StackRadar

CVE-2025-32421

Low

Advisory

Published 15 May 2025In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
39
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
1 of 1
affected package

Next.js Race Condition to Cache Poisoning

Carried by container images the latest versions of 39 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
nextnpm3.2.3, 9.3.2, 11.0.1, 12.1.0+22 more14.2.2436
OSV records
GHSA-qpjv-v59x-3qc4

Charts affected

39 by stars
ChartLatestAffected imagesRadar Score
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
supabase/studio:20241021-9f9b08326d8070c55e9
next@14.2.13
14.2.24

Open the chart page →

23,123
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
next@13.4.12
14.2.24

Open the chart page →

2,581
umamiwaldo-visionVerified publisher0.0.11 of 1See more

umami waldo-vision 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
next@12.3.2
14.2.24

Open the chart page →

1,255
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
next@12.3.4
14.2.24

Open the chart page →

14,238
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
next@3.2.3
14.2.24

Open the chart page →

9,261
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
next@12.3.1
14.2.24

Open the chart page →

10,311
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
next@12.3.4
14.2.24

Open the chart page →

2,702
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
next@11.0.1
14.2.24

Open the chart page →

3,444
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
langgenius/dify-web:0.6.11a2a294743634
next@14.1.0
14.2.24

Open the chart page →

20,403
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
next@3.2.3
14.2.24

Open the chart page →

5,300
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
next@14.1.3
14.2.24

Open the chart page →

31,844
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
next@14.2.5
14.2.24

Open the chart page →

30,234
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
next@3.2.3
14.2.24

Open the chart page →

25,443
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
next@14.1.4
14.2.24

Open the chart page →

4,497
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
next@12.3.4
14.2.24

Open the chart page →

3,071
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
next@14.1.1
14.2.24

Open the chart page →

1,977
homarrdelerVerified publisher1.0.11 of 1See more

homarr deler 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
next@13.4.12
14.2.24

Open the chart page →

1,924
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
langgenius/dify-web:1.0.0d64914ff0d6d
next@14.2.15
14.2.24

Open the chart page →

19,224
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
next@14.2.6
14.2.24

Open the chart page →

2,862
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
next@14.2.3
14.2.24

Open the chart page →

1,344
blobscanethereum-helm-chartsVerified publisher0.1.11 of 1See more

blobscan ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ethpandaops/blobscan:latest7a9ab6370657
next@12.3.1
14.2.24

Open the chart page →

1,329
mandefactlyVerified publisher0.5.161 of 3See more

mande factly 0.5.16

1 of the 3 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
factly/mande-web:0.34.1742355964b0e
next@13.5.3
14.2.24

Open the chart page →

4,777
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
next@14.2.2
14.2.24

Open the chart page →

4,650
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
next@14.2.5
14.2.24
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
next@14.2.5
14.2.24

Open the chart page →

49,025
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
next@12.3.1
14.2.24

Open the chart page →

2,682
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
next@12.3.1
14.2.24

Open the chart page →

2,682
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
next@12.1.0
14.2.24

Open the chart page →

4,230
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
next@13.5.2
14.2.24

Open the chart page →

2,685
dashboardleechistest1.0.01 of 1See more

dashboard leechistest 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
next@14.2.3
14.2.24

Open the chart page →

1,344
squareonelsst-sqre0.4.11 of 1See more

squareone lsst-sqre 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
lsstsqre/squareone:0.4.09ded78e7fe03
next@11.0.1
14.2.24

Open the chart page →

2,247
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
next@13.5.6
14.2.24

Open the chart page →

4,647
middleware-odigosmiddleware-labsVerified publisher0.2.411 of 6See more

middleware-odigos middleware-labs 0.2.41

1 of the 6 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
next@12.1.6
14.2.24

Open the chart page →

8,370
middleware-visionmiddleware-labsVerified publisher0.2.651 of 6See more

middleware-vision middleware-labs 0.2.65

1 of the 6 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
next@12.1.6
14.2.24

Open the chart page →

8,361
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
next@14.2.4
14.2.24

Open the chart page →

5,017
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
next@13.5.3
14.2.24

Open the chart page →

2,969
counter-dhlsikademo0.3.01 of 3See more

counter-dhl sikademo 0.3.0

1 of the 3 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
next@13.0.7
14.2.24

Open the chart page →

4,820
parkingsikalabs0.1.01 of 1See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ondrejsika/parking:latestb1fd497416c8
next@9.3.2
14.2.24

Open the chart page →

3,696
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
next@13.5.11
14.2.24

Open the chart page →

2,789
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2025-32421.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
next@13.2.4
14.2.24

Open the chart page →

3,474

Container images carrying it

36 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
next@12.3.1
14.2.24
3
gradiant/open5gs-webui:2.7.5fbd10c017541
next@3.2.3
14.2.24
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
next@14.2.3
14.2.24
2
documenso/documenso:v1.8.17f16a9449f18
next@14.2.6
14.2.24
1
ethpandaops/blobscan:latest7a9ab6370657
next@12.3.1
14.2.24
1
factly/mande-web:0.34.1742355964b0e
next@13.5.3
14.2.24
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
next@12.3.4
14.2.24
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
next@14.2.2
14.2.24
1
kyso/kyso-front:lateste52595c5c16f
next@13.5.2
14.2.24
1
langgenius/dify-web:0.6.11a2a294743634
next@14.1.0
14.2.24
1
langgenius/dify-web:1.0.0d64914ff0d6d
next@14.2.15
14.2.24
1
linuxserver/overseerr:1.35.06108ed066d4a
next@12.3.4
14.2.24
1
lsstsqre/squareone:0.4.09ded78e7fe03
next@11.0.1
14.2.24
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
next@12.1.0
14.2.24
1
ondrejsika/parking:latestb1fd497416c8
next@9.3.2
14.2.24
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
next@13.5.3
14.2.24
1
supabase/studio:20241021-9f9b08326d8070c55e9
next@14.2.13
14.2.24
1
treskon/portrait-ui:DEV-lateste7970783bc8d
next@14.1.3
14.2.24
1
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
next@14.1.1
14.2.24
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
next@13.4.12
14.2.24
1
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
next@13.4.12
14.2.24
1
ghcr.io/ajnart/homarr:lateste103abadfb52
next@13.5.11
14.2.24
1
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
next@14.1.4
14.2.24
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
next@13.5.6
14.2.24
1
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
next@12.1.6
14.2.24
1
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
next@12.1.6
14.2.24
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
next@13.0.7
14.2.24
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
next@14.2.4
14.2.24
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
next@14.2.5
14.2.24
1
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
next@14.2.5
14.2.24
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
next@11.0.1
14.2.24
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
next@12.3.4
14.2.24
1
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
next@12.3.2
14.2.24
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
next@13.2.4
14.2.24
1
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
next@14.2.5
14.2.24
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
next@3.2.3
14.2.24
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.