StackRadar

CVE-2025-32988

High

Advisory

Published 10 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,280
of 17,781 indexed, latest versions
Container images
1,344
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,280 of 17,781 indexed charts deploy, on 1,344 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+32 more3.5.18-1ubuntu1.6+esm2, 3.6.13-2ubuntu1.12+esm1, 3.7.3-4ubuntu1.7, 3.7.9-2+deb12u5+2 more1,318
gnutlsapk3.8.5-r0, 3.8.8-r03.8.12-r026
OSV records
ALPINE-CVE-2025-32988DEBIAN-CVE-2025-32988UBUNTU-CVE-2025-32988
Also known as
USN-7635-1, USN-7742-1

Charts affected

1,280 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7

Open the chart page →

6,556
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

11,367
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4

Open the chart page →

23,894
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

3,045
zabbixzabbix-communityVerified publisher7.1.04 of 5See more

zabbix zabbix-community 7.1.0

4 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

13,664
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm2

Open the chart page →

5,552
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
jpgouin/openldap:2.6.9-fixbfdd0088c776
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

5,919
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.7

Open the chart page →

9,145
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.4

Open the chart page →

3,475
milvusmilvus4.0.312 of 5See more

milvus milvus 4.0.31

2 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
milvusdb/milvus:v2.2.13a3a55e1c1497
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

32,259
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

10,622
signozsignoz0.141.11 of 5See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

7,568
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

2,800
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

4,802
difydoubanVerified publisher0.10.03 of 6See more

dify douban 0.10.0

3 of the 6 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

19,391
guacamoleberyju-org1.4.21 of 3See more

guacamole beryju-org 1.4.2

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4

Open the chart page →

3,606
vertical-pod-autoscalercowboysysopVerified publisher11.1.11 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

6,927
pyroscopegrafana2.3.11 of 3See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

3,157
plantumlstevehipwellVerified publisher3.49.01 of 1See more

plantuml stevehipwell 3.49.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

1,869
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm2

Open the chart page →

4,154
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

19,926
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

11,384
zabbixcetic3.1.34 of 5See more

zabbix cetic 3.1.3

4 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.7
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.7
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.7
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.7

Open the chart page →

33,725
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

4,293
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

6,543
imgproxyimgproxy1.1.01 of 1See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

2,321
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

5,240
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
gnutls28@3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.7

Open the chart page →

12,746
dgraphdgraph24.1.41 of 1See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
dgraph/dgraph:v24.1.4b57fa31f9b7f
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

2,993
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
netbirdio/management:0.45.10c9994b393ea
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4

Open the chart page →

8,390
litellm-helmlitellm1.100.11 of 2See more

litellm-helm litellm 1.100.1

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

5,003
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.701b81d1432c4
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

11,192
prometheus-cloudwatch-exporterprometheus-communityVerified publisher0.28.21 of 1See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:v0.16.071c2e988af06
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4

Open the chart page →

3,382
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm2

Open the chart page →

15,592
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1

Open the chart page →

7,880
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7

Open the chart page →

11,933
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

5,352
milvusmilvus-helm5.0.272 of 4See more

milvus milvus-helm 5.0.27

2 of the 4 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7
milvusdb/etcd:3.5.25-r1fededb2f2d63
gnutls28@3.7.3-4ubuntu1.7
no fix listed

Open the chart page →

10,670
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

5,786
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

6,328
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1

Open the chart page →

18,509
zookeepercloudpirates-zookeeperVerified publisher0.13.111 of 1See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5cab8944a33a1
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,924
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

14,956
contourcontour0.8.01 of 2See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.38.4447f857a0146
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

1,482
stackstorm-hastackstormVerified publisher1.1.012 of 17See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2api:3.86f56d239d280
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2auth:3.833ecfda16608
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2notifier:3.8f190a6212195
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2rulesengine:3.8259503496ff9
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2scheduler:3.8b1de2055c362
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2sensorcontainer:3.8b1a338f64773
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2stream:3.81c8904a3bf67
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2timersengine:3.81bf35bfaf00c
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2web:3.809989a26c8b7
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1
stackstorm/st2workflowengine:3.819fdfffdbba8
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm1

