StackRadar

CVE-2025-32023

High

Advisory

Published 7 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.040
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
30
of 17,781 indexed, latest versions
Container images
28
deployed by those charts
Fix available
5 of 5
affected packages

Redis allows out of bounds writes in hyperloglog commands leading to RCE

Carried by container images the latest versions of 30 of 17,781 indexed charts deploy, on 28 images.

Affected packageAffected versionsFixed inImages
redisbitnami6.0.8-0, 6.0.12-0, 6.2.7-150, 7.0.8-0+12 more6.2.1919
redisdeb5:5.0.7-2ubuntu0.1, 5:7.0.15-1~deb12u1, 5:7.0.15-1~deb12u4, 5:7.0.15-1ubuntu0.24.04.15:7.0.15-1~deb12u5, 5:7.0.15-1ubuntu0.24.04.35
valkeybitnami8.1.2-0, 8.1.3-07.2.104
Redis(R)bitnami7.2.4-5, 7.2.5-06.2.192
Redis (TM)bitnami7.2.1, 7.2.4-46.2.192
OSV records
BIT-redis-2025-32023BIT-valkey-2025-32023DEBIAN-CVE-2025-32023UBUNTU-CVE-2025-32023
Also known as
BIT-keydb-2025-32023, GHSA-rp2m-q4j6-gr43, USN-8120-1

Charts affected

30 by stars
ChartLatestAffected imagesRadar Score
giteagiteaOfficialVerified publisher12.7.01 of 4See more

gitea gitea 12.7.0

1 of the 4 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
valkey@8.1.3-0
7.2.10

Open the chart page →

8,811
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:latest5927ff3702df
redis@8.0.3-1
6.2.19

Open the chart page →

6,699
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
redis@7.2.4-4
Redis (TM)@7.2.4-4
6.2.19
6.2.19

Open the chart page →

19,391
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.11-debian-11-r121161dcd293a0
redis@7.0.11-1
6.2.19

Open the chart page →

22,002
chatwootchatwootVerified publisher2.0.241 of 3See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:6.2.7-debian-11-r37788b908dd0d
redis@6.2.7-150
6.2.19

Open the chart page →

9,203
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
redis@7.4.3-0
6.2.19

Open the chart page →

14,956
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
netrisai/redis:6.0.12-debian-10-r3a4c0140d1696
redis@6.0.12-0
6.2.19

Open the chart page →

30,326
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
redis@7.2.5-0
Redis(R)@7.2.5-0
6.2.19
6.2.19

Open the chart page →

17,263
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
redis@5:7.0.15-1~deb12u1
5:7.0.15-1~deb12u5

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
redis@7.2.4-5
Redis(R)@7.2.4-5
6.2.19
6.2.19

Open the chart page →

28,839
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
redis@7.2.1-0
Redis (TM)@7.2.1
6.2.19
6.2.19

Open the chart page →

14,566
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
redis@7.4.2-1
6.2.19

Open the chart page →

15,863
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:latest0384ca2eec63
valkey@8.1.2-0
7.2.10

Open the chart page →

52,635
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.10-debian-11-r059293f5206b7
redis@7.0.10-0
6.2.19

Open the chart page →

9,847
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
redis@8.0.3-1
6.2.19

Open the chart page →

40,238
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis-cluster:7.4.3-debian-12-r0a53d023fdfaf
redis@7.4.3-0
6.2.19

Open the chart page →

20,900
rediscowboysysopVerified publisher21.2.61 of 1See more

redis cowboysysop 21.2.6

1 of the 1 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.0.2-debian-12-r4cdc2efa9c306
redis@8.0.2-1
6.2.19

Open the chart page →

2,621
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
redis@5:5.0.7-2ubuntu0.1
no fix listed

Open the chart page →

20,933
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
redis@5:7.0.15-1~deb12u4
5:7.0.15-1~deb12u5

Open the chart page →

9,653
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
redis@5:7.0.15-1ubuntu0.24.04.1
5:7.0.15-1ubuntu0.24.04.3

Open the chart page →

8,967
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:latest5927ff3702df
redis@8.0.3-1
6.2.19

Open the chart page →

14,801
valkeymesosphere-stable3.0.221 of 1See more

valkey mesosphere-stable 3.0.22

1 of the 1 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
valkey@8.1.3-0
7.2.10

