f55510e0d3
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5

Open the chart page →

888
cert-manager-webhook-cloudnsschichtelVerified publisher1.2.01 of 1See more

cert-manager-webhook-cloudns schichtel 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

1,396
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5

Open the chart page →

4,070
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
github.com/go-jose/go-jose/v3@v3.0.2
3.0.4

Open the chart page →

3,337
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

2,314
mimirskyloud-helm-chartsVerified publisher5.5.11 of 5See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
grafana/mimir:r292-5f018727476e456c738
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

10,651
snspingsnsping1.2.91 of 1See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
udhos/snsping:1.2.96ae70677b6a3
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

1,326
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

7,901
ipfsstakewise2.2.01 of 2See more

ipfs stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

1,239
v3-backendstakewise3.6.01 of 5See more

v3-backend stakewise 3.6.0

1 of the 5 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5

Open the chart page →

1,239
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

10,134
stunner-prometheusstunner0.2.11 of 4See more

stunner-prometheus stunner 0.2.1

1 of the 4 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
github.com/go-jose/go-jose@v2.6.3+incompatible
3.0.4

Open the chart page →

3,025
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

2,991
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

10,902
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5

Open the chart page →

10,006
typhoontyphoonVerified publisher0.2.31 of 2See more

typhoon typhoon 0.2.3

1 of the 2 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

1,672
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4

Open the chart page →

6,232
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4

Open the chart page →

14,983
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-27144.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4

Open the chart page →

9,381

Container images carrying it

179 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5
8
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
github.com/go-jose/go-jose@v2.6.3+incompatible
3.0.4
5
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
4
grafana/grafana:11.0.00dc5a246ab16
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
3
grafana/grafana:11.3.0a0f881232a6f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
3
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
3
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
3
cs3org/revad:v1.24.0e80a4d67b352
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
2
grafana/grafana:11.1.0079600c9517b
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
2
grafana/grafana:11.1.4886b56d5534e
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
2
grafana/grafana:11.4.0d8ea37798ccc
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
2
ipfs/kubo:v0.33.21a30f5ed8579
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5
2
istio/install-cni:1.24.2-distrolessaef4825e110f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
2
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.4
4.0.5
2
oryd/kratos:v1.3.1fe2428f103a6
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.4
4.0.5
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
github.com/go-jose/go-jose@v2.6.3+incompatible
3.0.4
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
2
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
2
alpine/k8s:1.31.49c4976d47656
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5
1
alpine/k8s:1.30.0bd01dae02676
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
alpine/k8s:1.30.2cd560fce90f7
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5
1
alpine/k8s:1.28.13e5c0b053fed7
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5
1
artifacthub/tracker:v1.19.06596c8c4d955
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.4
4.0.5
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5
1
cloudflare/cloudflared:2024.8.314d9c6b01b29
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5
1
cloudflare/cloudflared:2024.5.05d5f70a59d5e
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5
1
cloudflare/cloudflared:2023.10.0c18744ae1767
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
coderenvs/coder-service:1.44.61deffc4670e6
github.com/go-jose/go-jose/v3@v3.0.0
3.0.4
1
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
devopsfaith/krakend:2.6.34c678c224f67
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
devopsfaith/krakend:2.7.09219cda867e2
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1
dexidp/dex:v2.39.1-distroless43655afd1a8f
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5
1
dragonflyoss/client:v0.1.82edf3e921f4e0
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
dragonflyoss/scheduler:v2.1.49523785c77787
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
emqxecp/otelcol:2.5.04c31d9bec846
github.com/go-jose/go-jose/v4@v4.0.2
4.0.5
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/go-jose/go-jose/v4@v4.0.4
4.0.5
1
goalert/goalert:v0.32.008d57388b0cb
github.com/go-jose/go-jose/v3@v3.0.1
3.0.4
1
goharbor/harbor-core:v2.11.1c017dd84ee96
github.com/go-jose/go-jose/v4@v4.0.1
4.0.5
1
grafana/agent:v0.44.23364714a2f64
github.com/go-jose/go-jose/v3@v3.0.3
3.0.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.