StackRadar

CVE-2025-32996

Medium

Advisory

Published 15 Apr 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
42
of 17,781 indexed, latest versions
Container images
40
deployed by those charts
Fix available
1 of 1
affected package

http-proxy-middleware can call writeBody twice because "else if" is not used

Carried by container images the latest versions of 42 of 17,781 indexed charts deploy, on 40 images.

Affected packageAffected versionsFixed inImages
http-proxy-middlewarenpm1.3.0, 1.3.1, 2.0.0, 2.0.1+5 more2.0.8, 3.0.440
OSV records
GHSA-4www-5p9h-95mh

Charts affected

42 by stars
ChartLatestAffected imagesRadar Score
lemmyananace-chartsVerified publisher0.6.151 of 5See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
dessalines/lemmy-ui:0.19.20ee4c620d8e93
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

7,210
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

3,795
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
http-proxy-middleware@1.3.1
2.0.8

Open the chart page →

7,579
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
http-proxy-middleware@2.0.4
2.0.8

Open the chart page →

18,517
skoonerchristianhuthVerified publisher0.4.01 of 1See more

skooner christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
http-proxy-middleware@1.3.1
2.0.8

Open the chart page →

1,341
data-fairdata354-helmVerified publisher1.1.26 of 12See more

data-fair data354-helm 1.1.2

6 of the 12 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
http-proxy-middleware@1.3.1
2.0.8
ghcr.io/data-fair/metrics:0a8d40779eeae
http-proxy-middleware@1.3.1
2.0.8
ghcr.io/data-fair/notify:3c739b74dabb0
http-proxy-middleware@1.3.1
2.0.8
ghcr.io/data-fair/portals:18b621866ceb2
http-proxy-middleware@1.3.1
2.0.8
ghcr.io/data-fair/processings:15a9216989707
http-proxy-middleware@1.3.1
2.0.8
ghcr.io/data-fair/simple-directory:438a4f32fad82
http-proxy-middleware@1.3.1
2.0.8

Open the chart page →

38,346
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

3,925
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
http-proxy-middleware@1.3.1
2.0.8

Open the chart page →

7,801
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
http-proxy-middleware@1.3.1
2.0.8

Open the chart page →

3,143
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

12,581
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
http-proxy-middleware@2.0.3
2.0.8

Open the chart page →

2,396
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
http-proxy-middleware@2.0.4
2.0.8

Open the chart page →

18,277
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

5,141
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

9,146
multichain-proxyethersphereVerified publisher0.1.01 of 1See more

multichain-proxy ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ethersphere/multichain-proxy:0.0.261f5419afbcd
http-proxy-middleware@3.0.3
3.0.4

Open the chart page →

795
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

3,407
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
http-proxy-middleware@2.0.7
2.0.8

Open the chart page →

11,812
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
http-proxy-middleware@2.0.0
2.0.8

Open the chart page →

7,232
skoonerkfirfer0.0.61 of 1See more

skooner kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
http-proxy-middleware@1.3.1
2.0.8

Open the chart page →

1,341
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
http-proxy-middleware@2.0.1
2.0.8

Open the chart page →

6,438
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

2,116
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

2,116
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

2,116
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

17,929
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
http-proxy-middleware@1.3.1
2.0.8

Open the chart page →

3,269
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

15,187
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

7,413
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

5,582
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

5,497
dashysergiotocaliniVerified publisher1.0.01 of 1See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
http-proxy-middleware@1.3.1
2.0.8

Open the chart page →

3,143
skoonerskooner0.2.21 of 1See more

skooner skooner 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
http-proxy-middleware@1.3.1
2.0.8

Open the chart page →

1,341
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
http-proxy-middleware@2.0.6
2.0.8

Open the chart page →

7,574
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
http-proxy-middleware@2.0.0
2.0.8

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
http-proxy-middleware@2.0.0
2.0.8

Open the chart page →

11,554
skoonervhdirkVerified publisher0.1.41 of 1See more

skooner vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
http-proxy-middleware@1.3.1
2.0.8

