StackRadar

CVE-2025-30215

Critical

Advisory

Published 15 Apr 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.6
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
41
of 17,781 indexed, latest versions
Container images
30
deployed by those charts
Fix available
1 of 1
affected package

NATS Server may fail to authorize certain Jetstream admin APIs

Carried by container images the latest versions of 41 of 17,781 indexed charts deploy, on 30 images.

Affected packageAffected versionsFixed inImages
github.com/nats-io/nats-server/v2golangv2.2.5, v2.2.6, v2.3.3, v2.7.4+17 more2.10.27, 2.11.130
OSV records
GHSA-fhg8-qxh5-7q3w
Also known as
BIT-nats-2025-30215, GO-2025-3600

Charts affected

41 by stars
ChartLatestAffected imagesRadar Score
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.11.031c02aac089a
github.com/nats-io/nats-server/v2@v2.9.16
2.10.27

Open the chart page →

23,894
openfaasopenfaas15.0.131 of 6See more

openfaas openfaas 15.0.13

1 of the 6 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
github.com/nats-io/nats-server/v2@v2.9.24
2.10.27

Open the chart page →

3,543
rocketchatrocketchat-server7.0.21 of 12See more

rocketchat rocketchat-server 7.0.2

1 of the 12 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.28031d190c7ee
github.com/nats-io/nats-server/v2@v2.10.23
2.10.27

Open the chart page →

12,279
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
github.com/nats-io/nats-server/v2@v2.10.5
2.10.27

Open the chart page →

5,299
revadcs3orgOfficialVerified publisher1.6.11 of 1See more

revad cs3org 1.6.1

1 of the 1 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
github.com/nats-io/nats-server/v2@v2.9.11
2.10.27

Open the chart page →

1,704
featurehubfeaturehub4.1.61 of 7See more

featurehub featurehub 4.1.6

1 of the 7 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.9.19
2.10.27

Open the chart page →

8,240
nats-account-servernatsVerified publisher0.8.11 of 1See more

nats-account-server nats 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
github.com/nats-io/nats-server/v2@v2.3.3
2.10.27

Open the chart page →

2,634
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.31 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

1 of the 5 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.18.0abdc9f9f0120
github.com/nats-io/nats-server/v2@v2.10.23
2.10.27

Open the chart page →

6,091
scienceboxsciencebox0.0.71 of 17See more

sciencebox sciencebox 0.0.7

1 of the 17 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
github.com/nats-io/nats-server/v2@v2.8.4
2.10.27

Open the chart page →

6,587
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
github.com/nats-io/nats-server/v2@v2.9.11
2.10.27

Open the chart page →

4,052
falco-ui-serverappscodeVerified publisher2026.1.151 of 2See more

falco-ui-server appscode 2026.1.15

1 of the 2 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
github.com/nats-io/nats-server/v2@v2.10.5
2.10.27

Open the chart page →

2,872
ct-singlecalltelemetry0.8.42 of 7See more

ct-single calltelemetry 0.8.4

2 of the 7 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
github.com/nats-io/nats-server/v2@v2.7.5-0.20220418055348-79b4374d01d8
2.10.27
natsio/prometheus-nats-exporter:0.10.016048afb67a5
github.com/nats-io/nats-server/v2@v2.8.4
2.10.27

Open the chart page →

10,629
stablecalltelemetry0.7.12 of 9See more

stable calltelemetry 0.7.1

2 of the 9 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
github.com/nats-io/nats-server/v2@v2.7.5-0.20220418055348-79b4374d01d8
2.10.27
natsio/prometheus-nats-exporter:0.10.016048afb67a5
github.com/nats-io/nats-server/v2@v2.8.4
2.10.27

Open the chart page →

7,702
stable-hacalltelemetry0.11.41 of 7See more

stable-ha calltelemetry 0.11.4

1 of the 7 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.2e808e0644ce1
github.com/nats-io/nats-server/v2@v2.9.19
2.10.27

Open the chart page →

4,705
stigatroncarbide-charts0.4.11 of 10See more

stigatron carbide-charts 0.4.1

1 of the 10 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.9.19
2.10.27

Open the chart page →

4,423
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/nats-io/nats-server/v2@v2.10.22
2.10.27

Open the chart page →

1,925
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/nats-io/nats-server/v2@v2.9.2
2.10.27
quay.io/devtron/prometheus-nats-exporter:0.9.094044746cbce
github.com/nats-io/nats-server/v2@v2.2.5
2.10.27

