StackRadar

CVE-2025-30153

High

Advisory

Published 19 Mar 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 17,781 indexed, latest versions
Container images
61
deployed by those charts
Fix available
1 of 1
affected package

Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter

Carried by container images the latest versions of 72 of 17,781 indexed charts deploy, on 61 images.

Affected packageAffected versionsFixed inImages
github.com/getkin/kin-openapigolangv0.33.0, v0.53.0, v0.61.0, v0.66.0+20 more0.131.061
OSV records
GHSA-wq9g-9vfc-cfq9
Also known as
GO-2025-3533

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/getkin/kin-openapi@v0.122.0
0.131.0

Open the chart page →

16,251
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
github.com/getkin/kin-openapi@v0.66.0
0.131.0

Open the chart page →

4,918
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
github.com/getkin/kin-openapi@v0.66.0
0.131.0

Open the chart page →

5,173
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:2.8.08951be4b4e1c
github.com/getkin/kin-openapi@v0.118.0
0.131.0

Open the chart page →

30,326
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:10.4.19a9043254ba16
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

24,700
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:9.4.71a359d92f40e
github.com/getkin/kin-openapi@v0.107.0
0.131.0

Open the chart page →

17,693
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/getkin/kin-openapi@v0.112.0
0.131.0

Open the chart page →

15,477
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
github.com/getkin/kin-openapi@v0.129.0
0.131.0

Open the chart page →

1,494
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:9.4.376dcf36e7d2a
github.com/getkin/kin-openapi@v0.107.0
0.131.0

Open the chart page →

17,877
deployautoml0.1.01 of 3See more

deploy automl 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
muonsoft/openapi-mock:latestc9afe1295484
github.com/getkin/kin-openapi@v0.100.0
0.131.0

Open the chart page →

2,947
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
github.com/getkin/kin-openapi@v0.122.0
0.131.0

Open the chart page →

12,562
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
github.com/getkin/kin-openapi@v0.125.0
0.131.0

Open the chart page →

52,635
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

16,346
carettagroundcover0.0.161 of 3See more

caretta groundcover 0.0.16

1 of the 3 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/getkin/kin-openapi@v0.103.0
0.131.0

Open the chart page →

6,799
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
github.com/getkin/kin-openapi@v0.94.0
0.131.0

Open the chart page →

13,610
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
github.com/getkin/kin-openapi@v0.111.0
0.131.0

Open the chart page →

3,369
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

7,685
stunner-gateway-operatorstunner1.1.01 of 2See more

stunner-gateway-operator stunner 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
github.com/getkin/kin-openapi@v0.128.0
0.131.0

Open the chart page →

1,292
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/getkin/kin-openapi@v0.118.0
0.131.0

Open the chart page →

3,165
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

2,902
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
github.com/getkin/kin-openapi@v0.118.0
0.131.0

Open the chart page →

5,657
itera-lmaarzu1.34.601 of 6See more

itera-lma arzu 1.34.60

1 of the 6 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:9.0.1a738d0744784
github.com/getkin/kin-openapi@v0.94.0
0.131.0

Open the chart page →

8,608
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:9.1.19746858c20e6
github.com/getkin/kin-openapi@v0.94.0
0.131.0

Open the chart page →

8,556
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/getkin/kin-openapi@v0.125.0
0.131.0

Open the chart page →

1,800
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
github.com/getkin/kin-openapi@v0.125.0
0.131.0

Open the chart page →

6,036
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

16,198
ambassador-agentdatawire1.0.221 of 1See more

ambassador-agent datawire 1.0.22

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
ambassador/ambassador-agent:1.0.227a1ea0d934fb
github.com/getkin/kin-openapi@v0.118.0
0.131.0

Open the chart page →

956
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

4,509
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
quay.io/devtron/silver-surfer:e3b9a2f6-1191-387899640e2dc4316
github.com/getkin/kin-openapi@v0.67.0
0.131.0

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
quay.io/devtron/silver-surfer:e3b9a2f6-1191-387899640e2dc4316
github.com/getkin/kin-openapi@v0.67.0
0.131.0

