StackRadar

CVE-2025-3576

Medium

Advisory

Published 15 Apr 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,559
of 17,787 indexed, latest versions
Container images
1,691
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: krb5 security update

Carried by container images the latest versions of 1,559 of 17,787 indexed charts deploy, on 1,691 images.

Affected packageAffected versionsFixed inImages
krb5deb1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+40 more1.12+dfsg-2ubuntu5.4+esm7, 1.13.2+dfsg-5ubuntu2.2+esm7, 1.16-2ubuntu0.4+esm5, 1.17-6ubuntu4.11+4 more1,447
krb5rpm1.16.1-22.el8, 1.17-9.el8, 1.17-18.el8, 1.17-19.el8_2+25 more0:1.17-19.el8_2.3, 0:1.18.2-9.el8_4.3, 0:1.18.2-16.el8_6.4, 0:1.18.2-26.el8_8.5+5 more244
OSV records
DEBIAN-CVE-2025-3576RHSA-2025:13664RHSA-2025:13777RHSA-2025:15001RHSA-2025:15002RHSA-2025:15003RHSA-2025:15004RHSA-2025:8411RHSA-2025:9430RLSA-2025:8411RLSA-2025:9430UBUNTU-CVE-2025-3576DLA-4195-1SUSE-SU-2025:3699-1
Also known as
USN-7542-1

Charts affected

1,559 by stars
ChartLatestAffected imagesRadar Score
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

15,345
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

7,940
veleromesosphere3.2.51 of 1See more

velero mesosphere 3.2.5

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

1,871
kubecostmesosphere-stable0.37.52 of 9See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

17,755
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,635
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
krb5@1.18.2-30.el8_10
0:1.18.2-32.el8_10

Open the chart page →

3,794
keycloak-operatornewsaktuell0.1.71 of 1See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4

Open the chart page →

5,066
kobotoolboxone-acre-fundVerified publisher0.7.43 of 9See more

kobotoolbox one-acre-fund 0.7.4

3 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
kobotoolbox/kpi:2.022.24dbcacc01bccd4
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
library/nginx:1.212bcabc23b454
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

18,518
opentelemetry-ebpfopentelemetry-helmVerified publisher0.1.74 of 4See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

4 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
otel/opentelemetry-ebpf-k8s-relay:v0.10.20980d0ab28bf
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-kernel-collector:v0.10.269e19991e328
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-reducer:v0.10.26c49acfbc6f1
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,573
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

4,045
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
krb5@1.18.2-8.3.el8_4
0:1.18.2-9.el8_4.3

Open the chart page →

107,899
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
krb5@1.18.2-26.el8
0:1.18.2-32.el8_10

Open the chart page →

2,994
proxysqlproxysql-cluster1.7.01 of 1See more

proxysql proxysql-cluster 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
proxysql/proxysql:2.3.08d710e80c77b
krb5@1.18.3-6
1.18.3-6+deb11u7

Open the chart page →

989
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

5,079
repoflowrepoflow-helm-public0.9.12 of 8See more

repoflow repoflow-helm-public 0.9.1

2 of the 8 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
krb5@1.17-6ubuntu4.6
1.17-6ubuntu4.11
library/postgres:16.24aea012537ed
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

13,615
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

24,549
soketisoketi2.0.01 of 1See more

soketi soketi 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/soketi/soketi:1.6-16-debian713223456cf1
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

1,636
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
krb5@1.17-6ubuntu4.4
1.17-6ubuntu4.11

Open the chart page →

15,525
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

7,064
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.266 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

6 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/postgresql:16.0.0-debian-11-r3b8a21df9b747
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thingsboard/tb-node:3.6.0f40a542832c4
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thingsboard/tb-web-ui:3.6.0d388378062cc
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

14,568
feedbacksystemthm-mni-iiVerified publisher0.47.15 of 10See more

feedbacksystem thm-mni-ii 0.47.1

5 of the 10 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/mysql:8.0.35-debian-11-r2be03e8ea6129
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thmmniii/fbs-core:v1.27.15438517d9fc2
krb5@1.19.2-2
1.19.2-2ubuntu0.7

Open the chart page →

28,579
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.7

Open the chart page →

10,355
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

18,149
roundcubevolker-raschekVerified publisher0.3.11 of 1See more

roundcube volker-raschek 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

1,797
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

6,085
keycloak-operatorwiremindVerified publisher0.0.141 of 1See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

4,713
wombatwombatOfficialVerified publisher4.1.281 of 1See more

wombat wombat 4.1.28

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
erlangsolutions/wombatoam:4.1.284680c990147a
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

3,697
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

4,041
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
krb5@1.21.1-6.el9
0:1.21.1-8.el9_6

Open the chart page →

1,836
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7

Open the chart page →

19,769
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

13,683
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/python:3.12.9-bullseyeed4450bab88f
krb5@1.18.3-6+deb11u6
1.18.3-6+deb11u7

