CVE-2025-30153
HighAdvisory
Published 19 Mar 2025In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.005
- 43rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 72
- of 17,781 indexed, latest versions
- Container images
- 61
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter
Carried by container images the latest versions of 72 of 17,781 indexed charts deploy, on 61 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.33.0, v0.53.0, v0.61.0, v0.66.0+20 more | 0.131.0 | 61 |
- OSV records
- GHSA-wq9g-9vfc-cfq9
- Also known as
- GO-2025-3533
Charts affected
72 by stars
Container images carrying it
61 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | 0dc5a246ab16 | github.com/ | 0.131.0 | 3 |
| grafana/ | a0f881232a6f | github.com/ | 0.131.0 | 3 |
| quay.io/ | 9640e2dc4316 | github.com/ | 0.131.0 | 3 |
| grafana/ | 057896e23443 | github.com/ | 0.131.0 | 2 |
| grafana/ | 079600c9517b | github.com/ | 0.131.0 | 2 |
| grafana/ | 42d3e6bc1865 | github.com/ | 0.131.0 | 2 |
| grafana/ | 886b56d5534e | github.com/ | 0.131.0 | 2 |
| grafana/ | d8ea37798ccc | github.com/ | 0.131.0 | 2 |
| streamnative/ | 0e6d7aa3ef32 | github.com/ | 0.131.0 | 2 |
| quay.io/ | 8c65b333a3d3 | github.com/ | 0.131.0 | 2 |
| ambassador/ | 7a1ea0d934fb | github.com/ | 0.131.0 | 1 |
| apache/ | c010ea7d1694 | github.com/ | 0.131.0 | 1 |
| bitnamilegacy/ | cb8ab5515676 | github.com/ | 0.131.0 | 1 |
| codecov/ | de483faad6e5 | github.com/ | 0.131.0 | 1 |
| datawire/ | 07f8fe4f4f8e | github.com/ | 0.131.0 | 1 |
| datawire/ | 9716efbdd24b | github.com/ | 0.131.0 | 1 |
| defactops/ | 825cdf9ba706 | github.com/ | 0.131.0 | 1 |
| grafana/ | 0679e877ba20 | github.com/ | 0.131.0 | 1 |
| grafana/ | 1a359d92f40e | github.com/ | 0.131.0 | 1 |
| grafana/ | 1b9ca4bbc4a2 | github.com/ | 0.131.0 | 1 |
| grafana/ | 39c849cebccc | github.com/ | 0.131.0 | 1 |
| grafana/ | 464eac539793 | github.com/ | 0.131.0 | 1 |
| grafana/ | 5781759b3d27 | github.com/ | 0.131.0 | 1 |
| grafana/ | 62d2b9d20a19 | github.com/ | 0.131.0 | 1 |
| grafana/ | 6b5b37eb35bb | github.com/ | 0.131.0 | 1 |
| grafana/ | 76dcf36e7d2a | github.com/ | 0.131.0 | 1 |
| grafana/ | 8640e5038e83 | github.com/ | 0.131.0 | 1 |
| grafana/ | 8b37a2f028f1 | github.com/ | 0.131.0 | 1 |
| grafana/ | 9746858c20e6 | github.com/ | 0.131.0 | 1 |
| grafana/ | a738d0744784 | github.com/ | 0.131.0 | 1 |
| grafana/ | a9043254ba16 | github.com/ | 0.131.0 | 1 |
| grafana/ | b23b588cf7cb | github.com/ | 0.131.0 | 1 |
| grafana/ | ecc1b80b8ca2 | github.com/ | 0.131.0 | 1 |
| grafana/ | f9811e4e687f | github.com/ | 0.131.0 | 1 |
| grafana/ | fa801ab6e1ae | github.com/ | 0.131.0 | 1 |
| haproxytech/ | 14e4afa90dfd | github.com/ | 0.131.0 | 1 |
| haproxytech/ | 7f3dc8c7e031 | github.com/ | 0.131.0 | 1 |
| haproxytech/ | 8951be4b4e1c | github.com/ | 0.131.0 | 1 |
| intel/ | 3426deb77337 | github.com/ | 0.131.0 | 1 |
| junktext/ | a70936c04aed | github.com/ | 0.131.0 | 1 |
| kubeshop/ | 8b5bfd57a3ce | github.com/ | 0.131.0 | 1 |
| kubeshop/ | 126c713cf7d8 | github.com/ | 0.131.0 | 1 |
| kvalitetsit/ | f57e7553f5bd | github.com/ | 0.131.0 | 1 |
| l7mp/ | c34f7c931491 | github.com/ | 0.131.0 | 1 |
| muonsoft/ | c9afe1295484 | github.com/ | 0.131.0 | 1 |
| sealio/ | a326a2f03660 | github.com/ | 0.131.0 | 1 |
| sky5367/ | d51bf68d4b26 | github.com/ | 0.131.0 | 1 |
| skylenet/ | 8698903e379f | github.com/ | 0.131.0 | 1 |
| svtechnmaa/ | 1d71314424aa | github.com/ | 0.131.0 | 1 |
| treeverse/ | 478f37a6cffc | github.com/ | 0.131.0 | 1 |