StackRadar

CVE-2025-31498

High

Advisory

Published 8 Apr 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
32
of 17,781 indexed, latest versions
Container images
37
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: nodejs:20 security update

Carried by container images the latest versions of 32 of 17,781 indexed charts deploy, on 37 images.

Affected packageAffected versionsFixed inImages
c-aresapk1.34.3-r0, 1.34.4-r01.34.5-r026
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762, 1:18.18.2-1.module+el8.8.0+20407+c11d40bd+2 more1:20.19.1-1.module+el8.10.0+23054+5431297f, 1:20.19.1-1.module+el9.6.0+23053+4195b0b211
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:2021.06-4.module+el8.10.0+22904+d0fedeff6
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca870340:3.0.1-1.module+el8.10.0+22904+d0fedeff3
OSV records
ALPINE-CVE-2025-31498RHSA-2025:4461RHSA-2025:7426
Also known as
RHSA-2025:7537

Charts affected

32 by stars
ChartLatestAffected imagesRadar Score
vaultwardengabe565Verified publisher0.16.11 of 1See more

vaultwarden gabe565 0.16.1

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.33.2-alpine63cce7624f65
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

451
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

4,531
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

2,811
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

2,654
agentareaagentareaVerified publisher0.0.181 of 16See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
temporalio/ui:2.39.0b768f87f18b5
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

14,914
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.27.2b44cbfeb43db
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

12,473
sequencerastria4.0.01 of 3See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
cometbft/cometbft:v0.38.1722c2ac018f40
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

6,298
bitmagnetbrandan-schmitz-helm-chartsVerified publisher1.0.61 of 2See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

1,720
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

15,027
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
nodejs@1:12.18.2-1.module+el8.2.0+7233+61d664c1
nodejs-nodemon@1.18.3-1.module+el8.1.0+3369+37ae6a45
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:3.0.1-1.module+el8.10.0+22904+d0fedeff

Open the chart page →

25,456
door-agentcnoVerified publisher3.0.152 of 15See more

door-agent cno 3.0.15

2 of the 15 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
library/docker:27-cli851f91d24121
c-ares@1.34.3-r0
1.34.5-r0
library/docker:27-dindaa3df78ecf32
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

19,338
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

2,097
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

3,470
perliteextrim-helm-chartsVerified publisher0.1.01 of 1See more

perlite extrim-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
extrim/perlite:1.5.99cb7eb5598b6
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

1,440
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

7,691
borgmaticgabe565Verified publisher0.10.11 of 1See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

2,438
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

4,647
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff

Open the chart page →

24,161
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff

Open the chart page →

89,959
ingress-nginxifmethod-helm-charts4.12.11 of 2See more

ingress-nginx ifmethod-helm-charts 4.12.1

1 of the 2 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

1,476
ingress-nginxkubeblocksVerified publisher4.12.11 of 2See more

ingress-nginx kubeblocks 4.12.1

1 of the 2 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

1,476
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

2,589
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f127
1:20.19.1-1.module+el9.6.0+23053+4195b0b2
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
nodejs@1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
1:20.19.1-1.module+el9.6.0+23053+4195b0b2

Open the chart page →

18,922
hiveopstty0.1.81 of 4See more

hive opstty 0.1.8

1 of the 4 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
alpine/curl:8.12.08943e8c7e8e4
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

4,523
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

1,667
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
nodejs@1:14.17.3-2.module+el8.4.0+11738+3bd42762
nodejs-nodemon@2.0.3-1.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:3.0.1-1.module+el8.10.0+22904+d0fedeff

Open the chart page →

29,227
wallosrm3lVerified publisher0.1.01 of 1See more

wallos rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

1,529
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
venturenox/sagawise:latestc11d32f18718
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

4,178
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
c-ares@1.34.4-r0
1.34.5-r0

Open the chart page →

2,817
secretssecrets-proxy1.0.61 of 1See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
udhos/secrets:1.0.6daa2b4eaac09
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

987
swr-cache-proxyswr-cache-proxy0.2.01 of 1See more

swr-cache-proxy swr-cache-proxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
nodejs@1:18.18.2-1.module+el8.8.0+20407+c11d40bd
nodejs-nodemon@3.0.1-1.module+el8.8.0+19757+8ca87034
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:3.0.1-1.module+el8.10.0+22904+d0fedeff

