StackRadar

CVE-2025-30153

High

Advisory

Published 19 Mar 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 17,781 indexed, latest versions
Container images
61
deployed by those charts
Fix available
1 of 1
affected package

Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter

Carried by container images the latest versions of 72 of 17,781 indexed charts deploy, on 61 images.

Affected packageAffected versionsFixed inImages
github.com/getkin/kin-openapigolangv0.33.0, v0.53.0, v0.61.0, v0.66.0+20 more0.131.061
OSV records
GHSA-wq9g-9vfc-cfq9
Also known as
GO-2025-3533

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

7,510
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

7,309
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

2,966
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:8.5.3ecc1b80b8ca2
github.com/getkin/kin-openapi@v0.94.0
0.131.0

Open the chart page →

9,558
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/getkin/kin-openapi@v0.122.0
0.131.0

Open the chart page →

5,137
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/getkin/kin-openapi@v0.122.0
0.131.0

Open the chart page →

5,411
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/getkin/kin-openapi@v0.120.0
0.131.0

Open the chart page →

1,326
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/getkin/kin-openapi@v0.103.0
0.131.0

Open the chart page →

26,840
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/getkin/kin-openapi@v0.125.0
0.131.0

Open the chart page →

9,355
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
github.com/getkin/kin-openapi@v0.126.0
0.131.0

Open the chart page →

1,667
haproxy-loadbalanced-redisrivals-spaceVerified publisher0.1.21 of 3See more

haproxy-loadbalanced-redis rivals-space 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:2.6.614e4afa90dfd
github.com/getkin/kin-openapi@v0.110.0
0.131.0

Open the chart page →

1,423
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
quay.io/devtron/silver-surfer:e3b9a2f6-1191-387899640e2dc4316
github.com/getkin/kin-openapi@v0.67.0
0.131.0

Open the chart page →

68,240
hermitcrabseal-ioVerified publisher0.1.41 of 2See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
sealio/hermitcrab:v0.1.4a326a2f03660
github.com/getkin/kin-openapi@v0.122.0
0.131.0

Open the chart page →

4,881
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
github.com/getkin/kin-openapi@v0.126.0
0.131.0

Open the chart page →

7,901
redis-high-availabilitysomeblackmagic1.3.101 of 3See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:2.9.57f3dc8c7e031
github.com/getkin/kin-openapi@v0.123.0
0.131.0

Open the chart page →

3,148
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/getkin/kin-openapi@v0.112.0
0.131.0

Open the chart page →

10,134
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/getkin/kin-openapi@v0.53.0
0.131.0

Open the chart page →

3,460
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/getkin/kin-openapi@v0.112.0
0.131.0

Open the chart page →

10,902
monitoringthl-chartsVerified publisher0.1.11 of 10See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
github.com/getkin/kin-openapi@v0.94.0
0.131.0

Open the chart page →

18,908
typhoontyphoonVerified publisher0.2.32 of 2See more

typhoon typhoon 0.2.3

2 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/getkin/kin-openapi@v0.129.0
0.131.0
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
github.com/getkin/kin-openapi@v0.129.0
0.131.0

Open the chart page →

1,672
wallarm-node-nextwallarmVerified publisher0.5.32 of 2See more

wallarm-node-next wallarm 0.5.3

2 of the 2 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
wallarm/node-helpers:5.0.2-1097cadc42336
github.com/getkin/kin-openapi@v0.124.0
0.131.0
wallarm/node-next:0.5.24314f3d2b918
github.com/getkin/kin-openapi@v0.127.0
0.131.0

Open the chart page →

2,408
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-30153.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
github.com/getkin/kin-openapi@v0.126.0
0.131.0

Open the chart page →

9,381

Container images carrying it

61 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
wallarm/node-helpers:5.0.2-1097cadc42336
github.com/getkin/kin-openapi@v0.124.0
0.131.0
1
wallarm/node-next:0.5.24314f3d2b918
github.com/getkin/kin-openapi@v0.127.0
0.131.0
1
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
github.com/getkin/kin-openapi@v0.129.0
0.131.0
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/getkin/kin-openapi@v0.53.0
0.131.0
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
github.com/getkin/kin-openapi@v0.127.0
0.131.0
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/getkin/kin-openapi@v0.120.0
0.131.0
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/getkin/kin-openapi@v0.118.0
0.131.0
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
github.com/getkin/kin-openapi@v0.118.0
0.131.0
1
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/getkin/kin-openapi@v0.129.0
0.131.0
1
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
github.com/getkin/kin-openapi@v0.129.0
0.131.0
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
github.com/getkin/kin-openapi@v0.120.0
0.131.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.