Open the chart page →

3,744
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

12,061
clearml-servingallegroaiVerified publisher1.6.24 of 9See more

clearml-serving allegroai 1.6.2

4 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

17,879
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7

Open the chart page →

8,384
openldapalphani-helm-chartsVerified publisher2.4.571 of 2See more

openldap alphani-helm-charts 2.4.57

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
roertel/openldap:1.0.00edb2d98d276
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

3,067
whisperandrenarchyVerified publisher1.0.01 of 1See more

whisper andrenarchy 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:1.0.080b99ddeef6c
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

687
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
ddosify/selfhosted_backend:3.2.93c11e3182652
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

22,233
soarv113assist-iot-cybersecurity-monitoring-soar0.1.33 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

3 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.11
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

17,946
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
hyperledger/fabric-couchdb:0.4.15f6c724592abf
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

77,821
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
hyperledger/fabric-couchdb:0.4.15f6c724592abf
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

77,802
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

13,199
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

7,239
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

7,239
block-buster-helm-appblock-buster-app7.6.01 of 1See more

block-buster-helm-app block-buster-app 7.6.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
siddharth67/block-buster-dev:7.6.04e1151ea5774
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

977
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,042
csgobuttahtoastVerified publisher0.2.31 of 1See more

csgo buttahtoast 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
cm2network/csgo:sourcemod93df54a2e4fb
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

376
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

84,678
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

84,678
passbolt-hachristianhuthVerified publisher6.0.13 of 4See more

passbolt-ha christianhuth 6.0.1

3 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
passbolt/passbolt:3.4.0-ce-non-root655547e17263
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

10,873

Container images carrying it

1,691 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/kibana:7.17.3e2e2031c15be
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
library/logstash:7.17.817a4f64e9cf5
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
library/mariadb:10.11.21c33370a599c
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7
1
library/mariadb:10.10.2bfc25a68e113
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7
1
library/mariadb:10.9.4fbb8456ebdb1
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7
1
library/matomo:5.1.2-apache2415789e1602
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
library/mongo:7.0.140032d2ca20db
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7
1
library/mongo:4.4.1305678ae4e5e1
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
library/mongo:4.4-bionic3d0e6df9fd5b
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
1
library/mongo:5.0.14-focal50cae5081ab4
krb5@1.17-6ubuntu4.2
1.17-6ubuntu4.11
1
library/mongo:6.0.12646902910d6a
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
1
library/mongo:4.2699d652ed674
krb5@1.16-2ubuntu0.4
1.16-2ubuntu0.4+esm5
1
library/mongo:4.2.16ca49afbcb2b
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm5
1
library/mongo:6.0.271a63fc2438e
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
library/mongo:5.0.217c81758cb295
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.11
1
library/mongo:4.2.21-bionic9cb28f7291d9
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
1
library/mongo:7.0.12ae1cf99fa7bf
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7
1
library/mongo:4.4.18d23ec07162ca
krb5@1.17-6ubuntu4.2
1.17-6ubuntu4.11
1
library/monica:3.7.0-apacheceb1ba4196ab
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
library/neo4j:4.2.4348e3f56faa2
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
library/neo4j:4.4.43c9fea42bd5a
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
library/neo4j:5.18.18f01f7bb053e
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
1
library/nextcloud:31.0.6-apache588609d76b21
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
1
library/nginx:1.27.409369da6b103
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
library/nginx:1.23.03536d368b898
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
library/nginx:1.276784fb0834aa
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
1
library/nginx:1.25.167f9a4f10d14
krb5@1.20.1-2
1.20.1-2+deb12u4
1
library/nginx:1.25.49ff236ed47fe
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
1
library/nginx:1.23.2ab589a3c466e
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
library/nginx:1.23.3f4e3b6489888
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
library/nginx:1.23f5747a42e3ad
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
library/nginx:1.27.3fb197595ebe7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
library/php:7.3-apacheb9872cd287ef
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
library/postgres:13.703652c675ae1
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
library/postgres:14.32d1e636f0778
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
library/postgres:17.4304ab8135187
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
library/postgres:16.6557fea37a744
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
library/postgres:13.11-bullseye5c265bf1fd30
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
library/postgres:15.38775adb39f0d
krb5@1.20.1-2
1.20.1-2+deb12u4
1
library/postgres:13.12ced3ba927f4c
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
1
library/postgres:14.0db927beee892
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
library/postgres:14.6f565573d74ae
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
library/postgres:17.5-bookwormfbcea1bd13b6
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
1
library/python:3.8d41127070014
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
library/python:3.12.9-bullseyeed4450bab88f
krb5@1.18.3-6+deb11u6
1.18.3-6+deb11u7
1
library/rabbitmq:3.12.100742852455ad
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
1
library/redis:7.0.4091a7b5de688
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7
1
library/redis:7-bullseye6a5130174e14
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
library/redis:7.0.1092b8b307ee28
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
library/solr:8.7.0d124efd81fbb
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.