StackRadar

CVE-2025-31344

High

Advisory

Published 14 Apr 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
32
of 17,781 indexed, latest versions
Container images
26
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 32 of 17,781 indexed charts deploy, on 26 images.

Affected packageAffected versionsFixed inImages
giflibdeb5.2.1-2.5, 5.2.1-2.5+deb12u1, 5.2.2-1+b1, 5.2.2-1+deb13u1no fix listed23
giflibapk5.2.2-r05.2.2-r13
OSV records
ALPINE-CVE-2025-31344DEBIAN-CVE-2025-31344

Charts affected

32 by stars
ChartLatestAffected imagesRadar Score
zammadzammadOfficialVerified publisher18.0.51 of 5See more

zammad zammad 18.0.5

1 of the 5 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

6,887
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
openproject/openproject:17.8.0-slim48952034215d
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

19,926
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
giflib@5.2.1-2.5
no fix listed

Open the chart page →

11,384
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

8,489
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
giflib@5.2.1-2.5
no fix listed

Open the chart page →

6,457
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
giflib@5.2.1-2.5
no fix listed

Open the chart page →

4,127
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

19,691
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
giflib@5.2.2-1+b1
no fix listed

Open the chart page →

12,037
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
giflib@5.2.1-2.5
no fix listed

Open the chart page →

13,761
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
giflib@5.2.1-2.5
no fix listed

Open the chart page →

11,458
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
giflib@5.2.1-2.5
no fix listed

Open the chart page →

5,734
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

8,489
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

4,626
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

7,459
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
giflib@5.2.1-2.5
no fix listed

Open the chart page →

12,127
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
giflib@5.2.2-r0
5.2.2-r1

Open the chart page →

1,395
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
giflib@5.2.1-2.5
no fix listed

Open the chart page →

13,241
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
giflib@5.2.2-r0
5.2.2-r1

Open the chart page →

4,647
dawarichhelmforgeVerified publisher1.0.01 of 4See more

dawarich helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

4,742
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
giflib@5.2.1-2.5+deb12u1
no fix listed

Open the chart page →

6,022
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
giflib@5.2.1-2.5
no fix listed

Open the chart page →

16,384
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

26,612
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
giflib@5.2.1-2.5
no fix listed

Open the chart page →

10,780
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
giflib@5.2.2-1+b1
no fix listed

Open the chart page →

9,103
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
giflib@5.2.1-2.5
no fix listed

Open the chart page →

13,497
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
giflib@5.2.2-1+b1
no fix listed

Open the chart page →

7,944
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
giflib@5.2.2-1+b1
no fix listed

Open the chart page →

11,950
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
giflib@5.2.2-1+deb13u1
no fix listed

Open the chart page →

4,626
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
giflib@5.2.2-1+b1
no fix listed

Open the chart page →

10,605
recipyartomik-helm-chartsVerified publisher0.0.21 of 2See more

recipya rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
reaper99/recipya:v1.2.27f7ec3aeb88c
giflib@5.2.2-r0
5.2.2-r1

Open the chart page →

2,066
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2025-31344.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
giflib@5.2.1-2.5+deb12u1
no fix listed

Open the chart page →

11,636

Container images carrying it

26 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
giflib@5.2.2-1+deb13u1
no fix listed
7
deconzcommunity/deconz:2.29.2062de2362641
giflib@5.2.1-2.5
no fix listed
1
jlesage/firefox:v25.03.1055c28defe31
giflib@5.2.2-r0
5.2.2-r1
1
kinseii/wazuh-agent:4.14.17160eb143728
giflib@5.2.1-2.5
no fix listed
1
merlos/zookeeper:3.9.3a38fc7e09ed7
giflib@5.2.1-2.5
no fix listed
1
openproject/openproject:17.8.0-slim48952034215d
giflib@5.2.2-1+deb13u1
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
giflib@5.2.2-1+deb13u1
no fix listed
1
reaper99/recipya:v1.2.27f7ec3aeb88c
giflib@5.2.2-r0
5.2.2-r1
1
ryshe/terraria:latestb1c89f7f359a
giflib@5.2.1-2.5
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
giflib@5.2.1-2.5
no fix listed
1
signalen/backend:2.50.14760256000738
giflib@5.2.1-2.5+deb12u1
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
giflib@5.2.2-1+b1
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
giflib@5.2.1-2.5+deb12u1
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
giflib@5.2.1-2.5
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
giflib@5.2.1-2.5
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
giflib@5.2.1-2.5
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
giflib@5.2.1-2.5
no fix listed
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
giflib@5.2.2-r0
5.2.2-r1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
giflib@5.2.1-2.5
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
giflib@5.2.2-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
giflib@5.2.2-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
giflib@5.2.2-1+b1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
giflib@5.2.1-2.5
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
giflib@5.2.2-1+b1
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
giflib@5.2.2-1+deb13u1
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
giflib@5.2.2-1+deb13u1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.