Open the chart page →

13,719
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2025-31498.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
c-ares@1.34.3-r0
1.34.5-r0

Open the chart page →

1,286

Container images carrying it

37 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
c-ares@1.34.3-r0
1.34.5-r0
2
alpine/curl:8.12.08943e8c7e8e4
c-ares@1.34.3-r0
1.34.5-r0
1
alpine/k8s:1.31.49c4976d47656
c-ares@1.34.3-r0
1.34.5-r0
1
alpine/k8s:1.32.3eec354133193
c-ares@1.34.3-r0
1.34.5-r0
1
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
c-ares@1.34.3-r0
1.34.5-r0
1
cometbft/cometbft:v0.38.1722c2ac018f40
c-ares@1.34.3-r0
1.34.5-r0
1
extrim/perlite:1.5.99cb7eb5598b6
c-ares@1.34.3-r0
1.34.5-r0
1
grafana/grafana:11.6.062d2b9d20a19
c-ares@1.34.3-r0
1.34.5-r0
1
library/docker:27-cli851f91d24121
c-ares@1.34.3-r0
1.34.5-r0
1
library/docker:27-dindaa3df78ecf32
c-ares@1.34.3-r0
1.34.5-r0
1
metabase/metabase:v0.53.4.17807bc5cad17
c-ares@1.34.3-r0
1.34.5-r0
1
saidsef/scapy-containerised:v2025.02f17f7c435891
c-ares@1.34.4-r0
1.34.5-r0
1
temporalio/auto-setup:1.27.2b44cbfeb43db
c-ares@1.34.3-r0
1.34.5-r0
1
temporalio/ui:2.39.0b768f87f18b5
c-ares@1.34.3-r0
1.34.5-r0
1
udhos/secrets:1.0.6daa2b4eaac09
c-ares@1.34.3-r0
1.34.5-r0
1
venturenox/sagawise:latestc11d32f18718
c-ares@1.34.3-r0
1.34.5-r0
1
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
nodejs@1:18.18.2-1.module+el8.8.0+20407+c11d40bd
nodejs-nodemon@3.0.1-1.module+el8.8.0+19757+8ca87034
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:3.0.1-1.module+el8.10.0+22904+d0fedeff
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
c-ares@1.34.3-r0
1.34.5-r0
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
c-ares@1.34.3-r0
1.34.5-r0
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff
1
ghcr.io/dani-garcia/vaultwarden:1.33.2-alpine63cce7624f65
c-ares@1.34.3-r0
1.34.5-r0
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
c-ares@1.34.3-r0
1.34.5-r0
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
c-ares@1.34.3-r0
1.34.5-r0
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
c-ares@1.34.3-r0
1.34.5-r0
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
c-ares@1.34.3-r0
1.34.5-r0
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
c-ares@1.34.3-r0
1.34.5-r0
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
c-ares@1.34.3-r0
1.34.5-r0
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
nodejs@1:20.16.0-1.module+el9.4.0+22197+9e60f127
1:20.19.1-1.module+el9.6.0+23053+4195b0b2
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
nodejs@1:14.16.0-2.module+el8.3.0+10180+b92e1eb6
nodejs-packaging@23-3.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:2021.06-4.module+el8.10.0+22904+d0fedeff
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
nodejs@1:12.18.2-1.module+el8.2.0+7233+61d664c1
nodejs-nodemon@1.18.3-1.module+el8.1.0+3369+37ae6a45
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:3.0.1-1.module+el8.10.0+22904+d0fedeff
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
nodejs@1:20.12.2-2.module+el9.4.0+21731+46b5b8a7
1:20.19.1-1.module+el9.6.0+23053+4195b0b2
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
nodejs@1:14.17.3-2.module+el8.4.0+11738+3bd42762
nodejs-nodemon@2.0.3-1.module+el8.3.0+6519+9f98ed83
1:20.19.1-1.module+el8.10.0+23054+5431297f
0:3.0.1-1.module+el8.10.0+22904+d0fedeff
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
c-ares@1.34.3-r0
1.34.5-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.