StackRadar

CVE-2025-32462

High

Advisory

Published 30 Jun 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.043
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
103
of 17,781 indexed, latest versions
Container images
116
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: sudo security update

Carried by container images the latest versions of 103 of 17,781 indexed charts deploy, on 116 images.

Affected packageAffected versionsFixed inImages
sudodeb1.8.9p5-1ubuntu1, 1.8.9p5-1ubuntu1.4, 1.8.16-0ubuntu1.5, 1.8.16-0ubuntu1.7+19 more1.8.9p5-1ubuntu1.5+esm8, 1.8.16-0ubuntu1.10+esm3, 1.8.21p2-3ubuntu1.6+esm1, 1.8.31-1ubuntu1.5+esm1+4 more115
sudorpm1.8.29-10.el80:1.9.5p2-1.el8_10.11
OSV records
DEBIAN-CVE-2025-32462RHSA-2025:10110UBUNTU-CVE-2025-32462DLA-4235-1
Also known as
DSA-5954-1, RHSA-2025:10836, USN-7604-1, USN-7604-2

Charts affected

103 by stars
ChartLatestAffected imagesRadar Score
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-32462.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
sudo@1.8.21p2-3ubuntu1.4
1.8.21p2-3ubuntu1.6+esm1

Open the chart page →

10,514
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-32462.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
sudo@1.9.9-1ubuntu2.2
1.9.9-1ubuntu2.5

Open the chart page →

6,232
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-32462.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
sudo@1.8.21p2-3ubuntu1.2
1.8.21p2-3ubuntu1.6+esm1

Open the chart page →

10,843

Container images carrying it

116 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
istio/ztunnel:1.25.005f3972d80a9
sudo@1.9.15p5-3ubuntu5
1.9.15p5-3ubuntu5.24.04.1
1
jaedb/iris:latest048cfbf58d57
sudo@1.9.13p3-1+deb12u1
1.9.13p3-1+deb12u2
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
sudo@1.8.31-1ubuntu1.1
1.8.31-1ubuntu1.5+esm1
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
sudo@1.8.21p2-3ubuntu1.4
1.8.21p2-3ubuntu1.6+esm1
1
linuxserver/cloud9:latest45c5fe102ff3
sudo@1.8.21p2-3ubuntu1.4
1.8.21p2-3ubuntu1.6+esm1
1
linuxserver/code-server:4.10.1a5e43a05ae79
sudo@1.9.9-1ubuntu2.3
1.9.9-1ubuntu2.5
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
sudo@1.9.5p2-3+deb11u1
1.9.5p2-3+deb11u2
1
mautic/mautic:v4-apache94ea4acf4049
sudo@1.9.5p2-3+deb11u1
1.9.5p2-3+deb11u2
1
mbround18/valheim:3.1.070bd4da591cd
sudo@1.9.9-1ubuntu2.4
1.9.9-1ubuntu2.5
1
mediagis/nominatim:3.7c15e941485ef
sudo@1.8.31-1ubuntu1.2
1.8.31-1ubuntu1.5+esm1
1
mediagis/nominatim:4.2d0eae7b51374
sudo@1.9.9-1ubuntu2.4
1.9.9-1ubuntu2.5
1
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
sudo@1.8.21p2-3ubuntu1.4
1.8.21p2-3ubuntu1.6+esm1
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
openthread/otbr:latestf307f59f6432
sudo@1.8.21p2-3ubuntu1.6
1.8.21p2-3ubuntu1.6+esm1
1
opsmx11/issuegen:v2.1.05c50ca123d88
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm8
1
photoprism/photoprism:220629-jammy2954334adbda
sudo@1.9.9-1ubuntu2
1.9.9-1ubuntu2.5
1
photoprism/photoprism:240711-cefc6fd632ca74
sudo@1.9.15p5-3ubuntu5
1.9.15p5-3ubuntu5.24.04.1
1
pihole/pihole:2023.05.0b83258064f54
sudo@1.9.5p2-3+deb11u1
1.9.5p2-3+deb11u2
1
project2team4/react:latest3ff031a08887
sudo@1.8.31-1ubuntu1.2
1.8.31-1ubuntu1.5+esm1
1
resouer/redis-slave:v2e2f198b49ba7
sudo@1.8.9p5-1ubuntu1
1.8.9p5-1ubuntu1.5+esm8
1
rundeck/rundeck:3.2.74d64fe56f767
sudo@1.8.16-0ubuntu1.9
1.8.16-0ubuntu1.10+esm3
1
rundeck/rundeck:3.0.16b13e8059ad72
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10+esm3
1
stackstorm/st2actionrunner:3.888235ba70cad
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
stackstorm/st2api:3.86f56d239d280
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
stackstorm/st2auth:3.833ecfda16608
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
stackstorm/st2notifier:3.8f190a6212195
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
stackstorm/st2rulesengine:3.8259503496ff9
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
stackstorm/st2scheduler:3.8b1de2055c362
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
stackstorm/st2stream:3.81c8904a3bf67
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
stackstorm/st2timersengine:3.81bf35bfaf00c
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
stackstorm/st2workflowengine:3.819fdfffdbba8
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
supabase/realtime:v2.33.8d207e6e23ad3
sudo@1.9.13p3-1+deb12u1
1.9.13p3-1+deb12u2
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
sudo@1.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
1
t3nde/tideways:1.7.2777e008f764db
sudo@1.9.5p2-3
1.9.5p2-3+deb11u2
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
sudo@1.8.16-0ubuntu1.5
1.8.16-0ubuntu1.10+esm3
1
voltha/voltha-envoy:1.6.059ab2a00f712
sudo@1.8.9p5-1ubuntu1.4
1.8.9p5-1ubuntu1.5+esm8
1
wavefronthq/proxy:9.2d1064d28f6eb
sudo@1.8.21p2-3ubuntu1.2
1.8.21p2-3ubuntu1.6+esm1
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
sudo@1.9.9-1ubuntu2
1.9.9-1ubuntu2.5
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10+esm3
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
sudo@1.8.31-1ubuntu1.2
1.8.31-1ubuntu1.5+esm1
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
sudo@1.8.16-0ubuntu1.7
1.8.16-0ubuntu1.10+esm3
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
sudo@1.8.31-1ubuntu1.2
1.8.31-1ubuntu1.5+esm1
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
sudo@1.9.15p5-3ubuntu5
1.9.15p5-3ubuntu5.24.04.1
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
sudo@1.8.31-1ubuntu1.4
1.8.31-1ubuntu1.5+esm1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
sudo@1.9.13p3-1+deb12u1
1.9.13p3-1+deb12u2
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
sudo@1.9.13p3-1+deb12u1
1.9.13p3-1+deb12u2
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
sudo@1.9.13p3-1+deb12u1
1.9.13p3-1+deb12u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.