StackRadar

CVE-2025-32989

Medium

Advisory

Published 10 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
881
of 17,787 indexed, latest versions
Container images
952
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 881 of 17,787 indexed charts deploy, on 952 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.7.3-4ubuntu1, 3.7.3-4ubuntu1.1, 3.7.3-4ubuntu1.2, 3.7.3-4ubuntu1.3+15 more3.7.3-4ubuntu1.7, 3.7.9-2+deb12u5, 3.8.3-1.1ubuntu3.4, 3.8.3-1.1ubuntu3.4+Fips1926
gnutlsapk3.8.5-r0, 3.8.8-r03.8.12-r026
OSV records
ALPINE-CVE-2025-32989DEBIAN-CVE-2025-32989UBUNTU-CVE-2025-32989
Also known as
USN-7635-1

Charts affected

881 by stars
ChartLatestAffected imagesRadar Score
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7

Open the chart page →

18,394
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.7.25d3f9bf9240b
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

48,833
IOMeshkubesphere-stable1.2.03 of 25See more

IOMesh kubesphere-stable 1.2.0

3 of the 25 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7
iomesh/node-disk-manager:1.8.0-2292ad270082e
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4

Open the chart page →

46,507
network-enforcerkubewardenVerified publisher0.1.21 of 3See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0.4ca08b7d2df5b
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

2,470
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7
penpotapp/exporter:2.2.15c835ffd87ab
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

17,002
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.42 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.4
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

20,299
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

6,879
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.4

Open the chart page →

3,143
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4

Open the chart page →

3,373
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

7,842
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

3,448
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u5

Open the chart page →

4,632
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

5,130
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

37,518
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7

Open the chart page →

10,773
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

7,516
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,507
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
gnutls28@3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.7

Open the chart page →

6,674
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

5,970
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

23,255
loxilbloxilbVerified publisher0.1.02 of 2See more

loxilb loxilb 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
gnutls28@3.7.3-4ubuntu1.9
no fix listed
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

4,502
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

9,786
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
gnutls28@3.7.3-4ubuntu1.7
no fix listed
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
gnutls28@3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.7

Open the chart page →

24,488
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
mvance/unbound:1.22.076906da36d18
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

10,908
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

6,722
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

8,351
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4

Open the chart page →

21,178
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.7

Open the chart page →

29,712
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

9,707
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7

Open the chart page →

3,707
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.4
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.4
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4

Open the chart page →

11,478
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

5,849
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

5,872
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

4,786
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

2,572
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

3,817
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

6,763
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

18,583
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

4,786
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4

Open the chart page →

3,322
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4

Open the chart page →

4,644
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

9,543
valkeymesosphere-stable3.0.221 of 1See more

valkey mesosphere-stable 3.0.22

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

2,559
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

2,589
postgresmicroboxlabs0.3.01 of 1See more

postgres microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
library/postgres:16.6557fea37a744
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

3,699
folding-at-homemidokura-communityVerified publisher0.0.31 of 1See more

folding-at-home midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
linuxserver/foldingathome:7.6.219a997426d71e
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4

Open the chart page →

2,938
teimilvus-helm1.6.01 of 1See more

tei milvus-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

3,063
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

12,637
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

42,983
session-scalermiqm0.1.01 of 1See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
miqm/session-scaler:0.1.0c5c211717d9b
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

2,865

Container images carrying it

952 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.