StackRadar

CVE-2025-32988

High

Advisory

Published 10 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,285
of 17,790 indexed, latest versions
Container images
1,351
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,285 of 17,790 indexed charts deploy, on 1,351 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+32 more3.5.18-1ubuntu1.6+esm2, 3.6.13-2ubuntu1.12+esm1, 3.7.3-4ubuntu1.7, 3.7.9-2+deb12u5+2 more1,325
gnutlsapk3.8.5-r0, 3.8.8-r03.8.12-r026
OSV records
ALPINE-CVE-2025-32988DEBIAN-CVE-2025-32988UBUNTU-CVE-2025-32988
Also known as
USN-7635-1, USN-7742-1

Charts affected

1,285 by stars
ChartLatestAffected imagesRadar Score
kafkacagriekinVerified publisher0.2.01 of 2See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
apache/kafka:4.1.0bff074a5d005
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

2,399
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
calltelemetry/web:0.8.1-rc7205d13269e350
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

10,661
pagescamden-pages1.0.02 of 3See more

pages camden-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm1
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm2

Open the chart page →

20,242
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

8,024
geoservercamptocamp20.0.37 of 12See more

geoserver camptocamp2 0.0.3

7 of the 12 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
library/postgres:122f2a8c2a7d10
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

88,618
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

3,334
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

5,062
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm2

Open the chart page →

6,153
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

5,935
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

10,867
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

14,179
pagescarina-pages1.0.02 of 3See more

pages carina-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm1
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm2

Open the chart page →

20,242
pagescarmel-pages-dell1.0.02 of 3See more

pages carmel-pages-dell 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm1
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm2

Open the chart page →

20,242
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm1

Open the chart page →

9,525
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

15,490
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
litmuschaos/mongo:4.2.899961210d467
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm2

Open the chart page →

16,412
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
sigp/lighthouse:v8.1.344aa773dcf27
gnutls28@3.7.3-4ubuntu1.8
no fix listed

Open the chart page →

7,501
helioscharonVerified publisher0.1.51 of 1See more

helios charon 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
obolnetwork/helios:e10e753cb7e97d39d46
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4

Open the chart page →

2,133
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

5,840
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm2

Open the chart page →

12,816
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

4,059
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm1

Open the chart page →

12,550
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

4,865
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7

Open the chart page →

6,514
tor-proxychronicleVerified publisher0.1.01 of 1See more

tor-proxy chronicle 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
btcpayserver/tor:0.4.8.10e9585b68dc6b
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

3,351
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

6,028
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u5

Open the chart page →

12,082
kube-acp-stackcloudentity2.28.02 of 7See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/redis-cluster:7.4.3-debian-12-r0a53d023fdfaf
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
gnutls28@3.7.3-4ubuntu1.6
3.7.3-4ubuntu1.7

Open the chart page →

21,034
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
gnutls28@3.5.18-1ubuntu1
3.5.18-1ubuntu1.6+esm2

Open the chart page →

29,920
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm1

Open the chart page →

11,827
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
robotshop/rs-mongodb:latest119b545823cd
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

29,602
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
gnutls28@3.7.3-4ubuntu1.7
no fix listed

Open the chart page →

18,374
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

12,501
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

12,197
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

11,636
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1

Open the chart page →

16,134
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm2

Open the chart page →

14,304
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

6,204
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm2

Open the chart page →

13,166
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

8,072
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.4

Open the chart page →

4,648
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31.02bf7f042e396
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

19,454
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

3,395
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

8,011
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

8,011
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.11 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

1 of the 7 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/rabbitmq:3.11.5-management1b0f675d2f24
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1

Open the chart page →

10,157
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
gnutls28@3.7.3-4ubuntu1.7
no fix listed

Open the chart page →

8,441
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
gnutls28@3.6.13-2ubuntu1.11
3.6.13-2ubuntu1.12+esm1

Open the chart page →

4,691
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

2,983
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

14,642

Container images carrying it

1,351 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.