StackRadar

CVE-2025-32989

Medium

Advisory

Published 10 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
881
of 17,787 indexed, latest versions
Container images
952
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 881 of 17,787 indexed charts deploy, on 952 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.7.3-4ubuntu1, 3.7.3-4ubuntu1.1, 3.7.3-4ubuntu1.2, 3.7.3-4ubuntu1.3+15 more3.7.3-4ubuntu1.7, 3.7.9-2+deb12u5, 3.8.3-1.1ubuntu3.4, 3.8.3-1.1ubuntu3.4+Fips1926
gnutlsapk3.8.5-r0, 3.8.8-r03.8.12-r026
OSV records
ALPINE-CVE-2025-32989DEBIAN-CVE-2025-32989UBUNTU-CVE-2025-32989
Also known as
USN-7635-1

Charts affected

881 by stars
ChartLatestAffected imagesRadar Score
hiveopstty0.1.91 of 4See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

4,539
grrosdfir-infrastructureVerified publisher1.0.32 of 5See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

10,965
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.03 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

3 of the 40 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnamilegacy/git:latest4b08d0c5af8d
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5
library/mariadb:11.3.2e101f9db3191
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

72,154
automatap2p-avs0.1.01 of 2See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
gnutls28@3.7.3-4ubuntu1.8
no fix listed

Open the chart page →

3,660
avap2p-avs0.1.01 of 1See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
avaprotocol/ap-avs:1.2.0c430ea5c37d6
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

3,133
k3p2p-avs0.1.51 of 2See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
gnutls28@3.7.3-4ubuntu1.8
no fix listed

Open the chart page →

2,339
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
gnutls28@3.7.3-4ubuntu1.8
no fix listed

Open the chart page →

4,038
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u5

Open the chart page →

11,095
ungatep2p-avs0.1.03 of 3See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
gnutls28@3.7.3-4ubuntu1.8
no fix listed

Open the chart page →

25,681
p4p40.1.02 of 7See more

p4 p4 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
library/rabbitmq:3.11-managementc3f70098e01d
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.7
mastercloudapps/planner:v1.2340a950b311b2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.7

Open the chart page →

27,667
pacmanpacman-mhVerified publisher0.1.281 of 2See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
library/mongo:7.0.28-jammy88785f6f665a
gnutls28@3.7.3-4ubuntu1.7
no fix listed

Open the chart page →

3,601
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.4

Open the chart page →

4,159
pet-battle-nsffpetbattle0.0.21 of 4See more

pet-battle-nsff petbattle 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
tensorflow/serving:latest8a208c232297
gnutls28@3.7.3-4ubuntu1.8
no fix listed

Open the chart page →

3,717
clickhousepetersandor14.3.21 of 1See more

clickhouse petersandor 14.3.2

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.3.2.398745843b17f9
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

2,220
mariadbpetersandor15.2.51 of 1See more

mariadb petersandor 15.2.5

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnami/mariadb:11.7.216a7dae804fb
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

2,758
memcachedpetersandor14.1.61 of 1See more

memcached petersandor 14.1.6

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnami/memcached:1.6.38dd8f2cba9a5b
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

2,280
mongodbpetersandor14.1.81 of 1See more

mongodb petersandor 14.1.8

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnami/mongodb:8.0.8b3bd5b6be9a0
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

4,007
redispetersandor15.2.21 of 1See more

redis petersandor 15.2.2

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnami/redis:7.4.24e65bf641805
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

2,662
pgcatpgcatVerified publisher0.2.51 of 1See more

pgcat pgcat 0.2.5

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u5

Open the chart page →

3,316
redis-stack-awsphamxuanduong0.1.01 of 1See more

redis-stack-aws phamxuanduong 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.0-v0887cf87cc744
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

3,277
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

5,731
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

8,215
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.4
knspar/phronetis-operator:0.1.60c4f0543ee58
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

15,077
piepieVerified publisher0.11.11 of 1See more

pie pie 0.11.1

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/topolvm/pie:0.18.0aa467443e407
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,149
firehose-corepinaxVerified publisher0.1.11 of 2See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
sigp/lighthouse:latest-amd6450f66cfebb6d
gnutls28@3.7.3-4ubuntu1.7
no fix listed

Open the chart page →

3,527
firehose-ethereumpinaxVerified publisher0.3.22 of 2See more

firehose-ethereum pinax 0.3.2

2 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
sigp/lighthouse:latest-amd6450f66cfebb6d
gnutls28@3.7.3-4ubuntu1.7
no fix listed
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

7,149
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

11,373
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.4+Fips1

Open the chart page →

4,938
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

11,017
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.7

Open the chart page →

7,616
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.4

Open the chart page →

25,626
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

11,680
libretimepodzone-chartsVerified publisher0.4.11 of 9See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
library/postgres:16.24aea012537ed
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

11,181
static-sitepodzone-chartsVerified publisher0.1.11 of 2See more

static-site podzone-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

6,575
polyaxonpolyaxon2.16.41 of 5See more

polyaxon polyaxon 2.16.4

1 of the 5 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

13,520
beylaportefaix-hub0.1.01 of 1See more

beyla portefaix-hub 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
grafana/beyla:1.3.336d07f8d276e
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

2,452
quickwitportefaix-hub0.1.11 of 1See more

quickwit portefaix-hub 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.1d29332bdadcc
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

3,185
postgrespostgresVerified publisher0.1.11 of 1See more

postgres postgres 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
library/postgres:13.12ced3ba927f4c
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

4,363
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.7

Open the chart page →

27,649
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

4,996
flink-kubernetes-operatorpresto-loadbalancer1.10.01 of 1See more

flink-kubernetes-operator presto-loadbalancer 1.10.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.7

Open the chart page →

3,316
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

6,932
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u5

Open the chart page →

4,226
flaskDiaryptj-miniproject2.1.21 of 2See more

flaskDiary ptj-miniproject 2.1.2

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

2,965
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
gnutls28@3.7.9-2
3.7.9-2+deb12u5

Open the chart page →

12,652
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

11,400
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u5

Open the chart page →

11,400
unifiqaoruVerified publisher1.1.21 of 2See more

unifi qaoru 1.1.2

1 of the 2 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
library/mongo:7.0-jammy406a4fdca9fc
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

3,719
qualys-caqualys-ca-helm3.1.01 of 1See more

qualys-ca qualys-ca-helm 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
nelssec/qualys-agent-bootstrapper:v2.1.05e471f0cdeaa
gnutls28@3.7.3-4ubuntu1.7
no fix listed

Open the chart page →

1,917
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32989.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5

Open the chart page →

7,691

Container images carrying it

952 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u5
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.