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/nats-io/nats-server/v2@v2.9.2
2.10.27
quay.io/devtron/prometheus-nats-exporter:0.9.094044746cbce
github.com/nats-io/nats-server/v2@v2.2.5
2.10.27

Open the chart page →

68,240
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.5ced93c701875
github.com/nats-io/nats-server/v2@v2.9.19
2.10.27

Open the chart page →

6,678
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/nats-io/nats-server/v2@v2.9.9
2.10.27

Open the chart page →

23,685
dendritegeek-cookbookVerified publisher6.4.01 of 1See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/dendrite-monolith:v0.9.43267d27d392f
github.com/nats-io/nats-server/v2@v2.8.5-0.20220811224153-d8d25d9b0b1c
2.10.27

Open the chart page →

2,143
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.28031d190c7ee
github.com/nats-io/nats-server/v2@v2.10.23
2.10.27

Open the chart page →

12,056
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/nats-io/nats-server/v2@v2.11.0
2.11.1

Open the chart page →

45,239
kloudlite-platformkloudlite1.1.51 of 3See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.9.19
2.10.27

Open the chart page →

1,970
testkube-logskubeshop0.2.21 of 1See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
kubeshop/testkube-logs-server:latest094186b19698
github.com/nats-io/nats-server/v2@v2.10.16
2.10.27

Open the chart page →

1,278
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
github.com/nats-io/nats-server/v2@v2.2.6
2.10.27

Open the chart page →

3,764
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.31cc420186664
github.com/nats-io/nats-server/v2@v2.10.12
2.10.27

Open the chart page →

24,400
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.11.031c02aac089a
github.com/nats-io/nats-server/v2@v2.9.16
2.10.27

Open the chart page →

21,064
nats-kafkanatsVerified publisher0.15.41 of 1See more

nats-kafka nats 0.15.4

1 of the 1 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-kafka:1.4.2bb241956b0dc
github.com/nats-io/nats-server/v2@v2.10.5
2.10.27

Open the chart page →

1,731
nutanix-flow-cninutanix-helm-releasesVerified publisher1.1.01 of 7See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

1 of the 7 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.9.19
2.10.27

Open the chart page →

4,988
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
library/telegraf:1.20.428e98eece020
github.com/nats-io/nats-server/v2@v2.2.6
2.10.27

Open the chart page →

9,558
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/nats-io/nats-server/v2@v2.9.2
2.10.27
quay.io/devtron/prometheus-nats-exporter:0.9.094044746cbce
github.com/nats-io/nats-server/v2@v2.2.5
2.10.27

Open the chart page →

68,240
cernboxsciencebox0.0.41 of 6See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
github.com/nats-io/nats-server/v2@v2.8.4
2.10.27

Open the chart page →

2,330
serviceexampleserviceexample0.1.01 of 5See more

serviceexample serviceexample 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.13.559cf2e949181
github.com/nats-io/nats-server/v2@v2.9.2
2.10.27

Open the chart page →

5,449
service-exampleservice-example-10.1.02 of 7See more

service-example service-example-1 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.13.3c507bd7e3831
github.com/nats-io/nats-server/v2@v2.9.6
2.10.27
natsio/prometheus-nats-exporter:0.10.1bce728062c4f
github.com/nats-io/nats-server/v2@v2.8.4
2.10.27

Open the chart page →

9,022
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.28031d190c7ee
github.com/nats-io/nats-server/v2@v2.10.23
2.10.27

Open the chart page →

7,157
synadia-serversynadiaVerified publisher1.1.101 of 2See more

synadia-server synadia 1.1.10

1 of the 2 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.9.19
2.10.27

Open the chart page →

1,970
posteetrivy-operator2.14.02 of 3See more

postee trivy-operator 2.14.0

2 of the 3 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
aquasec/postee:2.12.0-amd640795cba777e7
github.com/nats-io/nats-server/v2@v2.7.4
2.10.27
aquasec/postee-ui:2.12.0-amd64c0467c3941dc
github.com/nats-io/nats-server/v2@v2.7.4
2.10.27

Open the chart page →

4,815
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.13.02adf791d9f9f
github.com/nats-io/nats-server/v2@v2.10.3
2.10.27

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/nats-io/nats-server/v2@v2.11.0
2.11.1