Open the chart page →

2,622
redispetersandor15.2.21 of 1See more

redis petersandor 15.2.2

1 of the 1 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnami/redis:7.4.24e65bf641805
redis@7.4.2-1
6.2.19

Open the chart page →

2,722
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:8.1.3-debian-12-r34f0191fba7d3
valkey@8.1.3-0
7.2.10

Open the chart page →

25,934
redisredisVerified publisher0.1.11 of 1See more

redis redis 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/bitnami/redis:6.0.8.9e1e9cf5297a6
redis@6.0.8-0
6.2.19

Open the chart page →

1,594
redisredis-arm17.8.01 of 1See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
redis@7.0.8-1
6.2.19

Open the chart page →

1,906
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
redis@7.4.1-1
6.2.19

Open the chart page →

4,178
redis-high-availabilitysomeblackmagic1.3.101 of 3See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.8-debian-11-r0bf01d031ba8c
redis@7.0.8-0
6.2.19

Open the chart page →

3,148
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
redis@5:5.0.7-2ubuntu0.1
no fix listed

Open the chart page →

30,687
giteawenerme12.7.01 of 4See more

gitea wenerme 12.7.0

1 of the 4 container images this version deploys carry CVE-2025-32023.

Container imageDigestPackageFixed in
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
valkey@8.1.3-0
7.2.10

Open the chart page →

8,811

Container images carrying it

28 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/redis:latest5927ff3702df
redis@8.0.3-1
6.2.19
2
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
valkey@8.1.3-0
7.2.10
2
arunvelsriram/utils:latest655ad18fd8d6
redis@5:7.0.15-1ubuntu0.24.04.1
5:7.0.15-1ubuntu0.24.04.3
1
baserow/baserow:1.30.1df0c42eb67e8
redis@5:7.0.15-1~deb12u1
5:7.0.15-1~deb12u5
1
bitnamilegacy/redis:7.0.11-debian-11-r121161dcd293a0
redis@7.0.11-1
6.2.19
1
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
redis@8.0.3-1
6.2.19
1
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
redis@7.2.5-0
Redis(R)@7.2.5-0
6.2.19
6.2.19
1
bitnamilegacy/redis:7.0.10-debian-11-r059293f5206b7
redis@7.0.10-0
6.2.19
1
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
redis@7.4.2-1
6.2.19
1
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
redis@7.2.4-5
Redis(R)@7.2.4-5
6.2.19
6.2.19
1
bitnamilegacy/redis:6.2.7-debian-11-r37788b908dd0d
redis@6.2.7-150
6.2.19
1
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
redis@7.2.4-4
Redis (TM)@7.2.4-4
6.2.19
6.2.19
1
bitnamilegacy/redis:7.0.8-debian-11-r0bf01d031ba8c
redis@7.0.8-0
6.2.19
1
bitnamilegacy/redis:8.0.2-debian-12-r4cdc2efa9c306
redis@8.0.2-1
6.2.19
1
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
redis@7.2.1-0
Redis (TM)@7.2.1
6.2.19
6.2.19
1
bitnamilegacy/redis-cluster:7.4.3-debian-12-r0a53d023fdfaf
redis@7.4.3-0
6.2.19
1
bitnamilegacy/valkey:latest0384ca2eec63
valkey@8.1.2-0
7.2.10
1
bitnamilegacy/valkey:8.1.3-debian-12-r34f0191fba7d3
valkey@8.1.3-0
7.2.10
1
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
valkey@8.1.3-0
7.2.10
1
bitnami/redis:7.4.24e65bf641805
redis@7.4.2-1
6.2.19
1
middlewareeng/middleware:0.3.1747d880812f1
redis@5:7.0.15-1~deb12u4
5:7.0.15-1~deb12u5
1
netrisai/redis:6.0.12-debian-10-r3a4c0140d1696
redis@6.0.12-0
6.2.19
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
redis@5:5.0.7-2ubuntu0.1
no fix listed
1
venturenox/redis:latest83b471c193ba
redis@7.4.1-1
6.2.19
1
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
redis@7.0.8-1
6.2.19
1
mcr.microsoft.com/oss/bitnami/redis:6.0.8.9e1e9cf5297a6
redis@6.0.8-0
6.2.19
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
redis@5:5.0.7-2ubuntu0.1
no fix listed
1
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
redis@7.4.3-0
6.2.19
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.