CVE-2025-32912

Medium

Advisory

Published 14 Apr 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 37; of 17,781 indexed, latest versions
Container images: 40; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 37 of 17,781 indexed charts deploy, on 40 images.

Affected package	Affected versions	Fixed in	Images
libsoup2.4deb	2.52.2-1ubuntu0.2, 2.52.2-1ubuntu0.3, 2.62.1-1ubuntu0.1, 2.62.1-1ubuntu0.4+5 more	2.52.2-1ubuntu0.3+esm2, 2.62.1-1ubuntu0.4+esm3, 2.70.0-1ubuntu0.4, 2.74.2-3ubuntu0.4+1 more	40
libsoup3deb	3.0.7-0ubuntu1, 3.2.2-2	3.0.7-0ubuntu1+esm3, 3.2.3-0+deb12u1	2

OSV records: DEBIAN-CVE-2025-32912 UBUNTU-CVE-2025-32912
Also known as: USN-7490-1, USN-7490-2, USN-7490-3

Charts affected

37 by stars

Chart

Latest

Affected images

Radar Score

zabbixzabbix-community

7.1.0

1 of 5 See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	libsoup2.4@2.72.0-2	2.74.3-6ubuntu1.4

Open the chart page →

13,664

calibregeek-cookbook

5.4.2

1 of 1 See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
linuxserver/calibre :version-v5.21.0	a847b5b2d860	libsoup2.4@2.62.1-1ubuntu0.4	2.62.1-1ubuntu0.4+esm3

Open the chart page →

22,773

browserless-chromesagikazarmark

0.0.5

1 of 1 See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

24,488

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

13,635

games-on-whalesgeek-cookbook

1.8.2

3 of 7 See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

35,305

homebridgegeek-cookbook

5.3.2

1 of 1 See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

15,653

tdarrgeek-cookbook

4.6.2

2 of 2 See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
haveagitgat/tdarr :2.00.18	1256348872ce	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

31,000

smarter-demosmarter

0.1.5

3 of 7 See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

45,832

tdarrvhdirk

5.0.5

2 of 2 See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

26,657

games-on-whalesangelnu

2.0.0

3 of 7 See more

games-on-whales angelnu 2.0.0

3 of the 7 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

42,126

arma-reforgerarma-reforger

0.5.3

1 of 8 See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

23,353

videoaugmentationassist-iot-video-augmentation

0.1.0

1 of 3 See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

13,913

webpagetest-agentcloudnativeapp

0.2.0

1 of 1 See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	libsoup2.4@2.52.2-1ubuntu0.2	2.52.2-1ubuntu0.3+esm2

Open the chart page →

77,758

seafilederp

3.2.0

1 of 1 See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :10.0.1	70628f29c663	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

14,856

photoprismdjjudas21

99.99.99

1 of 1 See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
photoprism/photoprism :240711-ce	fc6fd632ca74	libsoup2.4@2.74.3-6ubuntu1	2.74.3-6ubuntu1.4

Open the chart page →

16,954

seafileeleksbai

0.1.1

1 of 3 See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.10	6693911bcc40	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

25,122

supportpalevilgn0me

0.1.6

1 of 1 See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

20,933

airsonicgeek-cookbook

6.4.2

1 of 1 See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

18,230

mopidygeek-cookbook

0.1.2

1 of 1 See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
jaedb/iris :latest	048cfbf58d57	libsoup2.4@2.74.3-1+deb12u1 libsoup3@3.2.2-2	no fix listed 3.2.3-0+deb12u1

Open the chart page →

12,958

openkmgeek-cookbook

4.2.0

1 of 1 See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
openkm/openkm-ce :6.3.11	3bc465a7461b	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

27,949

photoprismgeek-cookbook

7.2.0

1 of 1 See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
photoprism/photoprism :220629-jammy	2954334adbda	libsoup2.4@2.74.2-3	2.74.2-3ubuntu0.4

Open the chart page →

19,503

puppeteergeek-cookbook

1.2.2

1 of 1 See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

15,730

seafilegeek-cookbook

3.2.0

1 of 1 See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

24,293

countlyhelmforge

1.2.6

1 of 3 See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
countly/countly-server :25.05.4	e3c238248f99	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

