CVE-2025-31498
HighAdvisory
Published 8 Apr 2025In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.3
- base score, highest
- EPSS
- 0.006
- 46th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 32
- of 17,781 indexed, latest versions
- Container images
- 37
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
Red Hat Security Advisory: nodejs:20 security update
Carried by container images the latest versions of 32 of 17,781 indexed charts deploy, on 37 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| c-aresapk | 1.34.3-r0, 1.34.4-r0 | 1.34.5-r0 | 26 |
| nodejsrpm | 1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+2 more | 1:20.19.1-1.module+el8.10.0+23054+5431297f, 1:20.19.1-1.module+el9.6.0+23053+4195b0b2 | 11 |
| nodejs-packagingrpm | 23-3.module+el8.3.0+6519+9f98ed83 | 0:2021.06-4.module+el8.10.0+22904+d0fedeff | 6 |
| nodejs-nodemonrpm | 1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034 | 0:3.0.1-1.module+el8.10.0+22904+d0fedeff | 3 |
- OSV records
- ALPINE-CVE-2025-31498RHSA-2025:4461RHSA-2025:7426
- Also known as
- RHSA-2025:7537
Charts affected
32 by stars
Container images carrying it
37 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| registry.k8s.io/ | d2fbc4ec70d8 | c-ares | 1.34.5-r0 | 2 |
| alpine/ | 8943e8c7e8e4 | c-ares | 1.34.5-r0 | 1 |
| alpine/ | 9c4976d47656 | c-ares | 1.34.5-r0 | 1 |
| alpine/ | eec354133193 | c-ares | 1.34.5-r0 | 1 |
| chandanteekinavar/ | 6de5bd44a325 | c-ares | 1.34.5-r0 | 1 |
| cometbft/ | 22c2ac018f40 | c-ares | 1.34.5-r0 | 1 |
| extrim/ | 9cb7eb5598b6 | c-ares | 1.34.5-r0 | 1 |
| grafana/ | 62d2b9d20a19 | c-ares | 1.34.5-r0 | 1 |
| library/ | 851f91d24121 | c-ares | 1.34.5-r0 | 1 |
| library/ | aa3df78ecf32 | c-ares | 1.34.5-r0 | 1 |
| metabase/ | 7807bc5cad17 | c-ares | 1.34.5-r0 | 1 |
| saidsef/ | f17f7c435891 | c-ares | 1.34.5-r0 | 1 |
| temporalio/ | b44cbfeb43db | c-ares | 1.34.5-r0 | 1 |
| temporalio/ | b768f87f18b5 | c-ares | 1.34.5-r0 | 1 |
| udhos/ | daa2b4eaac09 | c-ares | 1.34.5-r0 | 1 |
| venturenox/ | c11d32f18718 | c-ares | 1.34.5-r0 | 1 |
| vividplanet/ | ae1c5b1cbecb | nodejs nodejs-nodemon | 1:20.19.1-1.module+el8.10.0+23054+5431297f 0:3.0.1-1.module+el8.10.0+22904+d0fedeff | 1 |
| ghcr.io/ | cf2c16fac5b5 | c-ares | 1.34.5-r0 | 1 |
| ghcr.io/ | 835b72878606 | c-ares | 1.34.5-r0 | 1 |
| ghcr.io/ | 0cf25ed621e2 | nodejs nodejs-packaging | 1:20.19.1-1.module+el8.10.0+23054+5431297f 0:2021.06-4.module+el8.10.0+22904+d0fedeff | 1 |
| ghcr.io/ | 0635f17c9d2c | nodejs nodejs-packaging | 1:20.19.1-1.module+el8.10.0+23054+5431297f 0:2021.06-4.module+el8.10.0+22904+d0fedeff | 1 |
| ghcr.io/ | e34964e336c1 | nodejs nodejs-packaging | 1:20.19.1-1.module+el8.10.0+23054+5431297f 0:2021.06-4.module+el8.10.0+22904+d0fedeff | 1 |
| ghcr.io/ | 0c5a3398d1e4 | nodejs nodejs-packaging | 1:20.19.1-1.module+el8.10.0+23054+5431297f 0:2021.06-4.module+el8.10.0+22904+d0fedeff | 1 |
| ghcr.io/ | 8ba040e79ca0 | nodejs nodejs-packaging | 1:20.19.1-1.module+el8.10.0+23054+5431297f 0:2021.06-4.module+el8.10.0+22904+d0fedeff | 1 |
| ghcr.io/ | 63cce7624f65 | c-ares | 1.34.5-r0 | 1 |
| ghcr.io/ | 8c68abbe1cff | c-ares | 1.34.5-r0 | 1 |
| ghcr.io/ | ff0cd9db78d3 | c-ares | 1.34.5-r0 | 1 |
| ghcr.io/ | 9ce55520e7bd | c-ares | 1.34.5-r0 | 1 |
| ghcr.io/ | 26c51e44d932 | c-ares | 1.34.5-r0 | 1 |
| ghcr.io/ | cc795b254b73 | c-ares | 1.34.5-r0 | 1 |
| ghcr.io/ | 4f40cfc2283b | c-ares | 1.34.5-r0 | 1 |
| quay.io/ | 70d138997acd | nodejs | 1:20.19.1-1.module+el9.6.0+23053+4195b0b2 | 1 |
| quay.io/ | 10df27bc5560 | nodejs nodejs-packaging | 1:20.19.1-1.module+el8.10.0+23054+5431297f 0:2021.06-4.module+el8.10.0+22904+d0fedeff | 1 |
| quay.io/ | 7a4b9fedc724 | nodejs nodejs-nodemon | 1:20.19.1-1.module+el8.10.0+23054+5431297f 0:3.0.1-1.module+el8.10.0+22904+d0fedeff | 1 |
| quay.io/ | 59fe607dfdf2 | nodejs | 1:20.19.1-1.module+el9.6.0+23053+4195b0b2 | 1 |
| quay.io/ | 6ba82beff18e | nodejs nodejs-nodemon | 1:20.19.1-1.module+el8.10.0+23054+5431297f 0:3.0.1-1.module+el8.10.0+22904+d0fedeff | 1 |
| registry.k8s.io/ | e6b8de175acd | c-ares | 1.34.5-r0 | 1 |