StackRadar

CVE-2025-3198

Medium

Advisory

Published 4 Apr 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
354
of 17,781 indexed, latest versions
Container images
346
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 354 of 17,781 indexed charts deploy, on 346 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.30-21ubuntu1~18.04, 2.30-21ubuntu1~18.04.1, 2.30-21ubuntu1~18.04.2, 2.30-21ubuntu1~18.04.3+29 more2.30-21ubuntu1~18.04.9+esm5, 2.34-6ubuntu1.11+esm1, 2.38-4ubuntu2.10, 2.42-4ubuntu2.6343
binutilsapk2.43.1-r2, 2.44-r02.43.1-r3, 2.44-r23
OSV records
ALPINE-CVE-2025-3198DEBIAN-CVE-2025-3198UBUNTU-CVE-2025-3198
Also known as
USN-7899-1

Charts affected

354 by stars
ChartLatestAffected imagesRadar Score
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-3198.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
binutils@2.44-3
no fix listed

Open the chart page →

3,911
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-3198.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
binutils@2.40-2
no fix listed

Open the chart page →

7,085
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-3198.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
binutils@2.40-2
no fix listed

Open the chart page →

10,001
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-3198.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
binutils@2.44-3
no fix listed

Open the chart page →

5,560

Container images carrying it

346 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/phpmyadmin:5.2.3-apache:latest3a8a8d6b5289
binutils@2.44-3
no fix listed
7
library/wordpress:7.1.0-apache:latest5a93c470ae82
binutils@2.44-3
no fix listed
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
binutils@2.40-2
no fix listed
6
solsson/kafka:latest41e5d8f6f290
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.11+esm1
5
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
binutils@2.40-2
no fix listed
4
mastercloudapps/planner:v1.2340a950b311b2
binutils@2.38-4ubuntu2.1
2.38-4ubuntu2.10
4
codeurjc/planner:v1.0800cf520c245
binutils@2.38-4ubuntu2.1
2.38-4ubuntu2.10
3
guacamole/guacamole:1.6.0f344085e618b
binutils@2.42-4ubuntu2.5
2.42-4ubuntu2.6
3
jacobalberty/unifi:v10.0.162896c0ab82d33
binutils@2.34-6ubuntu1.11
2.34-6ubuntu1.11+esm1
3
library/node:ltsbe23f54a88d3
binutils@2.40-2
no fix listed
3
localstack/localstack-pro:latest4aef81c53168
binutils@2.44-3
no fix listed
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
binutils@2.40-2
no fix listed
3
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
binutils@2.40-2
no fix listed
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
binutils@2.44-3
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
binutils@2.44-3
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
binutils@2.40-2
no fix listed
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
binutils@2.44-3
no fix listed
2
library/phpmyadmin:5.2.16e75aa8f767c
binutils@2.40-2
no fix listed
2
library/python:3.7eedf63967cdb
binutils@2.40-2
no fix listed
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
binutils@2.44-3
no fix listed
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
binutils@2.40-2
no fix listed
2
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
binutils@2.44-3
no fix listed
2
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
binutils@2.44-3
no fix listed
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
binutils@2.40-2
no fix listed
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.11+esm1
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
binutils@2.34-6ubuntu1.9
2.34-6ubuntu1.11+esm1
2
uffizzi/controller:latest0344805f267b
binutils@2.40-2
no fix listed
2
vdiogov/glpi-conteiner:latest6945f84f0058
binutils@2.40-2
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
binutils@2.42-4ubuntu2.5
2.42-4ubuntu2.6
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
binutils@2.38-4ubuntu2
2.38-4ubuntu2.10
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
binutils@2.44-r0
2.44-r2
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
binutils@2.40-2
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
binutils@2.40-2
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
binutils@2.38-3ubuntu1
2.38-4ubuntu2.10
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
binutils@2.30-21ubuntu1~18.04.3
2.30-21ubuntu1~18.04.9+esm5
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
binutils@2.44-3
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
binutils@2.40-2
no fix listed
1
adamzammit/limesurvey:7.0.15e75e2f455c8d
binutils@2.44-3
no fix listed
1
akaunting/akaunting:3.0.1552811b36ec3a
binutils@2.40-2
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
binutils@2.40-2
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
binutils@2.30-21ubuntu1~18.04.7
2.30-21ubuntu1~18.04.9+esm5
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
binutils@2.38-4ubuntu2.8
2.38-4ubuntu2.10
1
apachepulsar/pulsar:2.9.0d056c89b7131
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.11+esm1
1
apachepulsar/pulsar:2.8.2d538416d5afe
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.11+esm1
1
apache/superset:4.0.1ab9467fd712c
binutils@2.40-2
no fix listed
1
aristidetm/basic-notebook:3.6.5469dbc951224
binutils@2.40-2
no fix listed
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
binutils@2.40-2
no fix listed
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
binutils@2.40-2
no fix listed
1
assistiot/location_processing:lateste9bae124095f
binutils@2.38-4ubuntu2
2.38-4ubuntu2.10
1
assistiot/open_api_backend:1.1.230812ba93555
binutils@2.38-4ubuntu2.4
2.38-4ubuntu2.10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.