StackRadar

CVE-2025-2925

Medium

Advisory

Published 28 Mar 2025In the index since 8 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
10
of 17,781 indexed, latest versions
Container images
10
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 10 of 17,781 indexed charts deploy, on 10 images.

Affected packageAffected versionsFixed inImages
hdf5deb1.10.8+repack1-1, 1.14.5+repack-3, 1.14.5+repack-3build1, 1.14.6+repack-2no fix listed10
OSV records
DEBIAN-CVE-2025-2925UBUNTU-CVE-2025-2925

Charts affected

10 by stars
ChartLatestAffected imagesRadar Score
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2025-2925.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
hdf5@1.14.6+repack-2
no fix listed

Open the chart page →

8,825
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-2925.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
hdf5@1.14.5+repack-3build1
no fix listed

Open the chart page →

11,103
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2025-2925.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
hdf5@1.10.8+repack1-1
no fix listed

Open the chart page →

14,130
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2025-2925.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
hdf5@1.14.6+repack-2
no fix listed

Open the chart page →

3,773
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-2925.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
hdf5@1.14.5+repack-3
no fix listed

Open the chart page →

7,459
dawarichhelmforgeVerified publisher1.0.01 of 4See more

dawarich helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-2925.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
hdf5@1.14.5+repack-3
no fix listed

Open the chart page →

4,742
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-2925.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
hdf5@1.14.5+repack-3
no fix listed

Open the chart page →

5,669
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2025-2925.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
hdf5@1.14.6+repack-2
no fix listed

Open the chart page →

10,348
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2025-2925.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
hdf5@1.10.8+repack1-1
no fix listed

Open the chart page →

11,636
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-2925.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
hdf5@1.10.8+repack1-1
no fix listed

Open the chart page →

10,795

Container images carrying it

10 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/tika:latest-full80072bb73dd3
hdf5@1.14.6+repack-2
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
hdf5@1.14.6+repack-2
no fix listed
1
photoprism/photoprism:260728958642220223
hdf5@1.14.6+repack-2
no fix listed
1
photoprism/photoprism:251130db16ee6b1ba3
hdf5@1.14.5+repack-3build1
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
hdf5@1.14.5+repack-3
no fix listed
1
signalen/backend:2.50.14760256000738
hdf5@1.10.8+repack1-1
no fix listed
1
ghcr.io/caninehq/canine:latesta058034ca006
hdf5@1.10.8+repack1-1
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
hdf5@1.14.5+repack-3
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
hdf5@1.10.8+repack1-1
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
hdf5@1.14.5+repack-3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.