Open the chart page →

1,341
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-32996.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
http-proxy-middleware@1.3.0
2.0.8

Open the chart page →

1,752

Container images carrying it

40 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
http-proxy-middleware@1.3.1
2.0.8
4
rcdelacruz/my-strapi-app:js-amd6438007f358355
http-proxy-middleware@2.0.6
2.0.8
3
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
http-proxy-middleware@2.0.0
2.0.8
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
http-proxy-middleware@1.3.1
2.0.8
2
apimap/developer:v1.3.1406d3858e20c
http-proxy-middleware@2.0.6
2.0.8
1
apimap/portal:v2.4.0041a4790c65c
http-proxy-middleware@2.0.3
2.0.8
1
assistiot/open_api_frontend:1.0.1f11d82defc70
http-proxy-middleware@2.0.4
2.0.8
1
ccjacobs14/amazon:59a9b14a6f09e
http-proxy-middleware@2.0.6
2.0.8
1
coldatom/containers-security-front:latest7c2fbbb41bcf
http-proxy-middleware@2.0.6
2.0.8
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
http-proxy-middleware@2.0.6
2.0.8
1
ethersphere/multichain-proxy:0.0.261f5419afbcd
http-proxy-middleware@3.0.3
3.0.4
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
http-proxy-middleware@2.0.6
2.0.8
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
http-proxy-middleware@2.0.6
2.0.8
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
http-proxy-middleware@1.3.1
2.0.8
1
joplin/server:3.0-beta52af57880c0e
http-proxy-middleware@2.0.6
2.0.8
1
joplin/server:2.14.2-betab87564ef34e9
http-proxy-middleware@2.0.6
2.0.8
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
http-proxy-middleware@2.0.4
2.0.8
1
kyleslugg/klusterview:latestba8c36dfdfbd
http-proxy-middleware@2.0.6
2.0.8
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
http-proxy-middleware@2.0.6
2.0.8
1
lissy93/dashy:2.0.51991f7be5ed0
http-proxy-middleware@1.3.1
2.0.8
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
http-proxy-middleware@2.0.6
2.0.8
1
mitchxxx/amazon:214e72480ec63a
http-proxy-middleware@2.0.6
2.0.8
1
ooghenekaro/amazon:latest03394ba1d6d8
http-proxy-middleware@2.0.6
2.0.8
1
roadiehq/community-backstage-image:latestef355bf5b639
http-proxy-middleware@2.0.0
2.0.8
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
http-proxy-middleware@2.0.7
2.0.8
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
http-proxy-middleware@1.3.1
2.0.8
1
vlebediantsev/notes-admin-front:latest007c6670ff48
http-proxy-middleware@2.0.6
2.0.8
1
vlebediantsev/notes-project-front:latest945675fd2636
http-proxy-middleware@2.0.6
2.0.8
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
http-proxy-middleware@2.0.6
2.0.8
1
winfred008/amazon:910a68de5b398
http-proxy-middleware@2.0.6
2.0.8
1
ymuski/skooner:latest67819ca511b5
http-proxy-middleware@1.3.0
2.0.8
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
http-proxy-middleware@1.3.1
2.0.8
1
ghcr.io/data-fair/metrics:0a8d40779eeae
http-proxy-middleware@1.3.1
2.0.8
1
ghcr.io/data-fair/notify:3c739b74dabb0
http-proxy-middleware@1.3.1
2.0.8
1
ghcr.io/data-fair/portals:18b621866ceb2
http-proxy-middleware@1.3.1
2.0.8
1
ghcr.io/data-fair/processings:15a9216989707
http-proxy-middleware@1.3.1
2.0.8
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
http-proxy-middleware@1.3.1
2.0.8
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
http-proxy-middleware@2.0.6
2.0.8
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
http-proxy-middleware@2.0.6
2.0.8
1
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
http-proxy-middleware@2.0.1
2.0.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.