Open the chart page →

96,419
supabasetokens-studioVerified publisher1.0.06 of 14See more

supabase tokens-studio 1.0.0

6 of the 14 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.4
library/kong:3.8.0712e407b20ea
gnutls28@3.7.3-4ubuntu1.9
no fix listed
supabase/edge-runtime:v1.59.0eff9c554d649
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
supabase/postgres-meta:v0.84.2d0a96973e9f1
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
supabase/realtime:v2.33.8d207e6e23ad3
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
supabase/studio:20241021-9f9b08326d8070c55e9
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

23,123
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

8,493
krokicowboysysopVerified publisher6.1.04 of 5See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
yuzutech/kroki-bpmn:0.29.1444805c4b917
gnutls@3.8.8-r0
3.8.12-r0
yuzutech/kroki-diagramsnet:0.29.1b810edbf9c62
gnutls@3.8.8-r0
3.8.12-r0
yuzutech/kroki-excalidraw:0.29.157917319ea70
gnutls@3.8.8-r0
3.8.12-r0
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

6,743
bitcoindfold0.3.21 of 2See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
thesisrobot/bitcoind:v23.016b368e4d52c
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.7

Open the chart page →

3,454
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-32988.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7

Open the chart page →

7,857

Container images carrying it

1,344 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
apache/activemq-artemis:2.37.0bae523439ee3
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4
1
apache/airflow:2.8.4-python3.964e58748b6b9
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
1
apache/airflow:2.8.1e5560ad0b86e
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
gnutls28@3.7.3-4ubuntu1.7
no fix listed
1
apache/hertzbeat:1.8.075d48a62748f
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1
1
apache/iotdb:0.13.3-nodeafa47bf1692a
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm1
1
apache/kafka:4.1.0bff074a5d005
gnutls@3.8.8-r0
3.8.12-r0
1
apache/kafka:3.9.0fbc7d7c428e3
gnutls@3.8.5-r0
3.8.12-r0
1
apache/nifi-registry:1.27.063b8e3e40742
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
1
apachepulsar/pulsar:3.0.79c9947de139d
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7
1
apachepulsar/pulsar:2.9.0d056c89b7131
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
1
apachepulsar/pulsar:2.8.2d538416d5afe
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
1
apache/ranger:2.7.076c176e8a0e4
gnutls28@3.7.3-4ubuntu1.6
3.7.3-4ubuntu1.7
1
apache/rocketmq:5.3.0434d8398f996
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4
1
apache/rocketmq-exporter:0.0.2c8fb51195444
gnutls28@3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.7
1
apache/skywalking-oap-server:9.2.0133d35d2c263
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.7
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
1
apache/skywalking-ui:9.2.0295f1dc87d98
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.7
1
apache/skywalking-ui:8.9.180530f0308a5
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
1
apache/superset:4.0.1ab9467fd712c
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
1
apache/tika:2.9.0.092d055a84e9e
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7
1
aristidetm/basic-notebook:3.6.5469dbc951224
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
1
arunvelsriram/utils:latest655ad18fd8d6
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm1
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
1
assistiot/identity-manager_db:latest0d3e6d35f168
gnutls28@3.7.9-2
3.7.9-2+deb12u5
1
assistiot/location_processing:lateste9bae124095f
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.7
1
assistiot/open_api_backend:1.1.230812ba93555
gnutls28@3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.7
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
gnutls28@3.7.9-2
3.7.9-2+deb12u5
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm1
1
atlassian/confluence-server:7.10.03b9222ab32ef
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.7
1
atlassian/jira-software:8.14.037bc46cbec1a
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.7
1
atlassian/jira-software:9.7.264a75aa4ec4e
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
1
avinash263/pyredis263:latestaa2b8727f1a6
gnutls28@3.7.9-2
3.7.9-2+deb12u5
1
avzini/web-app:latestf40b30210ed0
gnutls28@3.7.9-2
3.7.9-2+deb12u5
1
baserow/backend:1.31.1e0b3c8130b91
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
1
baserow/baserow:1.30.1df0c42eb67e8
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm1
1
beanbag/reviewboard:latest6b840f546e1c
gnutls28@3.7.3-4ubuntu1.9
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.