Open the chart page →

45,239
nats-account-serverwenerme0.8.11 of 1See more

nats-account-server wenerme 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-30215.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
github.com/nats-io/nats-server/v2@v2.3.3
2.10.27

Open the chart page →

2,634

Container images carrying it

30 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.9.19
2.10.27
5
natsio/nats-box:0.19.28031d190c7ee
github.com/nats-io/nats-server/v2@v2.10.23
2.10.27
3
quay.io/devtron/nats-box:latest48cdd3054b20
github.com/nats-io/nats-server/v2@v2.9.2
2.10.27
3
quay.io/devtron/prometheus-nats-exporter:0.9.094044746cbce
github.com/nats-io/nats-server/v2@v2.2.5
2.10.27
3
cs3org/revad:v1.19.03b57a34a7dfd
github.com/nats-io/nats-server/v2@v2.8.4
2.10.27
2
cs3org/revad:v1.24.0e80a4d67b352
github.com/nats-io/nats-server/v2@v2.9.11
2.10.27
2
natsio/nats-account-server:1.0.0a3381560aab6
github.com/nats-io/nats-server/v2@v2.3.3
2.10.27
2
natsio/nats-box:0.11.09fbf7bf684e4
github.com/nats-io/nats-server/v2@v2.7.5-0.20220418055348-79b4374d01d8
2.10.27
2
natsio/prometheus-nats-exporter:0.10.016048afb67a5
github.com/nats-io/nats-server/v2@v2.8.4
2.10.27
2
natsio/prometheus-nats-exporter:0.11.031c02aac089a
github.com/nats-io/nats-server/v2@v2.9.16
2.10.27
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/nats-io/nats-server/v2@v2.11.0
2.11.1
2
rancher/kine:v0.11.412889bbcd1e8
github.com/nats-io/nats-server/v2@v2.10.5
2.10.27
2
aquasec/postee:2.12.0-amd640795cba777e7
github.com/nats-io/nats-server/v2@v2.7.4
2.10.27
1
aquasec/postee-ui:2.12.0-amd64c0467c3941dc
github.com/nats-io/nats-server/v2@v2.7.4
2.10.27
1
kubeshop/testkube-logs-server:latest094186b19698
github.com/nats-io/nats-server/v2@v2.10.16
2.10.27
1
library/nats-streaming:0.25.60ad6861379c9
github.com/nats-io/nats-server/v2@v2.9.24
2.10.27
1
library/nats-streaming:0.25.5ced93c701875
github.com/nats-io/nats-server/v2@v2.9.19
2.10.27
1
library/telegraf:1.20.428e98eece020
github.com/nats-io/nats-server/v2@v2.2.6
2.10.27
1
library/telegraf:1.27507a3eecf809
github.com/nats-io/nats-server/v2@v2.9.9
2.10.27
1
library/telegraf:1.19-alpineaddb86c0c520
github.com/nats-io/nats-server/v2@v2.2.6
2.10.27
1
natsio/nats-box:0.14.31cc420186664
github.com/nats-io/nats-server/v2@v2.10.12
2.10.27
1
natsio/nats-box:0.13.559cf2e949181
github.com/nats-io/nats-server/v2@v2.9.2
2.10.27
1
natsio/nats-box:0.18.0abdc9f9f0120
github.com/nats-io/nats-server/v2@v2.10.23
2.10.27
1
natsio/nats-box:0.13.3c507bd7e3831
github.com/nats-io/nats-server/v2@v2.9.6
2.10.27
1
natsio/nats-box:0.14.2e808e0644ce1
github.com/nats-io/nats-server/v2@v2.9.19
2.10.27
1
natsio/nats-kafka:1.4.2bb241956b0dc
github.com/nats-io/nats-server/v2@v2.10.5
2.10.27
1
natsio/prometheus-nats-exporter:0.13.02adf791d9f9f
github.com/nats-io/nats-server/v2@v2.10.3
2.10.27
1
natsio/prometheus-nats-exporter:0.10.1bce728062c4f
github.com/nats-io/nats-server/v2@v2.8.4
2.10.27
1
owncloud/ocis:7.1.388e7c854517d
github.com/nats-io/nats-server/v2@v2.10.22
2.10.27
1
ghcr.io/matrix-org/dendrite-monolith:v0.9.43267d27d392f
github.com/nats-io/nats-server/v2@v2.8.5-0.20220811224153-d8d25d9b0b1c
2.10.27
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.