StackRadar

CVE-2025-32988

High

Advisory

Published 10 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,285
of 17,790 indexed, latest versions
Container images
1,351
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,285 of 17,790 indexed charts deploy, on 1,351 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+32 more3.5.18-1ubuntu1.6+esm2, 3.6.13-2ubuntu1.12+esm1, 3.7.3-4ubuntu1.7, 3.7.9-2+deb12u5+2 more1,325
gnutlsapk3.8.5-r0, 3.8.8-r03.8.12-r026
OSV records
ALPINE-CVE-2025-32988DEBIAN-CVE-2025-32988UBUNTU-CVE-2025-32988
Also known as
USN-7635-1, USN-7742-1

Charts affected

1,285 by stars
ChartLatestAffected imagesRadar Score
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.4

Open the chart page →

4,197
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

13,812
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

3,732
clowder2ncsaVerified publisher1.9.72 of 12See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

37,504
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

14,363
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

5,062
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
gnutls28@3.7.9-2
3.7.9-2+deb12u5
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

14,884
dhcp-serveropencord1.0.21 of 1See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
networkboot/dhcpd:lateste99bbfbd6fb2
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.7

Open the chart page →

4,208
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

5,849
opentelemetry-demoopentelemetry-helmVerified publisher0.41.22 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.2

2 of the 34 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
gnutls28@3.7.3-4ubuntu1.9
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

22,916
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

6,936
opikopikOfficialVerified publisher2.2.642 of 13See more

opik opik 2.2.64

2 of the 13 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/zookeeper:3.9.4dfa9ba46d14b
gnutls28@3.7.3-4ubuntu1.7
no fix listed
redis/redis-stack-server:7.2.0-v10e44b2b49d059
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.7

Open the chart page →

14,444
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
gnutls28@3.7.3-4ubuntu1.9
no fix listed
shaowenchen/ops-server:latest315444f703f4
gnutls28@3.7.3-4ubuntu1.7
no fix listed

Open the chart page →

9,101
fahclientpcktdmp2.6.01 of 2See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
foldingathome/fah-gpu:latest5ef7742d1eb4
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm2

Open the chart page →

4,735
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.7

Open the chart page →

7,622
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

32,033
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/mariadb:11.7.2fcc7fcd7114a
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4

Open the chart page →

5,490
pzserverpzserver0.1.171 of 2See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
lis314/project-zomboid-docker:latestaa2089c37920
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

3,224
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.7

Open the chart page →

6,868
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4

Open the chart page →

2,815
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

7,474
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

2,675
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
gnutls28@3.7.3-4ubuntu1.6
3.7.3-4ubuntu1.7

Open the chart page →

7,489
atuinrm3lVerified publisher0.11.01 of 3See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

6,570
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

9,913
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

10,165
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1

Open the chart page →

6,089
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1

Open the chart page →

6,921
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1

Open the chart page →

7,570
routehub-client-hubroutehub-helm1.0.02 of 3See more

routehub-client-hub routehub-helm 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm1
timescale/timescaledb-ha:pg16d7db8f1085a3
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

13,018
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm2

Open the chart page →

13,558
kyoorubxkubeVerified publisher0.1.104 of 9See more

kyoo rubxkube 0.1.10

4 of the 9 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

30,428
conference-appsalaboy1.0.03 of 7See more

conference-app salaboy 1.0.0

3 of the 7 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinnedce9ce8293e4e
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinnedbb64bf14467d
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned799c35f9f306
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7

Open the chart page →

11,031
schemaheroschemahero1.4.01 of 1See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
schemahero/schemahero-manager:0.22.11609e1a05cd3
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

2,184
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

5,220
sentry-k8ssentry-k8sVerified publisher1.4.12 of 11See more

sentry-k8s sentry-k8s 1.4.1

2 of the 11 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
gnutls28@3.7.3-4ubuntu1.7
no fix listed
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

16,599
seq-input-gelfseq-input-gelfVerified publisher0.3.11 of 2See more

seq-input-gelf seq-input-gelf 0.3.1

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
datalust/seq-input-gelf:3.0.441-x643de34aed5642
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1

Open the chart page →

3,555
vuiseriohub1.0.61 of 3See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
dserio83/velero-watchdog:0.1.8d5deae589229
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

11,578
mssqlserver-2019simcube1.2.31 of 1See more

mssqlserver-2019 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

6,885
clickhousesinextraVerified publisher0.22.01 of 1See more

clickhouse sinextra 0.22.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3.1092098d3b31dd
gnutls28@3.7.3-4ubuntu1.8
no fix listed

Open the chart page →

2,015
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

4,277
gitlab-omnibusslamdev0.1.61 of 2See more

gitlab-omnibus slamdev 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
daedalusproject/base_kubectl:latest6f72b5119eda
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm1

Open the chart page →

2,851
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

2,945
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1

Open the chart page →

46,047
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

5,699
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

10,450
squidsquid-helmVerified publisher0.1.01 of 1See more

squid squid-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ubuntu/squid:5.2-22.04_beta723891b5bc74
gnutls28@3.7.3-4ubuntu1.7
no fix listed

Open the chart page →

2,624
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
graphprotocol/graph-node:v0.37.0f4452cdedd68
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

4,694
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1

Open the chart page →

13,536
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm1

Open the chart page →

25,005

Container images carrying it

1,351 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.