18,813

hydrahydra

0.9.5

1 of 2 See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	libsoup2.4@2.74.3-1+deb12u1	no fix listed

Open the chart page →

9,011

isolated-vmhydra

0.9.4

1 of 1 See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	libsoup2.4@2.74.3-1+deb12u1	no fix listed

Open the chart page →

7,733

itm-servicesintel

2.0.0

1 of 8 See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

18,066

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	libsoup2.4@2.74.2-3	2.74.2-3ubuntu0.4

Open the chart page →

10,716

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	libsoup2.4@2.62.1-1ubuntu0.4	2.62.1-1ubuntu0.4+esm3

Open the chart page →

27,633

cdn-remoteopencord

0.2.4

2 of 3 See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	libsoup2.4@2.62.1-1ubuntu0.1	2.62.1-1ubuntu0.4+esm3
omecproject/cdn-video-repo :1.0.0	d59ccb138ffb	libsoup2.4@2.52.2-1ubuntu0.3	2.52.2-1ubuntu0.3+esm2

Open the chart page →

63,223

mcord-cdn-remoteopencord

0.1.6

1 of 2 See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	libsoup2.4@2.52.2-1ubuntu0.3	2.52.2-1ubuntu0.3+esm2

Open the chart page →

42,614

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	libsoup2.4@2.52.2-1ubuntu0.3	2.52.2-1ubuntu0.3+esm2

Open the chart page →

29,124

seafilephybros-helm-charts

4.0.1

1 of 1 See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :9.0.9	7ac833196f60	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

22,084

javareact-java

0.1.0

1 of 1 See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
project2team4/react :latest	3ff031a08887	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

15,520

testing-multitoolsomeblackmagic

0.1.2

1 of 1 See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

30,687

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4

Open the chart page →

18,756

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-32912.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libsoup2.4@2.74.2-3 libsoup3@3.0.7-0ubuntu1	2.74.2-3ubuntu0.4 3.0.7-0ubuntu1+esm3

Open the chart page →

14,100

Container images carrying it

40 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	libsoup2.4@2.52.2-1ubuntu0.3	2.52.2-1ubuntu0.3+esm2	3
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	libsoup2.4@2.74.3-1+deb12u1	no fix listed	2
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
countly/countly-server :25.05.4	e3c238248f99	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
haveagitgat/tdarr :2.00.18	1256348872ce	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
jaedb/iris :latest	048cfbf58d57	libsoup2.4@2.74.3-1+deb12u1 libsoup3@3.2.2-2	no fix listed 3.2.3-0+deb12u1	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	libsoup2.4@2.62.1-1ubuntu0.4	2.62.1-1ubuntu0.4+esm3	1
livekit/ingress :v1.2.2	1ab01641b366	libsoup2.4@2.74.2-3	2.74.2-3ubuntu0.4	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	libsoup2.4@2.62.1-1ubuntu0.1	2.62.1-1ubuntu0.4+esm3	1
openkm/openkm-ce :6.3.11	3bc465a7461b	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
photoprism/photoprism :220629-jammy	2954334adbda	libsoup2.4@2.74.2-3	2.74.2-3ubuntu0.4	1
photoprism/photoprism :240711-ce	fc6fd632ca74	libsoup2.4@2.74.3-6ubuntu1	2.74.3-6ubuntu1.4	1
project2team4/react :latest	3ff031a08887	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
scrapinghub/splash :3.4.1	a5f89bc84606	libsoup2.4@2.62.1-1ubuntu0.4	2.62.1-1ubuntu0.4+esm3	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
seafileltd/seafile-mc :10.0.1	70628f29c663	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	libsoup2.4@2.52.2-1ubuntu0.2	2.52.2-1ubuntu0.3+esm2	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libsoup2.4@2.74.2-3 libsoup3@3.0.7-0ubuntu1	2.74.2-3ubuntu0.4 3.0.7-0ubuntu1+esm3	1
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	libsoup2.4@2.72.0-2	2.74.3-6ubuntu1.4	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	libsoup2.4@2.70.0-1	2.70.0-1ubuntu0.4	1