Open the chart page →

68,240
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
codecov/self-hosted-gateway:24.4.1de483faad6e5
github.com/getkin/kin-openapi@v0.123.0
0.131.0

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/getkin/kin-openapi@v0.94.0
0.131.0

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/getkin/kin-openapi@v0.94.0
0.131.0

Open the chart page →

13,558
eoapi-supporteoapiVerified publisher0.1.71 of 7See more

eoapi-support eoapi 0.1.7

1 of the 7 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

8,648
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
github.com/getkin/kin-openapi@v0.115.0
0.131.0

Open the chart page →

7,329
testnet-homepageethereum-helm-chartsVerified publisher0.2.31 of 1See more

testnet-homepage ethereum-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
skylenet/ethereum-testnet-homepage:latest8698903e379f
github.com/getkin/kin-openapi@v0.80.0
0.131.0

Open the chart page →

2,681
monitoringgaloymoney0.12.211 of 6See more

monitoring galoymoney 0.12.21

1 of the 6 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/getkin/kin-openapi@v0.125.0
0.131.0

Open the chart page →

5,295
monitoringgaloymoney20.12.211 of 6See more

monitoring galoymoney2 0.12.21

1 of the 6 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/getkin/kin-openapi@v0.125.0
0.131.0

Open the chart page →

5,295
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
github.com/getkin/kin-openapi@v0.125.0
0.131.0

Open the chart page →

49,025
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/getkin/kin-openapi@v0.122.0
0.131.0

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/getkin/kin-openapi@v0.125.0
0.131.0

Open the chart page →

9,460
lakefsinseefrlab0.0.61 of 2See more

lakefs inseefrlab 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
treeverse/lakefs:0.69.0478f37a6cffc
github.com/getkin/kin-openapi@v0.53.0
0.131.0

Open the chart page →

2,645
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization:3.03426deb77337
github.com/getkin/kin-openapi@v0.94.0
0.131.0

Open the chart page →

11,069
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/getkin/kin-openapi@v0.115.0
0.131.0

Open the chart page →

3,561
kusk-gatewaykubeshop0.0.651 of 2See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
github.com/getkin/kin-openapi@v0.110.0
0.131.0

Open the chart page →

1,615
kusk-gateway-apikubeshop0.1.281 of 2See more

kusk-gateway-api kubeshop 0.1.28

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway-api:v1.5.4126c713cf7d8
github.com/getkin/kin-openapi@v0.110.0
0.131.0

Open the chart page →

2,308
apisix-dashboardkubesphereVerified publisher0.3.01 of 1See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
apache/apisix-dashboard:2.9.0c010ea7d1694
github.com/getkin/kin-openapi@v0.33.0
0.131.0

Open the chart page →

2,518
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:9.5.239c849cebccc
github.com/getkin/kin-openapi@v0.112.0
0.131.0

Open the chart page →

18,316
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
github.com/getkin/kin-openapi@v0.127.0
0.131.0

Open the chart page →

20,204
metadockvalitetsitVerified publisher0.0.71 of 2See more

metadoc kvalitetsit 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
kvalitetsit/metadoc-web:mainf57e7553f5bd
github.com/getkin/kin-openapi@v0.61.0
0.131.0

Open the chart page →

4,026

Container images carrying it

61 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
wallarm/node-helpers:5.0.2-1097cadc42336
github.com/getkin/kin-openapi@v0.124.0
0.131.0
1
wallarm/node-next:0.5.24314f3d2b918
github.com/getkin/kin-openapi@v0.127.0
0.131.0
1
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
github.com/getkin/kin-openapi@v0.129.0
0.131.0
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/getkin/kin-openapi@v0.53.0
0.131.0
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
github.com/getkin/kin-openapi@v0.127.0
0.131.0
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/getkin/kin-openapi@v0.120.0
0.131.0
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/getkin/kin-openapi@v0.118.0
0.131.0
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
github.com/getkin/kin-openapi@v0.118.0
0.131.0
1
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/getkin/kin-openapi@v0.129.0
0.131.0
1
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
github.com/getkin/kin-openapi@v0.129.0
0.131.0
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
github.com/getkin/kin-openapi@v0.120.0
0.131.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.